Update files

.Trash-1000/files/nextcloud.cfg

@@ -0,0 +1,54 @@
+[General]
+clientPreviousVersion=
+clientVersion=4.0.6
+confirmExternalStorage=true
+desktopEnterpriseChannel=stable
+isVfsEnabled=false
+launchOnSystemStartup=true
+monoIcons=false
+moveToTrash=false
+newBigFolderSizeLimit=500
+notifyExistingFoldersOverLimit=false
+optionalServerNotifications=true
+overrideLocalDir=
+overrideServerUrl=
+promptDeleteAllFiles=false
+showCallNotifications=true
+showChatNotifications=true
+showInExplorerNavigationPane=false
+stopSyncingExistingFoldersOverLimit=false
+updateChannel=stable
+useNewBigFolderSizeLimit=true
+
+[Accounts]
+0\Folders\1\ignoreHiddenFiles=false
+0\Folders\1\journalPath=.sync_0a9bf4139ff3.db
+0\Folders\1\localPath=/home/chris/Tower/
+0\Folders\1\paused=false
+0\Folders\1\targetPath=/
+0\Folders\1\version=2
+0\Folders\1\virtualFilesMode=off
+0\authType=webflow
+0\dav_user=chris
+0\desktopEnterpriseChannel=invalid
+0\displayName=chris
+0\encryptionCertificateSha256Fingerprint=@ByteArray()
+0\networkDownloadLimit=0
+0\networkDownloadLimitSetting=0
+0\networkProxyHostName=
+0\networkProxyNeedsAuth=false
+0\networkProxyPort=0
+0\networkProxyType=2
+0\networkProxyUser=
+0\networkUploadLimit=0
+0\networkUploadLimitSetting=0
+0\serverColor=@Variant(\0\0\0\x43\x1\xff\xff\0\0\x82\x82\xc9\xc9\0\0)
+0\serverHasValidSubscription=false
+0\serverTextColor=@Variant(\0\0\0\x43\x1\xff\xff\xff\xff\xff\xff\xff\xff\0\0)
+0\serverVersion=32.0.5.0
+0\url=https://tower.scarif.space
+0\version=13
+0\webflow_user=chris
+
+[Nextcloud]
+autoUpdateCheck=true

.Trash-1000/info/nextcloud.cfg.trashinfo

@@ -0,0 +1,3 @@
+[Trash Info]
+Path=/home/chris/.config/nixos/initial-configs/nextcloud.cfg
+DeletionDate=2026-03-23T21:32:08

README.md

@@ -0,0 +1,93 @@
+# NixOS Configuration
+
+This repository contains the declarative NixOS configuration for my machines, utilizing Flakes, Home Manager, and Disko for dynamic, multi-host deployment.
+
+## Hardware Configuration Generation
+
+When setting up a new host, or updating an existing one, you'll need to generate a hardware-specific configuration file so NixOS knows what kernel modules and microcode to load for your exact components.
+
+To generate the hardware configuration, run the following command directly on the target machine:
+
+```bash
+# Replace 'hostname' with the name of your machine (e.g., 'station' or 'stationette')
+# We use 'nix shell' since the nixos-install-tools package doesn't have a default executable.
+sudo $(which nix) --extra-experimental-features "nix-command flakes" shell nixpkgs#nixos-install-tools -c nixos-generate-config --no-filesystems --show-hardware-config --dir . > hardware/<hostname>-hardware-configuration.nix
+```
+
+Ensure this file is tracked by git before attempting to evaluate or build the flake:
+
+```bash
+git add hardware/<hostname>-hardware-configuration.nix
+```
+
+## Installation
+
+This configuration uses [Disko](https://github.com/nix-community/disko) to manage declarative disk partitioning and formatting. The disk layouts are defined in `hardware/disko.nix`.
+
+> [!WARNING]
+> Running the Disko installation commands below will **completely erase** the target disks. Ensure you have backups of any important data before proceeding.
+
+### Method 1: Installing Directly from Gitea (Remote)
+
+You can install NixOS directly from this repository without needing to clone it manually first. Boot into a NixOS live USB, open a terminal, and run the following command.
+
+Replace `<hostname>` with your target machine (e.g., `stationette`) and `<disk>` with the target block device (e.g., `/dev/sda` or `/dev/nvme0n1`):
+
+```bash
+nix --extra-experimental-features "nix-command flakes" run github:nix-community/disko/latest#disko-install -- \
+  --flake git+https://labs.scarif.space/chris/nixos/#<hostname> \
+  --disk <hostname> \
+  --write-efi-boot-entries <disk>
+```
+
+#### Examples:
+**For `stationette`:**
+```bash
+nix --extra-experimental-features "nix-command flakes" run github:nix-community/disko/latest#disko-install -- \
+  --flake git+https://labs.scarif.space/chris/nixos/#stationette \
+  --disk stationette \
+  --write-efi-boot-entries /dev/sda
+```
+
+**For `station`:**
+```bash
+nix --extra-experimental-features "nix-command flakes" run github:nix-community/disko/latest#disko-install -- \
+  --flake git+https://labs.scarif.space/chris/nixos/#station \
+  --disk station \
+  --write-efi-boot-entries /dev/nvme0n1
+```
+
+### Method 2: Installing from a Local Clone
+
+If you prefer to clone the repository first so you can make manual adjustments (like generating the hardware configuration) before deploying:
+
+1. Boot into a NixOS live USB.
+2. Clone the repository:
+   ```bash
+   git clone https://labs.scarif.space/chris/nixos.git /mnt/etc/nixos
+   cd /mnt/etc/nixos
+   ```
+3. Generate your hardware configuration (if needed):
+   ```bash
+   nixos-generate-config --no-filesystems --show-hardware-config > hardware/<hostname>-hardware-configuration.nix
+   git add hardware/<hostname>-hardware-configuration.nix
+   ```
+4. Run the Disko installer using the local flake:
+   ```bash
+   nix --extra-experimental-features "nix-command flakes" run github:nix-community/disko/latest#disko-install -- \
+     --flake .#<hostname> \
+     --disk <hostname> \
+     --write-efi-boot-entries <disk>
+   ```
+
+*(Remember to replace `<hostname>` and `<disk>` with your specific machine's details, e.g., `.m#stationette` and `/dev/sda`)*.
+
+---
+
+### Rebuilding the System
+
+Once installed and booted into your new system, you can pull the latest changes and apply updates using standard NixOS rebuild commands:
+
+```bash
+sudo nixos-rebuild switch --flake .#<hostname>
+```

alejandra.toml

@@ -0,0 +1 @@
+# indentation = "FourSpaces"

flake.lock

@@ -1,5 +1,43 @@
 {
   "nodes": {
+    "disko": {
+      "inputs": {
+        "nixpkgs": "nixpkgs"
+      },
+      "locked": {
+        "lastModified": 1768920986,
+        "narHash": "sha256-CNzzBsRhq7gg4BMBuTDObiWDH/rFYHEuDRVOwCcwXw4=",
+        "owner": "nix-community",
+        "repo": "disko",
+        "rev": "de5708739256238fb912c62f03988815db89ec9a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "ref": "latest",
+        "repo": "disko",
+        "type": "github"
+      }
+    },
+    "elephant": {
+      "inputs": {
+        "nixpkgs": "nixpkgs_2",
+        "systems": "systems"
+      },
+      "locked": {
+        "lastModified": 1774640361,
+        "narHash": "sha256-5PLTPbnbtK0iDbsB9yFeHr5y/pv6/XzoVm/CDeXXt/c=",
+        "owner": "abenz1267",
+        "repo": "elephant",
+        "rev": "d30652147d8e16ebc849b779b8ef495a894b0dd4",
+        "type": "github"
+      },
+      "original": {
+        "owner": "abenz1267",
+        "repo": "elephant",
+        "type": "github"
+      }
+    },
     "firefox-addons": {
       "inputs": {
         "nixpkgs": [
@@ -8,11 +46,11 @@
       },
       "locked": {
         "dir": "pkgs/firefox-addons",
-        "lastModified": 1771732978,
+        "lastModified": 1775448173,
-        "narHash": "sha256-o7gZh/eXFkEEmzwlBdIbgCJhmdlqQhOhVjudqgsIefg=",
+        "narHash": "sha256-C6OJuD3A4KDNz4QaYedkYtXzKHPecG5YYyMGLq7UwY8=",
         "owner": "rycee",
         "repo": "nur-expressions",
-        "rev": "18226106e18bc40cce99d436ee741a946f1888f6",
+        "rev": "5b0fb7d54dea38c47e5c58058c166e790a0e0cf1",
         "type": "gitlab"
       },
       "original": {
@@ -22,6 +60,121 @@
         "type": "gitlab"
       }
     },
+    "flake-compat": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1767039857,
+        "narHash": "sha256-vNpUSpF5Nuw8xvDLj2KCwwksIbjua2LZCqhV1LNRDns=",
+        "owner": "NixOS",
+        "repo": "flake-compat",
+        "rev": "5edf11c44bc78a0d334f6334cdaf7d60d732daab",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "repo": "flake-compat",
+        "type": "github"
+      }
+    },
+    "flake-parts": {
+      "inputs": {
+        "nixpkgs-lib": "nixpkgs-lib"
+      },
+      "locked": {
+        "lastModified": 1775087534,
+        "narHash": "sha256-91qqW8lhL7TLwgQWijoGBbiD4t7/q75KTi8NxjVmSmA=",
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "rev": "3107b77cd68437b9a76194f0f7f9c55f2329ca5b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "type": "github"
+      }
+    },
+    "flake-parts_2": {
+      "inputs": {
+        "nixpkgs-lib": "nixpkgs-lib_2"
+      },
+      "locked": {
+        "lastModified": 1763759067,
+        "narHash": "sha256-LlLt2Jo/gMNYAwOgdRQBrsRoOz7BPRkzvNaI/fzXi2Q=",
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "rev": "2cccadc7357c0ba201788ae99c4dfa90728ef5e0",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "type": "github"
+      }
+    },
+    "flake-utils": {
+      "inputs": {
+        "systems": "systems_2"
+      },
+      "locked": {
+        "lastModified": 1731533236,
+        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "git-hooks": {
+      "inputs": {
+        "flake-compat": "flake-compat",
+        "gitignore": "gitignore",
+        "nixpkgs": [
+          "nix-gaming",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1775036584,
+        "narHash": "sha256-zW0lyy7ZNNT/x8JhzFHBsP2IPx7ATZIPai4FJj12BgU=",
+        "owner": "cachix",
+        "repo": "git-hooks.nix",
+        "rev": "4e0eb042b67d863b1b34b3f64d52ceb9cd926735",
+        "type": "github"
+      },
+      "original": {
+        "owner": "cachix",
+        "repo": "git-hooks.nix",
+        "type": "github"
+      }
+    },
+    "gitignore": {
+      "inputs": {
+        "nixpkgs": [
+          "nix-gaming",
+          "git-hooks",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1709087332,
+        "narHash": "sha256-HG2cCnktfHsKV0s4XW83gU3F57gaTljL9KNSuG6bnQs=",
+        "owner": "hercules-ci",
+        "repo": "gitignore.nix",
+        "rev": "637db329424fd7e46cf4185293b9cc8c88c95394",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "gitignore.nix",
+        "type": "github"
+      }
+    },
     "home-manager": {
       "inputs": {
         "nixpkgs": [
@@ -29,43 +182,133 @@
         ]
       },
       "locked": {
-        "lastModified": 1714043624,
+        "lastModified": 1775425411,
-        "narHash": "sha256-Xn2r0Jv95TswvPlvamCC46wwNo8ALjRCMBJbGykdhcM=",
+        "narHash": "sha256-KY6HsebJHEe5nHOWP7ur09mb0drGxYSzE3rQxy62rJo=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "86853e31dc1b62c6eeed11c667e8cdd0285d4411",
+        "rev": "0d02ec1d0a05f88ef9e74b516842900c41f0f2fe",
         "type": "github"
       },
       "original": {
         "owner": "nix-community",
-        "ref": "release-23.11",
+        "ref": "release-25.11",
         "repo": "home-manager",
         "type": "github"
       }
     },
+    "home-manager_2": {
+      "inputs": {
+        "nixpkgs": [
+          "impermanence",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1768598210,
+        "narHash": "sha256-kkgA32s/f4jaa4UG+2f8C225Qvclxnqs76mf8zvTVPg=",
+        "owner": "nix-community",
+        "repo": "home-manager",
+        "rev": "c47b2cc64a629f8e075de52e4742de688f930dc6",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "repo": "home-manager",
+        "type": "github"
+      }
+    },
+    "impermanence": {
+      "inputs": {
+        "home-manager": "home-manager_2",
+        "nixpkgs": "nixpkgs_3"
+      },
+      "locked": {
+        "lastModified": 1769548169,
+        "narHash": "sha256-03+JxvzmfwRu+5JafM0DLbxgHttOQZkUtDWBmeUkN8Y=",
+        "owner": "nix-community",
+        "repo": "impermanence",
+        "rev": "7b1d382faf603b6d264f58627330f9faa5cba149",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "repo": "impermanence",
+        "type": "github"
+      }
+    },
+    "nix-gaming": {
+      "inputs": {
+        "flake-parts": "flake-parts",
+        "git-hooks": "git-hooks",
+        "nixpkgs": "nixpkgs_4"
+      },
+      "locked": {
+        "lastModified": 1775445570,
+        "narHash": "sha256-Vo+fChd5PkSnbHDKPQSROMDPmPPuFsRTqeVpEWd7afU=",
+        "owner": "fufexan",
+        "repo": "nix-gaming",
+        "rev": "98a1511fbc84643be14c6c60816bdad1d00a004a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "fufexan",
+        "repo": "nix-gaming",
+        "type": "github"
+      }
+    },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1771903837,
+        "lastModified": 1768661221,
-        "narHash": "sha256-sdaqdnsQCv3iifzxwB22tUwN/fSHoN7j2myFW5EIkGk=",
+        "narHash": "sha256-MJwOjrIISfOpdI9x4C+5WFQXvHtOuj5mqLZ4TMEtk1M=",
-        "owner": "nixos",
+        "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "e764fc9a405871f1f6ca3d1394fb422e0a0c3951",
+        "rev": "3327b113f2ef698d380df83fbccefad7e83d7769",
         "type": "github"
       },
       "original": {
-        "owner": "nixos",
+        "owner": "NixOS",
-        "ref": "nixos-25.11",
+        "ref": "nixpkgs-unstable",
         "repo": "nixpkgs",
         "type": "github"
       }
     },
+    "nixpkgs-lib": {
+      "locked": {
+        "lastModified": 1774748309,
+        "narHash": "sha256-+U7gF3qxzwD5TZuANzZPeJTZRHS29OFQgkQ2kiTJBIQ=",
+        "owner": "nix-community",
+        "repo": "nixpkgs.lib",
+        "rev": "333c4e0545a6da976206c74db8773a1645b5870a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "repo": "nixpkgs.lib",
+        "type": "github"
+      }
+    },
+    "nixpkgs-lib_2": {
+      "locked": {
+        "lastModified": 1761765539,
+        "narHash": "sha256-b0yj6kfvO8ApcSE+QmA6mUfu8IYG6/uU28OFn4PaC8M=",
+        "owner": "nix-community",
+        "repo": "nixpkgs.lib",
+        "rev": "719359f4562934ae99f5443f20aa06c2ffff91fc",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "repo": "nixpkgs.lib",
+        "type": "github"
+      }
+    },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1714076141,
+        "lastModified": 1775036866,
-        "narHash": "sha256-Drmja/f5MRHZCskS6mvzFqxEaZMeciScCTFxWVLqWEY=",
+        "narHash": "sha256-ZojAnPuCdy657PbTq5V0Y+AHKhZAIwSIT2cb8UgAz/U=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "7bb2ccd8cdc44c91edba16c48d2c8f331fb3d856",
+        "rev": "6201e203d09599479a3b3450ed24fa81537ebc4e",
         "type": "github"
       },
       "original": {
@@ -75,12 +318,194 @@
         "type": "github"
       }
     },
+    "nixpkgs_2": {
+      "locked": {
+        "lastModified": 1764242076,
+        "narHash": "sha256-sKoIWfnijJ0+9e4wRvIgm/HgE27bzwQxcEmo2J/gNpI=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "2fad6eac6077f03fe109c4d4eb171cf96791faa4",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs_3": {
+      "locked": {
+        "lastModified": 1768564909,
+        "narHash": "sha256-Kell/SpJYVkHWMvnhqJz/8DqQg2b6PguxVWOuadbHCc=",
+        "owner": "nixos",
+        "repo": "nixpkgs",
+        "rev": "e4bae1bd10c9c57b2cf517953ab70060a828ee6f",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nixos",
+        "ref": "nixos-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs_4": {
+      "locked": {
+        "lastModified": 1775126147,
+        "narHash": "sha256-J0dZU4atgcfo4QvM9D92uQ0Oe1eLTxBVXjJzdEMQpD0=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "8d8c1fa5b412c223ffa47410867813290cdedfef",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixpkgs-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs_5": {
+      "locked": {
+        "lastModified": 1775305101,
+        "narHash": "sha256-/74n1oQPtKG52Yw41cbToxspxHbYz6O3vi+XEw16Qe8=",
+        "owner": "nixos",
+        "repo": "nixpkgs",
+        "rev": "36a601196c4ebf49e035270e10b2d103fe39076b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nixos",
+        "ref": "nixos-25.11",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
     "root": {
       "inputs": {
+        "disko": "disko",
+        "elephant": "elephant",
         "firefox-addons": "firefox-addons",
         "home-manager": "home-manager",
-        "nixpkgs": "nixpkgs",
+        "impermanence": "impermanence",
-        "nixpkgs-unstable": "nixpkgs-unstable"
+        "nix-gaming": "nix-gaming",
+        "nixpkgs": "nixpkgs_5",
+        "nixpkgs-unstable": "nixpkgs-unstable",
+        "try-cli": "try-cli",
+        "voxtype": "voxtype",
+        "walker": "walker"
+      }
+    },
+    "systems": {
+      "locked": {
+        "lastModified": 1689347949,
+        "narHash": "sha256-12tWmuL2zgBgZkdoB6qXZsgJEH9LR3oUgpaQq2RbI80=",
+        "owner": "nix-systems",
+        "repo": "default-linux",
+        "rev": "31732fcf5e8fea42e59c2488ad31a0e651500f68",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default-linux",
+        "type": "github"
+      }
+    },
+    "systems_2": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
+    "systems_3": {
+      "locked": {
+        "lastModified": 1689347949,
+        "narHash": "sha256-12tWmuL2zgBgZkdoB6qXZsgJEH9LR3oUgpaQq2RbI80=",
+        "owner": "nix-systems",
+        "repo": "default-linux",
+        "rev": "31732fcf5e8fea42e59c2488ad31a0e651500f68",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default-linux",
+        "type": "github"
+      }
+    },
+    "try-cli": {
+      "inputs": {
+        "flake-parts": "flake-parts_2",
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1770817563,
+        "narHash": "sha256-REadu3/mf6EHbXofjkYgu/gZ/UBSFOMQ5YhtflwmDNE=",
+        "owner": "tobi",
+        "repo": "try-cli",
+        "rev": "f52328af336f7dfa93396069ebcd7152df399010",
+        "type": "github"
+      },
+      "original": {
+        "owner": "tobi",
+        "repo": "try-cli",
+        "type": "github"
+      }
+    },
+    "voxtype": {
+      "inputs": {
+        "flake-utils": "flake-utils",
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1775048999,
+        "narHash": "sha256-w35TNOdJcgMdt98XusY8DjmY4UPv3NQ7m+vR8oliWRU=",
+        "owner": "peteonrails",
+        "repo": "voxtype",
+        "rev": "f292b6e1c9dbcfe4cdc7f781048db8be16c40c18",
+        "type": "github"
+      },
+      "original": {
+        "owner": "peteonrails",
+        "repo": "voxtype",
+        "type": "github"
+      }
+    },
+    "walker": {
+      "inputs": {
+        "elephant": [
+          "elephant"
+        ],
+        "nixpkgs": [
+          "nixpkgs"
+        ],
+        "systems": "systems_3"
+      },
+      "locked": {
+        "lastModified": 1773675699,
+        "narHash": "sha256-GrormZ2KxchtCLuO90+5fioEQmlUCKBIil0Mzr9w0Iw=",
+        "owner": "abenz1267",
+        "repo": "walker",
+        "rev": "d2702235710da3d7daf55c912ca7534261cf20f5",
+        "type": "github"
+      },
+      "original": {
+        "owner": "abenz1267",
+        "repo": "walker",
+        "type": "github"
       }
     }
   },

flake.nix

@@ -4,47 +4,101 @@
     inputs = {
         nixpkgs.url = "github:nixos/nixpkgs/nixos-25.11";
         nixpkgs-unstable.url = "github:nixos/nixpkgs/nixos-unstable";
-    home-manager.url = "github:nix-community/home-manager/release-23.11";
+        nix-gaming.url = "github:fufexan/nix-gaming";
-    home-manager.inputs.nixpkgs.follows = "nixpkgs";
+        disko.url = "github:nix-community/disko/latest";
+        impermanence.url = "github:nix-community/impermanence";
+        home-manager = {
+            url = "github:nix-community/home-manager/release-25.11";
+            inputs.nixpkgs.follows = "nixpkgs";
+        };
         firefox-addons = {
             url = "gitlab:rycee/nur-expressions?dir=pkgs/firefox-addons";
             inputs.nixpkgs.follows = "nixpkgs";
         };
+        try-cli = {
+            url = "github:tobi/try-cli";
+            inputs.nixpkgs.follows = "nixpkgs";
+        };
+        elephant = {
+            url = "github:abenz1267/elephant";
+            # inputs.nixpkgs.follows = "nixpkgs";
+        };
+        walker = {
+            url = "github:abenz1267/walker";
+            inputs.elephant.follows = "elephant";
+            inputs.nixpkgs.follows = "nixpkgs";
+        };
+        voxtype = {
+            url = "github:peteonrails/voxtype";
+            inputs.nixpkgs.follows = "nixpkgs";
+        };
+        # hyprland-preview-share-picker = {
+        #     url = "github:WhySoBad/hyprland-preview-share-picker";
+        #     inputs.nixpkgs.follows = "nixpkgs";
+        # };
     };
 
     outputs = {
         self,
         nixpkgs,
         nixpkgs-unstable,
+        nix-gaming,
+        impermanence,
+        disko,
         home-manager,
+        try-cli,
+        voxtype,
+        walker,
+        # hyprland-preview-share-picker,
         ...
     } @ inputs: let
         lib = nixpkgs.lib;
-    # Supported systems for your flake packages, shell, etc.
-    # "aarch64-linux"
-    # "i686-linux"
-    # "x86_64-linux"
-    # "aarch64-darwin"
-    # "x86_64-darwin"
         system = "x86_64-linux";
-    pkgs = nixpkgs.legacyPackages.${system};
+        pkgs = import nixpkgs {
-    pkgs-unstable = nixpkgs-unstable.legacyPackages.${system};
+            inherit system;
-  in {
+            config.allowUnfree = true;
-    # NixOS configuration entrypoint
-    # Available through 'nixos-rebuild --flake .#stationette'
-    nixosConfigurations = {
-      stationette = nixpkgs.lib.nixosSystem {
-        modules = [
-          ./system/configuration.nix
-          #home-manager.nixosModules.home-manager {
-          #  home-manager.users.chris = import ./home;
-          #  home-manager.extraSpecialArgs = {
-          #    inherit pkgs-unstable;
-          #    inherit inputs;
-          #  };
-          #}
-        ];
         };
+        nix-gaming = inputs.nix-gaming.packages.${system};
+        pkgs-unstable = import nixpkgs-unstable {
+            inherit system;
+            config.allowUnfree = true;
+        };
+
+        mkHost = hostname: nixpkgs.lib.nixosSystem {
+            modules = [
+                ./hardware
+                ./system
+                home-manager.nixosModules.home-manager
+                {
+                    powerManagement.enable = true;
+                    system.stateVersion = "25.11";
+                    home-manager = {
+                        users.chris = import ./home;
+                        extraSpecialArgs = {
+                            inherit inputs;
+                            inherit pkgs-unstable;
+                            inherit try-cli;
+                            inherit voxtype;
+                            inherit walker;
+                            inherit impermanence;
+                            inherit hostname;
+                        };
+                    };
+                }
+            ];
+            specialArgs = {
+                inherit inputs;
+                inherit pkgs-unstable;
+                inherit impermanence;
+                inherit disko;
+                inherit hostname;
+                inherit nix-gaming;
+            };
+        };
+    in {
+        nixosConfigurations = {
+            stationette = mkHost "stationette";
+            station = mkHost "station";
         };
 
         # Standalone home-manager configuration entrypoint
@@ -52,13 +106,30 @@
             chris = home-manager.lib.homeManagerConfiguration {
                 inherit pkgs;
                 extraSpecialArgs = {
-          inherit pkgs-unstable;
                     inherit inputs;
+                    inherit pkgs-unstable;
+                    inherit try-cli;
+                    inherit voxtype;
+                    inherit walker;
+                    inherit impermanence;
                 };
                 modules = [
                     ./home
                 ];
             };
         };
+
+        nix.settings = {
+            extra-substituters = [
+                "https://walker.cachix.org"
+                "https://walker-git.cachix.org"
+            ];
+            extra-trusted-public-keys = [
+                "walker.cachix.org-1:fG8q+uAaMqhsMxWjwvk0IMb4mFPFLqHjuvfwQxE4oJM="
+                "walker-git.cachix.org-1:vmC0ocfPWh0S/vRAQGtChuiZBTAe4wiKDeyyXM0/7pM="
+            ];
+            substituters = ["https://nix-gaming.cachix.org"];
+            trusted-public-keys = ["nix-gaming.cachix.org-1:nbjlureqMbRAxR1gJ/f3hxemL9svXaZF/Ees8vCUUs4="];
+        };
     };
 }

hardware/default.nix

@@ -0,0 +1,10 @@
+{ hostname, ... }:
+
+{
+    imports = [
+        ./disko.nix
+        ./filesystem.nix
+        ./mounts.nix
+        ./${hostname}-hardware-configuration.nix
+    ];
+}

hardware/disko.nix

@@ -0,0 +1,63 @@
+{ disko, hostname, ... }:
+
+let
+mkDisk = { hostname, drive }: {
+    type = "disk";
+    # Check this with lsblk
+    device = drive;
+    content = {
+        type = "gpt";
+        partitions = {
+            ESP = {
+                size = "512M";
+                type = "EF00";
+                content = {
+                    type = "filesystem";
+                    format = "vfat";
+                    mountpoint = "/boot";
+                    mountOptions = [ "fmask=0022" "dmask=0022" "umask=0077" ];
+                };
+            };
+            root = {
+                size = "100%";
+                content = {
+                    type = "btrfs";
+                    # Force overwrite
+                    extraArgs = [ "-f" ];
+                    subvolumes = {
+                        "/root" = {
+                            mountpoint = "/";
+                            mountOptions = [ "compress=zstd" "noatime" ];
+                        };
+                        "/nix" = {
+                            mountpoint = "/nix";
+                            mountOptions = [ "compress=zstd" "noatime" ];
+                        };
+                        "/persist" = {
+                            mountpoint = "/persist";
+                            mountOptions = [ "compress=zstd" "noatime" ];
+                        };
+                        "/swap" = {
+                            mountpoint = "/.swapvol";
+                            swap.swapfile.size = "8G";
+                        };
+                    };
+                };
+            };
+        };
+    };
+};
+in
+
+# nix --extra-experimental-features "nix-command flakes" run github:nix-community/disko/latest#disko-install -- --flake ./#${hostname} --disk stationette --write-efi-boot-entries ${drive}
+{
+    imports = [ disko.nixosModules.disko ];
+    disko.devices = {
+        disk = {
+            "${hostname}" = mkDisk { 
+                inherit hostname; 
+                drive = if hostname == "station" then "/dev/nvme0n1" else "/dev/sda"; 
+            };
+        };
+    };
+}

hardware/filesystem.nix

@@ -0,0 +1,66 @@
+{ config, lib, pkgs, modulesPath, hostname, ... }:
+
+let
+rootDisk = "/dev/disk/by-partlabel/disk-${hostname}-root";
+bootDisk = "/dev/disk/by-partlabel/disk-${hostname}-ESP";
+in
+
+{
+    boot.initrd.postDeviceCommands = lib.mkAfter ''
+        mkdir /btrfs_tmp
+        mount ${rootDisk} /btrfs_tmp
+        if [[ -e /btrfs_tmp/root ]]; then
+            mkdir -p /btrfs_tmp/old_roots
+            timestamp=$(date +%Y-%m-%d_%H-%M-%S)
+            mv /btrfs_tmp/root "/btrfs_tmp/old_roots/$timestamp"
+        fi
+
+        delete_subvolume_recursively() {
+            IFS=$'\n'
+            for i in $(btrfs subvolume list -o "$1" | cut -f 9 -d ' '); do
+                delete_subvolume_recursively "/btrfs_tmp/$i"
+            done
+            btrfs subvolume delete "$1"
+        }
+
+        for i in $(find /btrfs_tmp/old_roots/ -maxdepth 1 -mtime +7); do
+            delete_subvolume_recursively "$i"
+        done
+
+        btrfs subvolume create /btrfs_tmp/root
+        umount /btrfs_tmp
+    '';
+
+    # fileSystems."/" = {
+    #     device = rootDisk;
+    #     fsType = "btrfs";
+    #     options = [ "subvol=root" ];
+    # };
+    #
+    # fileSystems."/persist" = {
+    #     device = rootDisk;
+    #     neededForBoot = true;
+    #     fsType = "btrfs";
+    #     options = [ "subvol=persist" ];
+    # };
+    #
+    # fileSystems."/nix" = {
+    #     device = rootDisk;
+    #     neededForBoot = true;
+    #     fsType = "btrfs";
+    #     options = [ "subvol=nix" ];
+    # };
+    #
+    # fileSystems."/boot" = {
+    #     device = bootDisk;
+    #     fsType = "vfat";
+    #     options = [ "fmask=0022" "dmask=0022" "umask=0077" ];
+    # };
+    #
+    # swapDevices = [ {
+    #     device = "/.swapvol/swapfile";
+    # } ];
+
+    fileSystems."/persist".neededForBoot = true;
+    fileSystems."/nix".neededForBoot = true;
+}

hardware/mounts.nix

@@ -30,5 +30,18 @@
                 "noauto"
             ];
         };
+
+        "/home/chris/Games" = {
+            device = "/dev/disk/by-label/Games";
+            fsType = "ext4";
+            options = [ 
+                "defaults"
+                "x-systemd.mount-timeout=5"
+                "user"
+                "exec"
+                "x-systemd.automount"
+                "noauto"
+            ];
+        };
     };
 }

hardware/station-hardware-configuration.nix

@@ -0,0 +1,18 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports =
+    [ (modulesPath + "/installer/scan/not-detected.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "ahci" "usbhid" "usb_storage" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-amd" ];
+  boot.extraModulePackages = [ ];
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}

hardware/stationette-hardware-configuration.nix

@@ -0,0 +1,16 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+    imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
+
+    boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "usb_storage" "sd_mod" "sdhci_pci" ];
+    boot.initrd.kernelModules = [ ];
+    boot.kernelModules = [ "kvm-intel" ];
+    boot.extraModulePackages = [ ];
+
+    nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+    hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}

home/default.nix

@@ -1,20 +1,103 @@
-{
+{ pkgs, lib, ... }:
-  inputs,
-  lib,
-  config,
-  pkgs,
-  pkgs-unstable,
-  ...
-}: {
-  imports = [
-    ./user
-  ];
 
+{
+    imports = [
+        ./packages.nix
+        ./programs.nix
+        ./hooks.nix
+        ./impermanence.nix
+        ./services.nix
+    ];
     home = {
         username = "chris";
         homeDirectory = "/home/chris";
+        enableNixpkgsReleaseCheck = false;
+        stateVersion = "25.11";
     };
+    xdg.mimeApps = {
+        enable = true;
+        defaultApplications = {
+            # Directories
+            "inode/directory" = [ "org.gnome.Nautilus.desktop" ];
 
-  # https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion
+            # Images
-  home.stateVersion = "23.05";
+            "image/png" = [ "imv.desktop" ];
+            "image/jpeg" = [ "imv.desktop" ];
+            "image/gif" = [ "imv.desktop" ];
+            "image/webp" = [ "imv.desktop" ];
+            "image/bmp" = [ "imv.desktop" ];
+            "image/tiff" = [ "imv.desktop" ];
+
+            # Documents
+            "application/pdf" = [ "zathura.desktop" ];
+
+            # Web and Browser
+            "x-scheme-handler/http" = [ "firefox.desktop" ];
+            "x-scheme-handler/https" = [ "firefox.desktop" ];
+            "text/html" = [ "firefox.desktop" ];
+
+            # Video
+            "video/mp4" = [ "mpv.desktop" ];
+            "video/x-msvideo" = [ "mpv.desktop" ];
+            "video/x-matroska" = [ "mpv.desktop" ];
+            "video/x-flv" = [ "mpv.desktop" ];
+            "video/x-ms-wmv" = [ "mpv.desktop" ];
+            "video/mpeg" = [ "mpv.desktop" ];
+            "video/ogg" = [ "mpv.desktop" ];
+            "video/webm" = [ "mpv.desktop" ];
+            "video/quicktime" = [ "mpv.desktop" ];
+            "video/3gpp" = [ "mpv.desktop" ];
+            "video/3gpp2" = [ "mpv.desktop" ];
+            "video/x-ms-asf" = [ "mpv.desktop" ];
+            "video/x-ogm+ogg" = [ "mpv.desktop" ];
+            "video/x-theora+ogg" = [ "mpv.desktop" ];
+            "application/ogg" = [ "mpv.desktop" ];
+
+            # Mail
+            "x-scheme-handler/mailto" = [ "mailspring.desktop" ];
+
+            # Text and Code
+            "text/plain" = [ "nvim.desktop" ];
+            "text/english" = [ "nvim.desktop" ];
+            "text/x-makefile" = [ "nvim.desktop" ];
+            "text/x-c++hdr" = [ "nvim.desktop" ];
+            "text/x-c++src" = [ "nvim.desktop" ];
+            "text/x-chdr" = [ "nvim.desktop" ];
+            "text/x-csrc" = [ "nvim.desktop" ];
+            "text/x-java" = [ "nvim.desktop" ];
+            "text/x-moc" = [ "nvim.desktop" ];
+            "text/x-pascal" = [ "nvim.desktop" ];
+            "text/x-tcl" = [ "nvim.desktop" ];
+            "text/x-tex" = [ "nvim.desktop" ];
+            "application/x-shellscript" = [ "nvim.desktop" ];
+            "text/x-c" = [ "nvim.desktop" ];
+            "text/x-c++" = [ "nvim.desktop" ];
+            "application/xml" = [ "nvim.desktop" ];
+            "text/xml" = [ "nvim.desktop" ];
+        };
+    };
+    # systemd.user = {
+    #     enable = true;
+    #     timers = {
+    #         "station-battery-monitor" = {
+    #             wantedBy = [ "timers.target" ];
+    #             timerConfig = {
+    #                 OnBootSec = "1min";
+    #                 OnUnitActiveSec = "30sec";
+    #                 Unit = "station-battery-monitor.service";
+    #             };
+    #         };
+    #     };
+    #     services = {
+    #         "station-battery-monitor" = {
+    #             after = [ "graphical-session.target" ];
+    #             serviceConfig = {
+    #                 Type = "oneshot";
+    #                 ExecStart = "%h/.local/share/omarchy/bin/omarchy-battery-monitor";
+    #                 Environment = "DISPLAY=:0";
+    #                 LogLevelMax = "warning";
+    #             };
+    #         };
+    #     };
+    # };
 }

home/hooks.nix

@@ -0,0 +1,95 @@
+{ lib, pkgs, ... }:
+
+{
+    home.activation = {
+        setupDotfiles = lib.hm.dag.entryAfter ["writeBoundary"] ''
+            if [[ -v DRY_RUN ]]; then
+                echo "Dry run: Would bootstrap dotfiles from labs.scarif.space"
+                exit
+            fi
+
+            TEMP_DIR=$(mktemp -d)
+
+            DOTFILES_DIR="$HOME/.config/dotfiles"
+            DOTFILES_GIT_DIR="$DOTFILES_DIR/.git"
+
+            if [ ! -d "$DOTFILES_GIT_DIR" ]; then
+                echo "No local repository so cloning from remote"
+                SOURCE="https://labs.scarif.space/chris/dotfiles.git"
+                ${pkgs.git}/bin/git clone -b main "$SOURCE" "$TEMP_DIR"
+                mv "$TEMP_DIR/.git" "$DOTFILES_GIT_DIR"
+            else
+                echo "Local repository found so cloning from there"
+                ${pkgs.git}/bin/git clone -b main "$DOTFILES_GIT_DIR" "$TEMP_DIR"
+                ${pkgs.git}/bin/git --git-dir="$DOTFILES_GIT_DIR" --work-tree="$TEMP_DIR" pull --rebase || true
+            fi
+
+            echo "Copying dot files to home"
+            ${pkgs.coreutils}/bin/cp -rfT "$TEMP_DIR" "$HOME"
+
+            NVIM_DIR="$HOME/.config/nvim"
+            echo "Neovim config not initialised so initialising from remote"
+            ${pkgs.git}/bin/git --git-dir="$DOTFILES_GIT_DIR" --work-tree="$HOME" submodule set-url ".config/nvim" https://labs.scarif.space/chris/nvim.git
+            ${pkgs.git}/bin/git --git-dir="$DOTFILES_GIT_DIR" --work-tree="$HOME" submodule update --init || true
+            ${pkgs.git}/bin/git --git-dir="$DOTFILES_GIT_DIR" --work-tree="$HOME" submodule set-url ".config/nvim" git@labs.scarif.space:chris/nvim.git
+
+            cd "$HOME"
+
+            echo "Cleanup"
+            ${pkgs.coreutils}/bin/rm -rf "$TEMP_DIR"
+            ${pkgs.coreutils}/bin/rm -rf "$HOME/.git" || true
+
+            echo "Dotfiles bootstrapped successfully."
+        '';
+        setupDevDirectories = lib.hm.dag.entryAfter ["writeBoundary"] ''
+            if [[ -v DRY_RUN ]]; then
+                echo "Dry run: Would create dev directories"
+                exit
+            fi
+
+            echo "Creating development directories"
+
+            for dir in "DevOps" "FSharp" "JavaScript" "Scala" "Rust" "PHP" "Tutorials" "Sites" "MobileApps" "Tries"; do
+                if [ ! -d "$HOME/Code/$dir" ]; then
+                    mkdir -p "$HOME/Code/$dir"
+                fi
+            done
+        '';
+        setupInitialConfigs = lib.hm.dag.entryAfter ["writeBoundary"] ''
+            if [[ -v DRY_RUN ]]; then
+                echo "Dry run: Would copy initial config files"
+                exit
+            fi
+
+            DEST_FILE="$HOME/.config/sinew.in/Enpass.conf"
+
+            if [ ! -f "$DEST_FILE" ]; then
+                mkdir -p "$(dirname "$DEST_FILE")"
+                cp "${../initial-configs/Enpass.conf}" "$DEST_FILE"
+            fi
+
+            DEST_FILE="$HOME/.config/obsidian/obsidian.json"
+
+            if [ ! -f "$DEST_FILE" ]; then
+                mkdir -p "$(dirname "$DEST_FILE")"
+                cp "${../initial-configs/obsidian.json}" "$DEST_FILE"
+            fi
+        '';
+        setupDefaultWallpaper = lib.hm.dag.entryAfter ["writeBoundary"] ''
+            if [[ -v DRY_RUN ]]; then
+                echo "Dry run: Would copy wallpaper and initialise colour scheme if not set"
+                exit
+            fi
+
+            WALLPAPER_FILE="$HOME/.config/station/current/background"
+
+            if [ ! -f "$WALLPAPER_FILE" ]; then
+                mkdir -p "$(dirname "$WALLPAPER_FILE")"
+                ln -nsf ${../default_wallpaper.png} "$WALLPAPER_FILE"
+            fi
+            if [ ! -f "$HOME/.config/wal/colors" ]; then
+                ${pkgs.pywal16}/bin/wal -i "$WALLPAPER_FILE"
+            fi
+        '';
+    };
+}

home/impermanence.nix

@@ -0,0 +1,46 @@
+{ impermanence, ... }:
+
+{
+    #imports = [ impermanence.nixosModules.impermanence ];
+    home.persistence."/persist" = {
+        directories = [
+            ".cache/Nextcloud"
+            ".cache/wal"
+            ".cache/zsh"
+            ".config/.gemini"
+            ".config/Antigravity"
+            ".config/Nextcloud"
+            ".config/chromium"
+            ".config/dotfiles"
+            ".config/nixos"
+            ".config/Signal"
+            ".config/nvim"
+            ".config/obsidian"
+            ".config/sinew.in"
+            ".config/spotify"
+            ".config/superProductivity"
+            ".config/yazi/plugins"
+            ".local/share/android"
+            ".local/share/Enpass"
+            ".local/share/Steam"
+            ".local/share/direnv"
+            ".local/share/keyrings"
+            ".local/share/krita"
+            ".local/share/nvim"
+            ".local/share/station"
+            ".local/share/voxtype"
+            ".local/share/zoxide"
+            ".local/state/station"
+            ".local/state/wireplumber"
+            ".mozilla/firefox"
+            ".ssh"
+            ".steam"
+            "Code"
+            "Downloads"
+            "Tower"
+        ];
+        files = [
+            ".config/shell/.env"
+        ];
+    };
+}

home/packages.nix

@@ -0,0 +1,79 @@
+{ pkgs, pkgs-unstable, try-cli, nix-direnv, ... }:
+
+let
+krita-appimage = pkgs.callPackage ../packages/krita.nix { };
+enpass = pkgs.enpass.overrideAttrs (oldAttrs: rec {
+    version = "6.11.13.1957";
+    src = pkgs.fetchurl {
+        url = "https://apt.enpass.io/pool/main/e/enpass/enpass_${version}_amd64.deb";
+        sha256 = "2d8c90643851591aff41057b380a7e87bb839bf5c5aa0ca1456144e9996c902a";
+    };
+});
+in
+
+{
+    nixpkgs = {
+        config = {
+            allowUnfree = true;
+            allowUnfreePredicate = (_: true);
+
+            permittedInsecurePackages = [
+                "electron-25.9.0" # Obsidian
+                "beekeeper-studio-5.3.4"
+            ];
+        };
+    };
+    home.packages = with pkgs; [
+        pkgs-unstable.antigravity # Gemini AI coding assistant
+        bluetui # Bluetooth TUI
+        enpass # Password manager
+        enpass-cli # Enpass CLI tool
+        expressvpn # VPN
+        ffmpeg # Video tools
+        ffmpegthumbnailer # Video thumbnailer
+        pkgs-unstable.gemini-cli # Gemini AI CLI tool
+        ghostty # Terminal emulator
+        gimp # Image manipulation software
+        gpu-screen-recorder # GPU screen recorder for Linux
+        imv # Image viewer
+        inkscape # Vector graphics software
+        krita-appimage # Custom digital art software (from AppImage)
+        libreoffice-fresh # Office suite
+        lunar-client # Minecraft launcher
+        mpv # Video player
+        nautilus # Document viewer
+        nextcloud-client # Nextcloud sync client
+        obsidian # Notes software
+        signal-desktop # Messaging
+        spotify # Music
+        super-productivity # Task app
+        sxiv # Minimal image viewer
+        tenacity # Audio software
+        thunderbird # Mail client
+        try-cli.packages.${pkgs.system}.default # Try CLI tool
+        wally-cli # Keyboard flasher
+        wiremix # Audio mixer TUI
+        xournalpp # Handwriting note-taking software
+        yad # For creating dialogs during install script
+        zenity # For creating dialogs during install script
+        zathura # Minimal PDF viewer
+    ];
+    xdg.desktopEntries.enpass = {
+        type = "Application";
+        name = "Enpass";
+        genericName = "Enpass Password Manager";
+        icon = "enpass";
+        terminal = false;
+        exec = "env QT_SCREEN_SCALE_FACTORS=2 ${enpass}/bin/Enpass %U";
+        mimeType = [
+            "x-scheme-handler/enpassauth"
+            "x-scheme-handler/enpasscard"
+            "x-scheme-handler/enpassstart"
+            "x-scheme-handler/enpass"
+            "x-scheme-handler/cloudkit-7adb8cc64f.in.sinew.walletx"
+            "x-scheme-handler/enpassshare"
+            "application/enpasscard"
+        ];
+        categories = [ "Utility" ];
+    };
+}

home/programs.nix

@@ -0,0 +1,136 @@
+{ pkgs, lib, voxtype, walker, ... }:
+
+{
+    imports = [
+        walker.homeManagerModules.default
+        voxtype.homeManagerModules.default
+    ];
+    programs = let
+        lock-false = {
+            Value = false;
+            Status = "locked";
+        };
+        lock-true = {
+            Value = true;
+            Status = "locked";
+        };
+    in {
+        direnv = {
+            enable = true;
+            nix-direnv.enable = true;
+        };
+        walker = {
+            enable = true;
+            config = {};
+            runAsService = true;
+        };
+        elephant = {
+            enable = true;
+        };
+        waybar = {
+            enable = true;
+            systemd.enable = true;
+        };
+        voxtype = {
+            enable = true;
+            package = voxtype.packages.${pkgs.system}.vulkan;
+            service.enable = true;
+            settings = {};
+        };
+        chromium = {
+            enable = true;
+            extensions = [
+                "cjpalhdlnbpafiamejdnhcphjbkeiagm" # uBlock Origin
+                "kmcfomidfpdkfieipokbalgegidffkal" # Enpass
+            ];
+        };
+        firefox = {
+            enable = true;
+            package = pkgs.wrapFirefox pkgs.firefox-unwrapped {
+                extraPolicies = {
+                    DisableTelemetry = true;
+                    DisableFirefoxStudies = true;
+                    EnableTrackingProtection = {
+                        Value= true;
+                        Locked = true;
+                        Cryptomining = true;
+                        Fingerprinting = true;
+                    };
+                    DisablePocket = true;
+                    DisableFirefoxAccounts = false;
+                    DisableAccounts = false;
+                    DisableFirefoxScreenshots = true;
+                    OverrideFirstRunPage = "";
+                    OverridePostUpdatePage = "";
+                    DontCheckDefaultBrowser = true;
+                    DisplayBookmarksToolbar = "always"; # alternatives: "always" or "newtab"
+                        DisplayMenuBar = "default-off"; # alternatives: "always", "never" or "default-on"
+                        SearchBar = "unified"; # alternative: "separate"
+
+                        /* ---- EXTENSIONS ---- */
+                        ExtensionSettings = {
+                            "*".installation_mode = "allowed"; # blocks all addons except the ones specified below
+                                # Enpass
+                                "firefox-enpass@enpass.io" = {
+                                    install_url = "https://dl.enpass.io/stable/extensions/firefox/versions/v6.11.10.2/enpass_password_manager-6.11.10.2.xpi";
+                                    installation_mode = "force_installed";
+                                };
+                        };
+
+                    /* ---- PREFERENCES ---- */
+                    Preferences = { 
+                        "browser.contentblocking.category" = { Value = "strict"; Status = "locked"; };
+                        "extensions.pocket.enabled" = lock-false;
+                        "extensions.screenshots.disabled" = lock-true;
+                        "browser.topsites.contile.enabled" = lock-false;
+                        "browser.formfill.enable" = lock-false;
+                        "browser.search.suggest.enabled" = lock-false;
+                        "browser.search.suggest.enabled.private" = lock-false;
+                        "browser.urlbar.suggest.searches" = lock-false;
+                        "browser.urlbar.showSearchSuggestionsFirst" = lock-false;
+                        "browser.newtabpage.activity-stream.feeds.section.topstories" = lock-false;
+                        "browser.newtabpage.activity-stream.feeds.snippets" = lock-false;
+                        "browser.newtabpage.activity-stream.section.highlights.includePocket" = lock-false;
+                        "browser.newtabpage.activity-stream.section.highlights.includeBookmarks" = lock-false;
+                        "browser.newtabpage.activity-stream.section.highlights.includeDownloads" = lock-false;
+                        "browser.newtabpage.activity-stream.section.highlights.includeVisited" = lock-false;
+                        "browser.newtabpage.activity-stream.showSponsored" = lock-false;
+                        "browser.newtabpage.activity-stream.system.showSponsored" = lock-false;
+                        "browser.newtabpage.activity-stream.showSponsoredTopSites" = lock-false;
+                        "browser.newtabpage.activity-stream.feeds.section.highlights" = false;
+                    };
+                };
+            };
+            profiles = {
+                default = {
+                    id = 0;
+                    name = "default";
+                    isDefault = true;
+                    search = {
+                        default = "holocron";
+                        order = [ "holocron" "google" ];
+                        engines= {
+                            holocron = {
+                                name = "Holocron";
+                                urls = [{
+                                    template = "https://holocron.scarif.space/search";
+                                    params = [
+                                    { name = "q"; value = "{searchTerms}"; }
+                                    ];
+                                }];
+                                icon = "https://holocron.scarif.space/favicon.ico";
+                                definedAliases = [ "@h" ];
+                            };
+                            bing.metaData.hidden = true;
+                            ebay.metaData.hidden = true;
+                            perplexity.metaData.hidden = true;
+                        };
+                    };
+                };
+            };
+        };
+    };
+    xdg.configFile."voxtype/config.toml".enable = false;
+    home.file.".icons/default".source = "${pkgs.vimix-cursors}/share/icons/Vimix-white-cursors";
+    home.file.".mozilla/firefox/default/search.json.mozlz4".force = lib.mkForce true;
+}

home/services.nix

@@ -0,0 +1,7 @@
+{ ... }:
+
+{
+    services = {
+        swayosd.enable = true;
+    };
+}

home/user/default.nix

@@ -1,19 +0,0 @@
-{
-  imports = [
-    ./packages.nix
-    ./programs.nix
-    ./scripts.nix
-  ];
-
-  nixpkgs = {
-    config = {
-      allowUnfree = true;
-      allowUnfreePredicate = (_: true);
-
-      permittedInsecurePackages = [
-        "electron-25.9.0" # Obsidian
-        "beekeeper-studio-5.3.4"
-      ];
-    };
-  };
-}

home/user/packages.nix

@@ -1,65 +0,0 @@
-{ pkgs, pkgs-unstable, ... }:
-
-{
-    home.packages = with pkgs; [
-        # jetbrains.rider
-        # android-studio
-        # beekeeper-studio
-        # brave
-        # discord
-        # spotify
-        # go
-        # lua
-        # nodePackages.pnpm
-        # (python3.withPackages (python-pkgs: [ python-pkgs.pip python-pkgs.requests ]))
-        # rustup
-        # zig
-        # obsidian
-        # thunderbird
-        # libreoffice-qt
-        # pkgs-unstable.nerd-fonts.fira-code
-        # hunspell
-        # blueberry
-        # steam
-        # steam-run
-        # viewnior
-        # pkgs-unstable.hyprshot
-        # catppuccin-cursors.macchiatoBlue
-        # catppuccin-gtk
-        # papirus-folders
-        # pkgs-unstable.php84Packages.composer
-        # pkgs-unstable.php84Packages.xdebug
-        # pkgs-unstable.php84Extensions.sqlite3
-        # pkgs-unstable.php84Extensions.redis
-        # pkgs-unstable.php84Extensions.sodium
-        # pkgs-unstable.php84Extensions.pgsql
-        # pkgs-unstable.php84Extensions.iconv
-        # pkgs-unstable.php84Extensions.gd
-        # pkgs-unstable.php84Extensions.zip
-        # php
-        # antigravity
-        # gimp
-        # kdePackages.dolphin
-        # enpass
-        # enpass-cli
-        # expressvpn
-        # jellyfin-ffmpeg
-        # inkscape
-        # krita
-        # libreoffice-fresh
-        # nextcloud-client
-        # nodejs_24
-        # signal-desktop
-        # sxiv
-        # tenacity
-        # unzip
-        # zathura
-        # ghostty
-        # wally-cli
-        # kdePackages.wacomtablet
-        # kdePackages.print-manager
-        # mpv
-        # vlc
-        # telegram-desktop
-    ];
-}

home/user/programs.nix

@@ -1,75 +0,0 @@
-{ pkgs, inputs, ... }:
-
-let
-    lock-false = {
-        Value = false;
-        Status = "locked";
-    };
-    lock-true = {
-        Value = true;
-        Status = "locked";
-    };
-in
-    {
-    programs = {
-        # firefox = {
-        #     enable = true;
-        #     package = pkgs.wrapFirefox pkgs.firefox-unwrapped {
-        #         extraPolicies = {
-        #             DisableTelemetry = true;
-        #             DisableFirefoxStudies = true;
-        #             EnableTrackingProtection = {
-        #                 Value= true;
-        #                 Locked = true;
-        #                 Cryptomining = true;
-        #                 Fingerprinting = true;
-        #             };
-        #             DisablePocket = true;
-        #             DisableFirefoxAccounts = true;
-        #             DisableAccounts = true;
-        #             DisableFirefoxScreenshots = true;
-        #             OverrideFirstRunPage = "";
-        #             OverridePostUpdatePage = "";
-        #             DontCheckDefaultBrowser = true;
-        #             DisplayBookmarksToolbar = "always"; # alternatives: "always" or "newtab"
-        #             DisplayMenuBar = "default-off"; # alternatives: "always", "never" or "default-on"
-        #             SearchBar = "unified"; # alternative: "separate"
-
-        #             /* ---- EXTENSIONS ---- */
-        #             ExtensionSettings = {
-        #                 "*".installation_mode = "allowed"; # blocks all addons except the ones specified below
-        #                 # Enpass
-        #                 "firefox-enpass@enpass.io" = {
-        #                     install_url = "https://dl.enpass.io/stable/extensions/firefox/versions/v6.11.10.2/enpass_password_manager-6.11.10.2.xpi";
-        #                     installation_mode = "force_installed";
-        #                 };
-        #             };
-
-        #             /* ---- PREFERENCES ---- */
-        #             # Set preferences shared by all profiles.
-        #             Preferences = { 
-        #                 "browser.contentblocking.category" = { Value = "strict"; Status = "locked"; };
-        #                 "extensions.pocket.enabled" = lock-false;
-        #                 "extensions.screenshots.disabled" = lock-true;
-        #                 "browser.topsites.contile.enabled" = lock-false;
-        #                 "browser.formfill.enable" = lock-false;
-        #                 "browser.search.suggest.enabled" = lock-false;
-        #                 "browser.search.suggest.enabled.private" = lock-false;
-        #                 "browser.urlbar.suggest.searches" = lock-false;
-        #                 "browser.urlbar.showSearchSuggestionsFirst" = lock-false;
-        #                 "browser.newtabpage.activity-stream.feeds.section.topstories" = lock-false;
-        #                 "browser.newtabpage.activity-stream.feeds.snippets" = lock-false;
-        #                 "browser.newtabpage.activity-stream.section.highlights.includePocket" = lock-false;
-        #                 "browser.newtabpage.activity-stream.section.highlights.includeBookmarks" = lock-false;
-        #                 "browser.newtabpage.activity-stream.section.highlights.includeDownloads" = lock-false;
-        #                 "browser.newtabpage.activity-stream.section.highlights.includeVisited" = lock-false;
-        #                 "browser.newtabpage.activity-stream.showSponsored" = lock-false;
-        #                 "browser.newtabpage.activity-stream.system.showSponsored" = lock-false;
-        #                 "browser.newtabpage.activity-stream.showSponsoredTopSites" = lock-false;
-        #             };
-        #         };
-        #     };
-        # };
-    };
-    programs.home-manager.enable = true;
-}

home/user/scripts.nix

@@ -1,43 +0,0 @@
-{ config, pkgs, lib, ... }:
-
-{
-  home.activation.setupDotfiles = lib.hm.dag.entryAfter ["writeBoundary"] ''
-    DOTFILES_DIR="$HOME/.config/dotfiles"
-
-    if [ ! -d "$DOTFILES_DIR/.git" ]; then
-      if [[ -v DRY_RUN ]]; then
-        echo "Dry run: Would bootstrap dotfiles from labs.scarif.space"
-      else
-        echo "Dotfiles not found. Running bootstrap script..."
-
-        # Setup a temporary workspace
-        TEMP_DIR=$(mktemp -d)
-
-        # Clone the repo (using the public URL for the initial pull)
-        ${pkgs.git}/bin/git clone -b main https://labs.scarif.space/chris/dotfiles.git "$TEMP_DIR"
-
-        # Copy files to HOME
-        ${pkgs.coreutils}/bin/cp -rfT "$TEMP_DIR" "$HOME"
-
-        # Initialize the separate git directory
-        ${pkgs.coreutils}/bin/mkdir -p "$DOTFILES_DIR"
-        cd "$HOME"
-        ${pkgs.git}/bin/git init --separate-git-dir "$DOTFILES_DIR/.git" "$HOME"
-
-        # Update submodules
-        ${pkgs.git}/bin/git submodule set-url ".config/nvim" https://labs.scarif.space/chris/nvim.git
-        ${pkgs.git}/bin/git submodule update --init
-
-        # Set URLs back to SSH
-        ${pkgs.git}/bin/git submodule set-url ".config/nvim" git@labs.scarif.space:chris/nvim.git
-        ${pkgs.git}/bin/git remote set-url origin git@labs.scarif.space:chris/dotfiles.git
-
-        # Clean up
-        ${pkgs.coreutils}/bin/rm -rf "$TEMP_DIR"
-        ${pkgs.coreutils}/bin/rm -f "$HOME/.git"
-
-        echo "Dotfiles bootstrapped successfully."
-      fi
-    fi
-  '';
-}

initial-configs/Enpass.conf

@@ -0,0 +1,34 @@
+[General]
+ALWAYS_SAVE_TO_TEAM=local
+ALWAYS_SAVE_TO_VAULT=primary
+ChangedLocationPath=/home/chris/.local/share/Enpass/Enpass/
+DEVICE_UUID=e2b61cfc-4671-485c-a848-90df077d3a25
+LAST_SELECTED_LANGUAGE=default
+QUICKSETUP_SHOWN=true
+SELECTED_LANGUAGE=default
+assets_copied1=0
+detailPaneTabWidth=0
+masterPaneDesktopWidth=260
+masterPaneTabWidth=240
+sidePaneDesktopWidth=220
+
+[Backup]
+MajorCount=8
+MinorCount=0
+changedBackupPath=/home/chris/.local/share/Enpass/Backups/
+lastMajorCountTime=1772996878
+lastMinorCountTime=0
+
+[%General]
+autorunAtSystemStartup6=true
+avoidSubscriptionDialog=true
+hiddenCategories\size=0
+useDarkTheme=true
+
+[mainWindow]
+height=508
+screen=eDP-1
+visibility=2
+width=941
+x=967
+y=560

initial-configs/obsidian.json

@@ -0,0 +1,13 @@
+{
+  "vaults": {
+    "default": {
+      "path": "/home/chris/Tower/Documents/Notes",
+      "ts": 1773591361639,
+      "open": true
+    },
+    "rpg": {
+      "path": "/home/chris/Tower/Documents/Areas/RPG",
+      "ts": 1773591361639
+    }
+  }
+}

initial-configs/passwords/chris

@@ -0,0 +1 @@
+$6$MCVd.EUOYYB0A1eS$S1/gSfAq1c2dBCofvJp9RtW.o5mLi78h0Y39LABIeIauPRjlEny/1R5aXEA7uPrZ3TPxhnYOYxTdbCi0imFZp.

packages/krita.nix

@@ -0,0 +1,40 @@
+{
+    lib,
+    appimageTools,
+    fetchurl,
+    makeWrapper
+}:
+
+let
+    version = "6.0.1";
+    pname = "krita-appimage";
+
+    src = fetchurl {
+        url = "https://download.kde.org/stable/krita/${version}/krita-${version}-x86_64.AppImage";
+        hash = "sha256-lzIgaqZiTnUOW5FSRF+1ROpj3RASWC390aLVFSBBTQo=";
+    };
+
+    appimageContents = appimageTools.extract { inherit pname version src; };
+in
+appimageTools.wrapType2 {
+    inherit pname version src;
+
+    extraInstallCommands = ''
+        install -m 444 -D ${appimageContents}/org.kde.krita.desktop $out/share/applications/krita.desktop
+        install -m 444 -D ${appimageContents}/krita.png $out/share/icons/hicolor/256x256/apps/krita.png
+        substituteInPlace $out/share/applications/krita.desktop \
+            --replace-fail "Exec=krita" "Exec=krita-appimage"
+        
+        source ${makeWrapper}/nix-support/setup-hook
+        wrapProgram $out/bin/${pname} \
+            --set FONTCONFIG_FILE /etc/fonts/fonts.conf
+    '';
+ 
+    meta = {
+        description = "Digital painting and illustration application";
+        homepage = "https://krita.org";
+        license = lib.licenses.gpl3Only;
+        platforms = [ "x86_64-linux" ];
+        maintainers = with lib.maintainers; [ ];
+    };
+}

rebuild

@@ -0,0 +1,3 @@
+#! /bin/bash
+
+sudo nixos-rebuild switch --flake .#$HOSTNAME

system/boot.nix

@@ -0,0 +1,74 @@
+{ pkgs, hostname, ... }:
+
+let
+# Found by running sudo btrfs inspect-internal map-swapfile -r /.swapvol/swapfile
+hibernateBootOffsets = {
+    stationette = "533760";
+    station = "533760";
+};
+
+resumeOffset = hibernateBootOffsets."${hostname}" or "0";
+in
+{
+    boot = {
+        loader = {
+            limine = {
+                enable = true;
+
+                extraConfig = ''
+                    timeout: 3
+                    default_entry: 2
+                    interface_branding: Station Bootloader
+                    interface_branding_color: 2
+                    hash_mismatch_panic: no
+
+                    term_background: 1a1b26
+                    backdrop: 1a1b26
+
+                    # Tokyo Night palette
+                    term_palette: 15161e;f7768e;9ece6a;e0af68;7aa2f7;bb9af7;7dcfff;a9b1d6
+                    term_palette_bright: 414868;f7768e;9ece6a;e0af68;7aa2f7;bb9af7;7dcfff;c0caf5
+
+                    term_foreground: c0caf5
+                    term_foreground_bright: c0caf5
+                    term_background_bright: 24283b
+                    '';
+            };
+            efi.canTouchEfiVariables = true;
+            # timeout = 0; # Skips the menu and uses default entry
+        };
+        # Creates a cool animation for booting
+        plymouth = {
+            enable = true;
+            theme = "black_hud";
+            themePackages = with pkgs; [
+                (adi1090x-plymouth-themes.override {
+                    selected_themes = [ "black_hud" ];
+                })
+            ];
+        };
+        initrd.verbose = false;
+
+        kernelParams = [
+            "resume_offset=${resumeOffset}"
+            "quiet"
+            "udev.log_level=3"
+            "systemd.show_status=auto"
+            "splash"
+        ];
+        bootspec.enable = true;
+        resumeDevice = "/dev/disk/by-partlabel/disk-${hostname}-root";
+        kernel.sysctl = {
+            "net.ipv4.ip_unprivileged_port_start" = 0;
+        };
+    };
+
+    systemd = {
+        settings = {
+            Manager = {
+                DefaultTimeoutStopSec = "5s";
+            };
+        };
+    };
+}
+

system/configuration.nix

@@ -1,15 +0,0 @@
-{
-  inputs,
-  lib,
-  config,
-  pkgs,
-  ...
-}: {
-  imports = [
-    ./hardware-configuration.nix
-    ./modules
-  ];
-
-  # https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion
-  system.stateVersion = "25.11";
-}

system/default.nix

@@ -0,0 +1,18 @@
+{ ... }:
+
+{
+    imports = [
+        ./boot.nix
+        ./impermanence.nix
+        ./networking.nix
+        ./packages.nix
+        ./services.nix
+        ./users.nix
+        ./programs.nix
+        ./fonts.nix
+        ./hardware.nix
+        ./sound.nix
+        ./virtualisation.nix
+        ./time.nix
+    ];
+}

system/fonts.nix

@@ -0,0 +1,23 @@
+{ pkgs, ... }:
+
+{
+    fonts = {
+        packages = with pkgs; [
+            nerd-fonts.jetbrains-mono
+            nerd-fonts.fira-code
+            noto-fonts
+            noto-fonts-cjk-sans
+            noto-fonts-color-emoji
+            liberation_ttf
+        ];
+
+        fontconfig = {
+            enable = true;
+            defaultFonts = {
+                monospace = [ "JetBrainsMono Nerd Font" ];
+                sansSerif = [ "Noto Sans" ];
+                serif = [ "Noto Serif" ];
+            };
+        };
+    };
+}

system/hardware-configuration.nix

@@ -1,31 +0,0 @@
-# Do not modify this file!  It was generated by ‘nixos-generate-config’
-# and may be overwritten by future invocations.  Please make changes
-# to /etc/nixos/configuration.nix instead.
-{ config, lib, pkgs, modulesPath, ... }:
-
-{
-  imports =
-    [ (modulesPath + "/installer/scan/not-detected.nix")
-    ];
-
-  boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "usb_storage" "sd_mod" "sdhci_pci" ];
-  boot.initrd.kernelModules = [ ];
-  boot.kernelModules = [ "kvm-intel" ];
-  boot.extraModulePackages = [ ];
-
-  fileSystems."/" =
-    { device = "/dev/disk/by-uuid/c425db8f-455a-4fec-8a24-72cd670640cb";
-      fsType = "ext4";
-    };
-
-  fileSystems."/boot" =
-    { device = "/dev/disk/by-uuid/038B-4974";
-      fsType = "vfat";
-      options = [ "fmask=0022" "dmask=0022" ];
-    };
-
-  swapDevices = [ ];
-
-  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
-  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
-}

system/hardware.nix

@@ -0,0 +1,16 @@
+{ ... }:
+
+{
+    hardware = {
+        bluetooth.enable = true;
+
+        graphics = {
+            enable = true;
+            enable32Bit = true;
+        };
+
+        opentabletdriver.enable = true;
+        uinput.enable = true;
+    };
+    boot.kernelModules = [ "uinput" ];
+}

system/impermanence.nix

@@ -0,0 +1,24 @@
+{ impermanence, ... }:
+
+# Define which files and directories should persist between boots
+{
+    imports = [ impermanence.nixosModules.impermanence ];
+
+    environment.persistence."/persist" = {
+        hideMounts = true;
+        directories = [
+            "/var/log"
+            "/var/lib/bluetooth"
+            "/var/lib/networkmanager"
+            "/var/lib/docker"
+            "/var/lib/nixos"
+            "/var/lib/systemd/coredump"
+            "/etc/NetworkManager/system-connections"
+            "/etc/ssh"
+        ];
+        files = [
+            "/etc/machine-id"
+        ];
+    };
+}
+

system/modules/boot.nix

@@ -1,13 +0,0 @@
-{ config, pkgs, lib, ... }:
-
-{
-  boot = {
-    #kernelParams = ["nohibernate" "ipv6.disable=1"];
-    #tmp.cleanOnBoot = true;
-    # supportedFilesystems = ["ntfs"];
-    loader = {
-      systemd-boot.enable = true;
-      efi.canTouchEfiVariables = true;
-    };
-  };
-}

system/modules/default.nix

@@ -1,11 +0,0 @@
-{ ... }:
-
-{
-  imports = [
-    ./boot.nix
-    ./networking.nix
-    ./packages.nix
-    ./programs.nix
-    ./users.nix
-  ];
-}

system/modules/networking.nix

@@ -1,8 +0,0 @@
-{ config, pkgs, ... }:
-
-{
-  networking = {
-    hostName = "stationette";
-    networkmanager.enable = true;
-  };
-}

system/modules/packages.nix

@@ -1,37 +0,0 @@
-{ config, pkgs, ... }:
-
-{
-    environment.systemPackages = with pkgs; [
-        bat
-        highlight
-        btop
-        eza
-        fzf
-        git
-        gnumake
-        neofetch
-        neovim
-        ripgrep
-        tldr
-        unzip
-        openssl
-        wget
-        zip
-        zoxide
-        jq
-        lazygit
-        lazysql
-        less
-        mlocate
-        tree
-        tmux
-        tmuxinator
-        wget
-        zenity
-        gum
-        yazi
-        rsync
-        p7zip
-        impala
-    ];
-}

system/modules/programs.nix

@@ -1,9 +0,0 @@
-{ config, pkgs, ... }:
-
-{
-  programs = {
-    zsh = {
-      enable = true;
-    };
-  };
-}

system/modules/users.nix

@@ -1,13 +0,0 @@
-{ config, pkgs, ... }:
-
-{
-  users.users.chris = {
-    isNormalUser = true;
-    shell = pkgs.zsh;
-    extraGroups = [
-      "chris"
-      "wheel"
-      "networkmanager"
-    ];
-  };
-}

system/networking.nix

@@ -0,0 +1,53 @@
+{ hostname, ... }:
+
+{
+    networking = {
+        hostName = hostname;
+        networkmanager.enable = true;
+        wireless = {
+            iwd.enable = true;
+            networks = {
+                ssid = "Outskirt Stable";
+                psk = "SidonPhlegm";
+            };
+        };
+        firewall = {
+            enable = true;
+            # Ports used by Local Send
+            allowedTCPPorts = [
+                53317
+                8001
+                8002
+                8003
+                8004
+            ];
+            allowedUDPPorts = [
+                53317
+                8001
+                8002
+                8003
+                8004
+            ];
+            extraCommands = "
+                iptables -I nixos-fw 1 -i br+ -j ACCEPT
+            ";
+            extraStopCommands = "
+                iptables -D nixos-fw -i br+ -j ACCEPT
+            ";
+        };
+        hosts = {
+            "127.0.0.1" = [
+                "localhost"
+                "host.docker.internal"
+                "runcats.test"
+                "dev.runcats.test"
+                "landing.runcats.test"
+                "api.runcats.test"
+                "mail.runcats.test"
+                "kibana.runcats.test"
+                "img.runcats.test"
+                "docs.runcats.test"
+            ];
+        };
+    };
+}

system/packages.nix

@@ -0,0 +1,87 @@
+{ pkgs, pkgs-unstable, nix-gaming, ... }:
+
+{
+    nixpkgs.config.allowUnfree = true;
+    environment.systemPackages = with pkgs; [
+        # hyprland-preview-share-picker.packages.${system}.default # Hyprland share picker TODO: Figure out and configure
+        bat # Better cat
+        brightnessctl # Backlight control
+        btop # Resource monitor
+        cargo # Rust build tool
+        clippy # Rust linter
+        eza # Better ls
+        fcitx5 # Input method framework TODO: Figure out and configure
+        fzf # Fuzzy file finder
+        gcc # C compiler
+        git # Git
+        gnome-calculator # Calculator TODO: Find a better TUI calculator
+        gnome-keyring
+        grim # Screenshot tool TODO: Figure out and configure
+        gum # Terminal UI tool
+        highlight # Syntax highlighting tool TODO: Hook up to ZSH
+        hyprcursor # Hyprland cursor theme support
+        hypridle # Idle daemon for Hyprland
+        hyprlock # Screen locker for Hyprland
+        hyprpaper # Wallpaper utility for Hyprland TODO: Check if necessary with swaybg
+        hyprpicker # Hyprland colour picker
+        imagemagick # Image manipulation tool
+        impala # Wifi TUI
+        jq # CLI JSON processor
+        lazygit # Git TUI
+        less # Pager
+        libnotify # Notification daemon
+        localsend # Local file sharing tool
+        makima # Key remapper for Linux TODO: Figure out and configure
+        mako # Notification daemon
+        pkgs-unstable.neovim # Editor
+        nix-gaming.mo2installer
+        nodePackages.pnpm # JavaScript package manager (used by Neovim plugins)
+        tree-sitter # Incremental parsing tool for editors
+        nodejs_24 # JavaScript runtime
+        openssl # SSL/TLS toolkit
+        p7zip # 7-Zip archiver
+        pipewire
+        pkgs-unstable.yazi # Terminal file manager
+        pywal16 # Image colorscheme generator
+        qt6.qtwayland # qtwayland support
+        ripgrep # Better grep
+        rsync # Remote file sync
+        rustc # Rust compiler
+        rustfmt # Rust formatter
+        satty # Screenshot editor TODO: Figure out and configure
+        seahorse # GNOME Keyring manager
+        sshpass # SSH with password in CLI, used by install scripts
+        swaybg # Wayland wallpaper utility
+        tldr # Simplified man pages
+        tmux # Terminal multiplexer
+        tmuxinator # Tmux configurator
+        tree # Tree structure viewing Tool
+        unzip # Compressing tool
+        uwsm # Universal Wayland Session Manager
+        v4l-utils # Video4Linux utilities TODO: Figure out why I need this
+        waybar # Status bar for Hyprland
+        wget # Download tool
+        pkgs-unstable.wineWow64Packages.stable # Wine packages for 64-bit and 32-bit support
+        pkgs-unstable.winetricks # Windows compatibility tool
+        wl-clipboard # Wayland clipboard manager
+        wlogout # Wayland logout menu
+        xdg-terminal-exec # XDG terminal execution utility
+        yarn # JavaScript package manager
+        zip # Archiver tool
+        zoxide # Better cd
+    ];
+
+    systemd = {
+        packages = with pkgs; [
+            uwsm
+        ];
+    };
+
+    system = {
+        autoUpgrade = {
+            enable = true;
+            allowReboot = false;
+            runGarbageCollection = true;
+        };
+    };
+}

system/programs.nix

@@ -0,0 +1,47 @@
+{ pkgs, pkgs-unstable, hostname, ... }:
+
+{
+    programs = {
+        # Easy file sharing on local network
+        localsend = {
+            enable = true;
+            openFirewall = true;
+        };
+        nix-ld.enable = true;
+        zsh = {
+            enable = true;
+        };
+        hyprland = {
+            enable = true;
+            package = pkgs-unstable.hyprland;
+            portalPackage = pkgs-unstable.xdg-desktop-portal-hyprland;
+            xwayland.enable = true;
+            withUWSM = true;
+        };
+        steam = {
+            enable = hostname == "station";
+            package = pkgs-unstable.steam;
+            remotePlay.openFirewall = true; # Open ports in the firewall for Steam Remote Play
+            dedicatedServer.openFirewall = true; # Open ports in the firewall for Source Dedicated Server
+            localNetworkGameTransfers.openFirewall = true; # Open ports in the firewall for Steam Local Network Game Transfers
+            protontricks.enable = true;
+        };
+        chromium = {
+            enable = true;
+            extraOpts = {
+                "BrowserSignin" = 0;
+                "SyncDisabled" = true;
+                "PasswordManagerEnabled" = false;
+                "SpellcheckEnabled" = true;
+                "SpellcheckLanguage" = [
+                    "en-GB"
+                ];
+            };
+        };
+    };
+    environment = {
+        pathsToLink = [
+            "/share/uwsm"
+        ];
+    };
+}

system/services.nix

@@ -0,0 +1,32 @@
+{ ... }:
+
+{
+    services = {
+        openssh.enable = true;
+        dbus.enable = true;
+        envfs.enable = true; # This ensures normal shebangs work (#!/bin/bash)
+        expressvpn.enable = true;
+        locate.enable = true;
+        fwupd.enable = true;
+        "power-profiles-daemon".enable = true;
+        upower = {
+            enable = true;
+            percentageLow = 20;
+            percentageCritical = 5;
+            percentageAction = 3;
+            criticalPowerAction = "Hibernate";
+        };
+        displayManager = {
+            sddm = {
+                enable = true;
+                wayland.enable = true;
+                theme = "maya";
+            };
+            autoLogin.enable = true;
+            autoLogin.user = "chris";
+            defaultSession = "hyprland-uwsm";
+        };
+        gnome.gnome-keyring.enable = true;
+    };
+    security.pam.services.sddm.enableGnomeKeyring = true;
+}

system/sound.nix

@@ -0,0 +1,11 @@
+{ ... }:
+
+{
+    services.pipewire = {
+        enable = true;
+        alsa.enable = true;
+        alsa.support32Bit = true;
+        pulse.enable = true;
+        jack.enable = true;
+    };
+}

system/time.nix

@@ -0,0 +1,5 @@
+{...}:
+
+{
+    time.timeZone = "Europe/London";
+}

system/users.nix

@@ -0,0 +1,31 @@
+{ pkgs, ... }:
+
+{
+    users.users.chris = {
+        uid = 1000;
+        isNormalUser = true;
+        hashedPasswordFile = "/persist/passwords/chris";
+        shell = pkgs.zsh;
+        extraGroups = [
+            "chris"
+            "wheel"
+            "networkmanager"
+            "docker"
+        ];
+    };
+    system.activationScripts = {
+        setupInitialPassword = {
+            text = ''
+                # Ensure the directory exists
+                mkdir -p /persist/passwords
+
+                # Copy the initial hash if the file is missing
+                if [ ! -f /persist/passwords/chris ]; then
+                    cp ${../initial-configs/passwords/chris} /persist/passwords/chris
+                    chmod 600 /persist/passwords/chris
+                    chown root:root /persist/passwords/chris
+                fi
+            '';
+        };
+    };
+}

system/virtualisation.nix

@@ -0,0 +1,10 @@
+{ ... }:
+
+{
+    virtualisation = {
+        docker = {
+            enable = true;
+            autoPrune.enable = true;
+        };
+    };
+}