Update files

.Trash-1000/files/nextcloud.cfg

@@ -0,0 +1,54 @@
+[General]
+clientPreviousVersion=
+clientVersion=4.0.6
+confirmExternalStorage=true
+desktopEnterpriseChannel=stable
+isVfsEnabled=false
+launchOnSystemStartup=true
+monoIcons=false
+moveToTrash=false
+newBigFolderSizeLimit=500
+notifyExistingFoldersOverLimit=false
+optionalServerNotifications=true
+overrideLocalDir=
+overrideServerUrl=
+promptDeleteAllFiles=false
+showCallNotifications=true
+showChatNotifications=true
+showInExplorerNavigationPane=false
+stopSyncingExistingFoldersOverLimit=false
+updateChannel=stable
+useNewBigFolderSizeLimit=true
+
+[Accounts]
+0\Folders\1\ignoreHiddenFiles=false
+0\Folders\1\journalPath=.sync_0a9bf4139ff3.db
+0\Folders\1\localPath=/home/chris/Tower/
+0\Folders\1\paused=false
+0\Folders\1\targetPath=/
+0\Folders\1\version=2
+0\Folders\1\virtualFilesMode=off
+0\authType=webflow
+0\dav_user=chris
+0\desktopEnterpriseChannel=invalid
+0\displayName=chris
+0\encryptionCertificateSha256Fingerprint=@ByteArray()
+0\networkDownloadLimit=0
+0\networkDownloadLimitSetting=0
+0\networkProxyHostName=
+0\networkProxyNeedsAuth=false
+0\networkProxyPort=0
+0\networkProxyType=2
+0\networkProxyUser=
+0\networkUploadLimit=0
+0\networkUploadLimitSetting=0
+0\serverColor=@Variant(\0\0\0\x43\x1\xff\xff\0\0\x82\x82\xc9\xc9\0\0)
+0\serverHasValidSubscription=false
+0\serverTextColor=@Variant(\0\0\0\x43\x1\xff\xff\xff\xff\xff\xff\xff\xff\0\0)
+0\serverVersion=32.0.5.0
+0\url=https://tower.scarif.space
+0\version=13
+0\webflow_user=chris
+
+[Nextcloud]
+autoUpdateCheck=true

.Trash-1000/info/nextcloud.cfg.trashinfo

@@ -0,0 +1,3 @@
+[Trash Info]
+Path=/home/chris/.config/nixos/initial-configs/nextcloud.cfg
+DeletionDate=2026-03-23T21:32:08

README.md

@@ -0,0 +1,93 @@
+# NixOS Configuration
+
+This repository contains the declarative NixOS configuration for my machines, utilizing Flakes, Home Manager, and Disko for dynamic, multi-host deployment.
+
+## Hardware Configuration Generation
+
+When setting up a new host, or updating an existing one, you'll need to generate a hardware-specific configuration file so NixOS knows what kernel modules and microcode to load for your exact components.
+
+To generate the hardware configuration, run the following command directly on the target machine:
+
+```bash
+# Replace 'hostname' with the name of your machine (e.g., 'station' or 'stationette')
+# We use 'nix shell' since the nixos-install-tools package doesn't have a default executable.
+sudo $(which nix) --extra-experimental-features "nix-command flakes" shell nixpkgs#nixos-install-tools -c nixos-generate-config --no-filesystems --show-hardware-config --dir . > hardware/<hostname>-hardware-configuration.nix
+```
+
+Ensure this file is tracked by git before attempting to evaluate or build the flake:
+
+```bash
+git add hardware/<hostname>-hardware-configuration.nix
+```
+
+## Installation
+
+This configuration uses [Disko](https://github.com/nix-community/disko) to manage declarative disk partitioning and formatting. The disk layouts are defined in `hardware/disko.nix`.
+
+> [!WARNING]
+> Running the Disko installation commands below will **completely erase** the target disks. Ensure you have backups of any important data before proceeding.
+
+### Method 1: Installing Directly from Gitea (Remote)
+
+You can install NixOS directly from this repository without needing to clone it manually first. Boot into a NixOS live USB, open a terminal, and run the following command.
+
+Replace `<hostname>` with your target machine (e.g., `stationette`) and `<disk>` with the target block device (e.g., `/dev/sda` or `/dev/nvme0n1`):
+
+```bash
+nix --extra-experimental-features "nix-command flakes" run github:nix-community/disko/latest#disko-install -- \
+  --flake git+https://labs.scarif.space/chris/nixos/#<hostname> \
+  --disk <hostname> \
+  --write-efi-boot-entries <disk>
+```
+
+#### Examples:
+**For `stationette`:**
+```bash
+nix --extra-experimental-features "nix-command flakes" run github:nix-community/disko/latest#disko-install -- \
+  --flake git+https://labs.scarif.space/chris/nixos/#stationette \
+  --disk stationette \
+  --write-efi-boot-entries /dev/sda
+```
+
+**For `station`:**
+```bash
+nix --extra-experimental-features "nix-command flakes" run github:nix-community/disko/latest#disko-install -- \
+  --flake git+https://labs.scarif.space/chris/nixos/#station \
+  --disk station \
+  --write-efi-boot-entries /dev/nvme0n1
+```
+
+### Method 2: Installing from a Local Clone
+
+If you prefer to clone the repository first so you can make manual adjustments (like generating the hardware configuration) before deploying:
+
+1. Boot into a NixOS live USB.
+2. Clone the repository:
+   ```bash
+   git clone https://labs.scarif.space/chris/nixos.git /mnt/etc/nixos
+   cd /mnt/etc/nixos
+   ```
+3. Generate your hardware configuration (if needed):
+   ```bash
+   nixos-generate-config --no-filesystems --show-hardware-config > hardware/<hostname>-hardware-configuration.nix
+   git add hardware/<hostname>-hardware-configuration.nix
+   ```
+4. Run the Disko installer using the local flake:
+   ```bash
+   nix --extra-experimental-features "nix-command flakes" run github:nix-community/disko/latest#disko-install -- \
+     --flake .#<hostname> \
+     --disk <hostname> \
+     --write-efi-boot-entries <disk>
+   ```
+
+*(Remember to replace `<hostname>` and `<disk>` with your specific machine's details, e.g., `.m#stationette` and `/dev/sda`)*.
+
+---
+
+### Rebuilding the System
+
+Once installed and booted into your new system, you can pull the latest changes and apply updates using standard NixOS rebuild commands:
+
+```bash
+sudo nixos-rebuild switch --flake .#<hostname>
+```

alejandra.toml

@@ -0,0 +1 @@
+# indentation = "FourSpaces"

flake.lock

@@ -25,11 +25,11 @@
         "systems": "systems"
       },
       "locked": {
-        "lastModified": 1770910218,
+        "lastModified": 1774640361,
-        "narHash": "sha256-IyHoHbhLFuIgFG+n7dqHwJaXuNnRaEsxCfAsfudV1KY=",
+        "narHash": "sha256-5PLTPbnbtK0iDbsB9yFeHr5y/pv6/XzoVm/CDeXXt/c=",
         "owner": "abenz1267",
         "repo": "elephant",
-        "rev": "c354a596ec7a7e34e9c26478dc7ef9680bc23e6d",
+        "rev": "d30652147d8e16ebc849b779b8ef495a894b0dd4",
         "type": "github"
       },
       "original": {
@@ -46,11 +46,11 @@
       },
       "locked": {
         "dir": "pkgs/firefox-addons",
-        "lastModified": 1772078860,
+        "lastModified": 1775448173,
-        "narHash": "sha256-Pojf7QHic9RmZFIoWYx5LoHy1UytoOHuGnLH3U5Nipo=",
+        "narHash": "sha256-C6OJuD3A4KDNz4QaYedkYtXzKHPecG5YYyMGLq7UwY8=",
         "owner": "rycee",
         "repo": "nur-expressions",
-        "rev": "ae41eb07a37d1d5cd7b5714df0fbcb315c492e4d",
+        "rev": "5b0fb7d54dea38c47e5c58058c166e790a0e0cf1",
         "type": "gitlab"
       },
       "original": {
@@ -60,10 +60,44 @@
         "type": "gitlab"
       }
     },
+    "flake-compat": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1767039857,
+        "narHash": "sha256-vNpUSpF5Nuw8xvDLj2KCwwksIbjua2LZCqhV1LNRDns=",
+        "owner": "NixOS",
+        "repo": "flake-compat",
+        "rev": "5edf11c44bc78a0d334f6334cdaf7d60d732daab",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "repo": "flake-compat",
+        "type": "github"
+      }
+    },
     "flake-parts": {
       "inputs": {
         "nixpkgs-lib": "nixpkgs-lib"
       },
+      "locked": {
+        "lastModified": 1775087534,
+        "narHash": "sha256-91qqW8lhL7TLwgQWijoGBbiD4t7/q75KTi8NxjVmSmA=",
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "rev": "3107b77cd68437b9a76194f0f7f9c55f2329ca5b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "type": "github"
+      }
+    },
+    "flake-parts_2": {
+      "inputs": {
+        "nixpkgs-lib": "nixpkgs-lib_2"
+      },
       "locked": {
         "lastModified": 1763759067,
         "narHash": "sha256-LlLt2Jo/gMNYAwOgdRQBrsRoOz7BPRkzvNaI/fzXi2Q=",
@@ -78,6 +112,69 @@
         "type": "github"
       }
     },
+    "flake-utils": {
+      "inputs": {
+        "systems": "systems_2"
+      },
+      "locked": {
+        "lastModified": 1731533236,
+        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "git-hooks": {
+      "inputs": {
+        "flake-compat": "flake-compat",
+        "gitignore": "gitignore",
+        "nixpkgs": [
+          "nix-gaming",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1775036584,
+        "narHash": "sha256-zW0lyy7ZNNT/x8JhzFHBsP2IPx7ATZIPai4FJj12BgU=",
+        "owner": "cachix",
+        "repo": "git-hooks.nix",
+        "rev": "4e0eb042b67d863b1b34b3f64d52ceb9cd926735",
+        "type": "github"
+      },
+      "original": {
+        "owner": "cachix",
+        "repo": "git-hooks.nix",
+        "type": "github"
+      }
+    },
+    "gitignore": {
+      "inputs": {
+        "nixpkgs": [
+          "nix-gaming",
+          "git-hooks",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1709087332,
+        "narHash": "sha256-HG2cCnktfHsKV0s4XW83gU3F57gaTljL9KNSuG6bnQs=",
+        "owner": "hercules-ci",
+        "repo": "gitignore.nix",
+        "rev": "637db329424fd7e46cf4185293b9cc8c88c95394",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "gitignore.nix",
+        "type": "github"
+      }
+    },
     "home-manager": {
       "inputs": {
         "nixpkgs": [
@@ -85,11 +182,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1772020340,
+        "lastModified": 1775425411,
-        "narHash": "sha256-aqBl3GNpCadMoJ/hVkWTijM1Aeilc278MjM+LA3jK6g=",
+        "narHash": "sha256-KY6HsebJHEe5nHOWP7ur09mb0drGxYSzE3rQxy62rJo=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "36e38ca0d9afe4c55405fdf22179a5212243eecc",
+        "rev": "0d02ec1d0a05f88ef9e74b516842900c41f0f2fe",
         "type": "github"
       },
       "original": {
@@ -107,11 +204,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1772060133,
+        "lastModified": 1768598210,
-        "narHash": "sha256-VuyRptb8v1lVGMlLp4/1vRX3Efwec0CN0S6mKmDPzLg=",
+        "narHash": "sha256-kkgA32s/f4jaa4UG+2f8C225Qvclxnqs76mf8zvTVPg=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "ce9b6e52500a0ea0ec48f0bbf6d7a3e431d9dfa4",
+        "rev": "c47b2cc64a629f8e075de52e4742de688f930dc6",
         "type": "github"
       },
       "original": {
@@ -139,13 +236,33 @@
         "type": "github"
       }
     },
+    "nix-gaming": {
+      "inputs": {
+        "flake-parts": "flake-parts",
+        "git-hooks": "git-hooks",
+        "nixpkgs": "nixpkgs_4"
+      },
+      "locked": {
+        "lastModified": 1775445570,
+        "narHash": "sha256-Vo+fChd5PkSnbHDKPQSROMDPmPPuFsRTqeVpEWd7afU=",
+        "owner": "fufexan",
+        "repo": "nix-gaming",
+        "rev": "98a1511fbc84643be14c6c60816bdad1d00a004a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "fufexan",
+        "repo": "nix-gaming",
+        "type": "github"
+      }
+    },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1772082373,
+        "lastModified": 1768661221,
-        "narHash": "sha256-wySf8a6hvuqgFdwvvzPPTARBCMLDz7WFAufGkllD1M4=",
+        "narHash": "sha256-MJwOjrIISfOpdI9x4C+5WFQXvHtOuj5mqLZ4TMEtk1M=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "26eaeac4e409d7b5a6bf6f90a2a2dc223c78d915",
+        "rev": "3327b113f2ef698d380df83fbccefad7e83d7769",
         "type": "github"
       },
       "original": {
@@ -156,6 +273,21 @@
       }
     },
     "nixpkgs-lib": {
+      "locked": {
+        "lastModified": 1774748309,
+        "narHash": "sha256-+U7gF3qxzwD5TZuANzZPeJTZRHS29OFQgkQ2kiTJBIQ=",
+        "owner": "nix-community",
+        "repo": "nixpkgs.lib",
+        "rev": "333c4e0545a6da976206c74db8773a1645b5870a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "repo": "nixpkgs.lib",
+        "type": "github"
+      }
+    },
+    "nixpkgs-lib_2": {
       "locked": {
         "lastModified": 1761765539,
         "narHash": "sha256-b0yj6kfvO8ApcSE+QmA6mUfu8IYG6/uU28OFn4PaC8M=",
@@ -172,11 +304,11 @@
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1772198003,
+        "lastModified": 1775036866,
-        "narHash": "sha256-I45esRSssFtJ8p/gLHUZ1OUaaTaVLluNkABkk6arQwE=",
+        "narHash": "sha256-ZojAnPuCdy657PbTq5V0Y+AHKhZAIwSIT2cb8UgAz/U=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "dd9b079222d43e1943b6ebd802f04fd959dc8e61",
+        "rev": "6201e203d09599479a3b3450ed24fa81537ebc4e",
         "type": "github"
       },
       "original": {
@@ -204,11 +336,11 @@
     },
     "nixpkgs_3": {
       "locked": {
-        "lastModified": 1771848320,
+        "lastModified": 1768564909,
-        "narHash": "sha256-0MAd+0mun3K/Ns8JATeHT1sX28faLII5hVLq0L3BdZU=",
+        "narHash": "sha256-Kell/SpJYVkHWMvnhqJz/8DqQg2b6PguxVWOuadbHCc=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "2fc6539b481e1d2569f25f8799236694180c0993",
+        "rev": "e4bae1bd10c9c57b2cf517953ab70060a828ee6f",
         "type": "github"
       },
       "original": {
@@ -220,27 +352,11 @@
     },
     "nixpkgs_4": {
       "locked": {
-        "lastModified": 1772047000,
+        "lastModified": 1775126147,
-        "narHash": "sha256-7DaQVv4R97cii/Qdfy4tmDZMB2xxtyIvNGSwXBBhSmo=",
+        "narHash": "sha256-J0dZU4atgcfo4QvM9D92uQ0Oe1eLTxBVXjJzdEMQpD0=",
-        "owner": "nixos",
-        "repo": "nixpkgs",
-        "rev": "1267bb4920d0fc06ea916734c11b0bf004bbe17e",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nixos",
-        "ref": "nixos-25.11",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
-    "nixpkgs_5": {
-      "locked": {
-        "lastModified": 1764557259,
-        "narHash": "sha256-fhD/QUtJ0HKs3oLvfnD+/SrBV5Y7YEkCYnDjOVUjLys=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "0d70460758949966e91d9ecb823b821f963cefbb",
+        "rev": "8d8c1fa5b412c223ffa47410867813290cdedfef",
         "type": "github"
       },
       "original": {
@@ -250,18 +366,18 @@
         "type": "github"
       }
     },
-    "nixpkgs_6": {
+    "nixpkgs_5": {
       "locked": {
-        "lastModified": 1768564909,
+        "lastModified": 1775305101,
-        "narHash": "sha256-Kell/SpJYVkHWMvnhqJz/8DqQg2b6PguxVWOuadbHCc=",
+        "narHash": "sha256-/74n1oQPtKG52Yw41cbToxspxHbYz6O3vi+XEw16Qe8=",
-        "owner": "NixOS",
+        "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "e4bae1bd10c9c57b2cf517953ab70060a828ee6f",
+        "rev": "36a601196c4ebf49e035270e10b2d103fe39076b",
         "type": "github"
       },
       "original": {
-        "owner": "NixOS",
+        "owner": "nixos",
-        "ref": "nixos-unstable",
+        "ref": "nixos-25.11",
         "repo": "nixpkgs",
         "type": "github"
       }
@@ -273,9 +389,11 @@
         "firefox-addons": "firefox-addons",
         "home-manager": "home-manager",
         "impermanence": "impermanence",
-        "nixpkgs": "nixpkgs_4",
+        "nix-gaming": "nix-gaming",
+        "nixpkgs": "nixpkgs_5",
         "nixpkgs-unstable": "nixpkgs-unstable",
         "try-cli": "try-cli",
+        "voxtype": "voxtype",
         "walker": "walker"
       }
     },
@@ -295,6 +413,21 @@
       }
     },
     "systems_2": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
+    "systems_3": {
       "locked": {
         "lastModified": 1689347949,
         "narHash": "sha256-12tWmuL2zgBgZkdoB6qXZsgJEH9LR3oUgpaQq2RbI80=",
@@ -311,8 +444,10 @@
     },
     "try-cli": {
       "inputs": {
-        "flake-parts": "flake-parts",
+        "flake-parts": "flake-parts_2",
-        "nixpkgs": "nixpkgs_5"
+        "nixpkgs": [
+          "nixpkgs"
+        ]
       },
       "locked": {
         "lastModified": 1770817563,
@@ -328,20 +463,43 @@
         "type": "github"
       }
     },
+    "voxtype": {
+      "inputs": {
+        "flake-utils": "flake-utils",
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1775048999,
+        "narHash": "sha256-w35TNOdJcgMdt98XusY8DjmY4UPv3NQ7m+vR8oliWRU=",
+        "owner": "peteonrails",
+        "repo": "voxtype",
+        "rev": "f292b6e1c9dbcfe4cdc7f781048db8be16c40c18",
+        "type": "github"
+      },
+      "original": {
+        "owner": "peteonrails",
+        "repo": "voxtype",
+        "type": "github"
+      }
+    },
     "walker": {
       "inputs": {
         "elephant": [
           "elephant"
         ],
-        "nixpkgs": "nixpkgs_6",
+        "nixpkgs": [
-        "systems": "systems_2"
+          "nixpkgs"
+        ],
+        "systems": "systems_3"
       },
       "locked": {
-        "lastModified": 1771062828,
+        "lastModified": 1773675699,
-        "narHash": "sha256-y1jBFFO0u+V21y3YldHZozrDwVJVrdC+o3c4M8/rasU=",
+        "narHash": "sha256-GrormZ2KxchtCLuO90+5fioEQmlUCKBIil0Mzr9w0Iw=",
         "owner": "abenz1267",
         "repo": "walker",
-        "rev": "19b1104585305e0806b842af341630f72038a4b9",
+        "rev": "d2702235710da3d7daf55c912ca7534261cf20f5",
         "type": "github"
       },
       "original": {

flake.nix

@@ -4,6 +4,7 @@
     inputs = {
         nixpkgs.url = "github:nixos/nixpkgs/nixos-25.11";
         nixpkgs-unstable.url = "github:nixos/nixpkgs/nixos-unstable";
+        nix-gaming.url = "github:fufexan/nix-gaming";
         disko.url = "github:nix-community/disko/latest";
         impermanence.url = "github:nix-community/impermanence";
         home-manager = {
@@ -14,578 +15,110 @@
             url = "gitlab:rycee/nur-expressions?dir=pkgs/firefox-addons";
             inputs.nixpkgs.follows = "nixpkgs";
         };
-        try-cli.url = "github:tobi/try-cli";
+        try-cli = {
-        elephant.url = "github:abenz1267/elephant";
+            url = "github:tobi/try-cli";
+            inputs.nixpkgs.follows = "nixpkgs";
+        };
+        elephant = {
+            url = "github:abenz1267/elephant";
+            # inputs.nixpkgs.follows = "nixpkgs";
+        };
         walker = {
             url = "github:abenz1267/walker";
             inputs.elephant.follows = "elephant";
+            inputs.nixpkgs.follows = "nixpkgs";
         };
+        voxtype = {
+            url = "github:peteonrails/voxtype";
+            inputs.nixpkgs.follows = "nixpkgs";
+        };
+        # hyprland-preview-share-picker = {
+        #     url = "github:WhySoBad/hyprland-preview-share-picker";
+        #     inputs.nixpkgs.follows = "nixpkgs";
+        # };
     };
 
     outputs = {
         self,
         nixpkgs,
         nixpkgs-unstable,
+        nix-gaming,
         impermanence,
         disko,
         home-manager,
         try-cli,
+        voxtype,
+        walker,
+        # hyprland-preview-share-picker,
         ...
     } @ inputs: let
         lib = nixpkgs.lib;
         system = "x86_64-linux";
-        pkgs = nixpkgs.legacyPackages.${system};
+        pkgs = import nixpkgs {
-        pkgs-unstable = nixpkgs-unstable.legacyPackages.${system};
+            inherit system;
-    in {
+            config.allowUnfree = true;
-        nixosConfigurations = {
+        };
-            stationette = nixpkgs.lib.nixosSystem {
+        nix-gaming = inputs.nix-gaming.packages.${system};
+        pkgs-unstable = import nixpkgs-unstable {
+            inherit system;
+            config.allowUnfree = true;
+        };
+
+        mkHost = hostname: nixpkgs.lib.nixosSystem {
             modules = [
-                    ./hardware-configuration.nix
+                ./hardware
-                    disko.nixosModules.disko
+                ./system
-                    impermanence.nixosModules.impermanence
                 home-manager.nixosModules.home-manager
                 {
-                        # nix --extra-experimental-features "nix-command flakes" run github:nix-community/disko/latest#disko-install -- --flake ./#stationette --disk stationette --write-efi-boot-entries /dev/sda
+                    powerManagement.enable = true;
-                        disko.devices = {
-                            disk = {
-                                stationette = {
-                                    type = "disk";
-                                    device = "/dev/sda"; # Check this with lsblk
-                                    content = {
-                                        type = "gpt";
-                                        partitions = {
-                                            ESP = {
-                                                size = "512M";
-                                                type = "EF00";
-                                                content = {
-                                                    type = "filesystem";
-                                                    format = "vfat";
-                                                    mountpoint = "/boot";
-                                                    mountOptions = [ "fmask=0022" "dmask=0022" "umask=0077" ];
-                                                };
-                                            };
-                                            root = {
-                                                size = "100%";
-                                                content = {
-                                                    type = "btrfs";
-                                                    extraArgs = [ "-f" ]; # Force overwrite
-                                                    subvolumes = {
-                                                        "/root" = {
-                                                            mountpoint = "/";
-                                                            mountOptions = [ "compress=zstd" "noatime" ];
-                                                        };
-                                                        "/nix" = {
-                                                            mountpoint = "/nix";
-                                                            mountOptions = [ "compress=zstd" "noatime" ];
-                                                        };
-                                                        "/persist" = {
-                                                            mountpoint = "/persist";
-                                                            mountOptions = [ "compress=zstd" "noatime" ];
-                                                        };
-                                                        "/swap" = {
-                                                            mountpoint = "/.swapvol";
-                                                            swap.swapfile.size = "8G";
-                                                        };
-                                                    };
-                                                };
-                                            };
-                                        };
-                                    };
-                                };
-                            };
-                        };
-                        boot.loader = {
-                            systemd-boot.enable = true;
-                            efi.canTouchEfiVariables = true;
-                        };
-                        environment = {
-                            persistence."/persist" = {
-                                hideMounts = true;
-                                directories = [
-                                    "/var/log"
-                                    "/var/lib/bluetooth"
-                                    "/var/lib/networkmanager"
-                                    "/var/lib/nixos"
-                                    "/etc/ssh"
-                                    "/var/lib/systemd/coredump"
-                                    "/etc/NetworkManager/system-connections"
-                                ];
-                                files = [
-                                    "/etc/machine-id"
-                                ];
-                            };
-                            systemPackages = with pkgs; [
-                                hyprpaper
-                                libnotify
-                                mako
-                                qt6.qtwayland
-                                hypridle
-                                hyprlock
-                                hyprpicker
-                                wlogout
-                                wl-clipboard
-                                waybar
-                                bat
-                                highlight
-                                btop
-                                eza
-                                fzf
-                                neovim
-                                ripgrep
-                                tldr
-                                unzip
-                                openssl
-                                wget
-                                zip
-                                zoxide
-                                jq
-                                git
-                                lazygit
-                                less
-                                tree
-                                tmux
-                                tmuxinator
-                                wget
-                                zenity
-                                gum
-                                pkgs-unstable.yazi
-                                rsync
-                                p7zip
-                                impala
-                                xdg-terminal-exec
-                            ];
-                        };
-                        networking = {
-                            hostName = "stationette";
-                            networkmanager.enable = true;
-                            wireless = {
-                                iwd.enable = true;
-                                networks = {
-                                    ssid = "Outskirt Stable";
-                                    psk = "SidonPhlegm";
-                                };
-                            };
-                            firewall = {
-                                enable = true;
-                                # Ports used by Local Send
-                                allowedTCPPorts = [ 53317 ];
-                                allowedUDPPorts = [ 53317 ];
-                            };
-                        };
-                        users.users.chris = {
-                            uid = 1000;
-                            isNormalUser = true;
-                            initialPassword = "changeme123";
-                            shell = pkgs.zsh;
-                            extraGroups = [
-                                "chris"
-                                "wheel"
-                                "networkmanager"
-                            ];
-                        };
-                        nixpkgs.config.allowUnfree = true;
-                        programs = {
-                            zsh = {
-                                enable = true;
-                            };
-                            hyprland = {
-                                enable = true;
-                                package = pkgs-unstable.hyprland;
-                                xwayland.enable = true;
-                            };
-                            steam = {
-                                enable = true;
-                                remotePlay.openFirewall = true; # Open ports in the firewall for Steam Remote Play
-                                dedicatedServer.openFirewall = true; # Open ports in the firewall for Source Dedicated Server
-                                localNetworkGameTransfers.openFirewall = true; # Open ports in the firewall for Steam Local Network Game Transfers
-                            };
-                        };
-                        services = {
-                            openssh.enable = true;
-                            dbus.enable = true;
-                            envfs.enable = true; # This ensures normal shebangs work (#!/bin/bash)
-                            expressvpn.enable = true;
-                            locate.enable = true;
-
-                            displayManager = {
-                                sddm = {
-                                    enable = true;
-                                    wayland.enable = true;
-                                    theme = "maya";
-                                };
-                                autoLogin.enable = true;
-                                autoLogin.user = "chris";
-                                defaultSession = "hyprland";
-                            };
-                        };
-
                     system.stateVersion = "25.11";
                     home-manager = {
-                            users.chris = { pkgs, lib, ... }: {
+                        users.chris = import ./home;
-                                home = {
-                                    file.".mozilla/firefox/default/search.json.mozlz4".force = lib.mkForce true;
-                                    username = "chris";
-                                    homeDirectory = "/home/chris";
-                                    enableNixpkgsReleaseCheck = false;
-                                    stateVersion = "25.11";
-                                    persistence."/persist" = {
-                                        directories = [
-                                            "Downloads"
-                                            "Tower"
-                                            "Code"
-                                            ".steam"
-                                            ".config/dotfiles"
-                                            ".mozilla/firefox"
-                                            ".config/nvim"
-                                            ".config/yazi/plugins"
-                                            ".config/nixos"
-                                            ".config/sinew.in"
-                                            ".local/share/direnv"
-                                            ".local/share/nvim"
-                                            ".local/share/zoxide"
-                                            ".local/share/Enpass"
-                                            ".local/share/Steam"
-                                            ".ssh"
-                                        ];
-                                        files = [
-                                            ".config/shell/.env"
-                                        ];
-                                    };
-                                    activation = {
-                                        setupDotfiles = lib.hm.dag.entryAfter ["writeBoundary"] ''
-                                        if [[ -v DRY_RUN ]]; then
-                                            echo "Dry run: Would bootstrap dotfiles from labs.scarif.space"
-                                            exit
-                                        fi
-
-                                        TEMP_DIR=$(mktemp -d)
-
-                                        DOTFILES_DIR="$HOME/.config/dotfiles"
-                                        DOTFILES_GIT_DIR="$DOTFILES_DIR/.git"
-
-                                        if [ ! -d "$DOTFILES_GIT_DIR" ]; then
-                                            echo "No local repository so cloning from remote"
-                                            SOURCE="https://labs.scarif.space/chris/dotfiles.git"
-                                            ${pkgs.git}/bin/git clone -b main "$SOURCE" "$TEMP_DIR"
-                                            mv "$TEMP_DIR/.git" "$DOTFILES_GIT_DIR"
-                                        else
-                                            echo "Local repository found so cloning from there"
-                                            ${pkgs.git}/bin/git clone -b main "$DOTFILES_GIT_DIR" "$TEMP_DIR"
-                                            ${pkgs.git}/bin/git --git-dir="$DOTFILES_GIT_DIR" --work-tree="$TEMP_DIR" pull --rebase || true
-                                        fi
-
-                                        echo "Copying dot files to home"
-                                        ${pkgs.coreutils}/bin/cp -rfT "$TEMP_DIR" "$HOME"
-
-                                        NVIM_DIR="$HOME/.config/nvim"
-                                        echo "Neovim config not initialised so initialising from remote"
-                                        ${pkgs.git}/bin/git --git-dir="$DOTFILES_GIT_DIR" --work-tree="$HOME" submodule set-url ".config/nvim" https://labs.scarif.space/chris/nvim.git
-                                        ${pkgs.git}/bin/git --git-dir="$DOTFILES_GIT_DIR" --work-tree="$HOME" submodule update --init || true
-                                        ${pkgs.git}/bin/git --git-dir="$DOTFILES_GIT_DIR" --work-tree="$HOME" submodule set-url ".config/nvim" git@labs.scarif.space:chris/nvim.git
-
-                                        cd "$HOME"
-
-                                        echo "Cleanup"
-                                        ${pkgs.coreutils}/bin/rm -rf "$TEMP_DIR"
-                                        ${pkgs.coreutils}/bin/rm -rf "$HOME/.git" || true
-
-                                        echo "Dotfiles bootstrapped successfully."
-                                        '';
-                                        setupDevDirectories = lib.hm.dag.entryAfter ["writeBoundary"] ''
-                                        if [[ -v DRY_RUN ]]; then
-                                            echo "Dry run: Would create dev directories"
-                                            exit
-                                        fi
-
-                                        echo "Creating development directories"
-
-                                        for dir in "DevOps" "FSharp" "JavaScript" "Scala" "Rust" "PHP" "Tutorials" "Sites" "MobileApps" "Tries"; do
-                                            if [ ! -d "$HOME/Code/$dir" ]; then
-                                                mkdir -p "$HOME/Code/$dir"
-                                            fi
-                                        done
-                                        '';
-                                    };
-                                    packages = with pkgs; [
-                                        # jetbrains.rider
-                                        # android-studio
-                                        # beekeeper-studio
-                                        # brave
-                                        # go
-                                        # lua
-                                        direnv
-                                        wiremix
-                                        bluetui
-                                        spotify
-                                        nodePackages.pnpm
-                                        try-cli.packages.${system}.default
-                                        # (python3.withPackages (python-pkgs: [ python-pkgs.pip python-pkgs.requests ]))
-                                        # rustup
-                                        # zig
-                                        obsidian
-                                        mailspring
-                                        # thunderbird
-                                        # libreoffice-qt
-                                        # pkgs-unstable.nerd-fonts.fira-code
-                                        # hunspell
-                                        # blueberry
-                                        # pkgs-unstable.hyprshot
-                                        # catppuccin-cursors.macchiatoBlue
-                                        # catppuccin-gtk
-                                        # papirus-folders
-                                        # pkgs-unstable.php84Packages.composer
-                                        # pkgs-unstable.php84Packages.xdebug
-                                        # pkgs-unstable.php84Extensions.sqlite3
-                                        # pkgs-unstable.php84Extensions.redis
-                                        # pkgs-unstable.php84Extensions.sodium
-                                        # pkgs-unstable.php84Extensions.pgsql
-                                        # pkgs-unstable.php84Extensions.iconv
-                                        # pkgs-unstable.php84Extensions.gd
-                                        # pkgs-unstable.php84Extensions.zip
-                                        # php
-                                        antigravity
-                                        gimp
-                                        # kdePackages.dolphin
-                                        nautilus
-                                        enpass
-                                        enpass-cli
-                                        expressvpn
-                                        # jellyfin-ffmpeg
-                                        inkscape
-                                        krita
-                                        libreoffice-fresh
-                                        nextcloud-client
-                                        nodejs_24
-                                        signal-desktop
-                                        sxiv
-                                        tenacity
-                                        zathura
-                                        ghostty
-                                        yarn
-                                        uwsm
-                                        wally-cli
-                                        kdePackages.wacomtablet
-                                        # kdePackages.print-manager
-                                        mpv
-                                        vlc
-                                        imv
-                                        # telegram-desktop
-                                    ];
-                                };
-                                xdg.mimeApps = {
-                                    enable = true;
-                                    defaultApplications = {
-                                        # Directories
-                                        "inode/directory" = [ "org.gnome.Nautilus.desktop" ];
-
-                                        # Images
-                                        "image/png" = [ "imv.desktop" ];
-                                        "image/jpeg" = [ "imv.desktop" ];
-                                        "image/gif" = [ "imv.desktop" ];
-                                        "image/webp" = [ "imv.desktop" ];
-                                        "image/bmp" = [ "imv.desktop" ];
-                                        "image/tiff" = [ "imv.desktop" ];
-
-                                        # Documents
-                                        "application/pdf" = [ "zathura.desktop" ];
-
-                                        # Web and Browser
-                                        "x-scheme-handler/http" = [ "firefox.desktop" ];
-                                        "x-scheme-handler/https" = [ "firefox.desktop" ];
-                                        "text/html" = [ "firefox.desktop" ];
-
-                                        # Video
-                                        "video/mp4" = [ "mpv.desktop" ];
-                                        "video/x-msvideo" = [ "mpv.desktop" ];
-                                        "video/x-matroska" = [ "mpv.desktop" ];
-                                        "video/x-flv" = [ "mpv.desktop" ];
-                                        "video/x-ms-wmv" = [ "mpv.desktop" ];
-                                        "video/mpeg" = [ "mpv.desktop" ];
-                                        "video/ogg" = [ "mpv.desktop" ];
-                                        "video/webm" = [ "mpv.desktop" ];
-                                        "video/quicktime" = [ "mpv.desktop" ];
-                                        "video/3gpp" = [ "mpv.desktop" ];
-                                        "video/3gpp2" = [ "mpv.desktop" ];
-                                        "video/x-ms-asf" = [ "mpv.desktop" ];
-                                        "video/x-ogm+ogg" = [ "mpv.desktop" ];
-                                        "video/x-theora+ogg" = [ "mpv.desktop" ];
-                                        "application/ogg" = [ "mpv.desktop" ];
-
-                                        # Mail
-                                        "x-scheme-handler/mailto" = [ "mailspring.desktop" ];
-
-                                        # Text and Code
-                                        "text/plain" = [ "nvim.desktop" ];
-                                        "text/english" = [ "nvim.desktop" ];
-                                        "text/x-makefile" = [ "nvim.desktop" ];
-                                        "text/x-c++hdr" = [ "nvim.desktop" ];
-                                        "text/x-c++src" = [ "nvim.desktop" ];
-                                        "text/x-chdr" = [ "nvim.desktop" ];
-                                        "text/x-csrc" = [ "nvim.desktop" ];
-                                        "text/x-java" = [ "nvim.desktop" ];
-                                        "text/x-moc" = [ "nvim.desktop" ];
-                                        "text/x-pascal" = [ "nvim.desktop" ];
-                                        "text/x-tcl" = [ "nvim.desktop" ];
-                                        "text/x-tex" = [ "nvim.desktop" ];
-                                        "application/x-shellscript" = [ "nvim.desktop" ];
-                                        "text/x-c" = [ "nvim.desktop" ];
-                                        "text/x-c++" = [ "nvim.desktop" ];
-                                        "application/xml" = [ "nvim.desktop" ];
-                                        "text/xml" = [ "nvim.desktop" ];
-                                    };
-                                };
-                                imports = [
-                                    inputs.walker.homeManagerModules.default
-                                    # inputs.elephant.homeManagerModules.default
-                                ];
-                                systemd.user.services = {
-                                    walker = {
-                                        Unit.Description = "Walker - Application Runner";
-                                        Install.WantedBy = ["graphical-session.target"];
-                                    };
-                                    elephant = {
-                                        Unit.Description = "Elephant launcher backend";
-                                        Install.WantedBy = ["graphical-session.target"];
-                                    };
-                                };
-                                programs = let
-                                    lock-false = {
-                                        Value = false;
-                                        Status = "locked";
-                                    };
-                                    lock-true = {
-                                        Value = true;
-                                        Status = "locked";
-                                    };
-                                in {
-                                    walker = {
-                                        enable = true;
-                                        runAsService = true;
-                                    };
-                                    elephant = {
-                                        enable = true;
-                                        installService = true;
-                                    };
-                                    firefox = {
-                                        enable = true;
-                                        package = pkgs.wrapFirefox pkgs.firefox-unwrapped {
-                                            extraPolicies = {
-                                                DisableTelemetry = true;
-                                                DisableFirefoxStudies = true;
-                                                EnableTrackingProtection = {
-                                                    Value= true;
-                                                    Locked = true;
-                                                    Cryptomining = true;
-                                                    Fingerprinting = true;
-                                                };
-                                                DisablePocket = true;
-                                                DisableFirefoxAccounts = false;
-                                                DisableAccounts = false;
-                                                DisableFirefoxScreenshots = true;
-                                                OverrideFirstRunPage = "";
-                                                OverridePostUpdatePage = "";
-                                                DontCheckDefaultBrowser = true;
-                                                DisplayBookmarksToolbar = "always"; # alternatives: "always" or "newtab"
-                                                DisplayMenuBar = "default-off"; # alternatives: "always", "never" or "default-on"
-                                                SearchBar = "unified"; # alternative: "separate"
-
-                                                /* ---- EXTENSIONS ---- */
-                                                ExtensionSettings = {
-                                                    "*".installation_mode = "allowed"; # blocks all addons except the ones specified below
-                                                    # Enpass
-                                                    "firefox-enpass@enpass.io" = {
-                                                        install_url = "https://dl.enpass.io/stable/extensions/firefox/versions/v6.11.10.2/enpass_password_manager-6.11.10.2.xpi";
-                                                        installation_mode = "force_installed";
-                                                    };
-                                                };
-
-                                                /* ---- PREFERENCES ---- */
-                                                # Set preferences shared by all profiles.
-                                                Preferences = { 
-                                                    "browser.contentblocking.category" = { Value = "strict"; Status = "locked"; };
-                                                    "extensions.pocket.enabled" = lock-false;
-                                                    "extensions.screenshots.disabled" = lock-true;
-                                                    "browser.topsites.contile.enabled" = lock-false;
-                                                    "browser.formfill.enable" = lock-false;
-                                                    "browser.search.suggest.enabled" = lock-false;
-                                                    "browser.search.suggest.enabled.private" = lock-false;
-                                                    "browser.urlbar.suggest.searches" = lock-false;
-                                                    "browser.urlbar.showSearchSuggestionsFirst" = lock-false;
-                                                    "browser.newtabpage.activity-stream.feeds.section.topstories" = lock-false;
-                                                    "browser.newtabpage.activity-stream.feeds.snippets" = lock-false;
-                                                    "browser.newtabpage.activity-stream.section.highlights.includePocket" = lock-false;
-                                                    "browser.newtabpage.activity-stream.section.highlights.includeBookmarks" = lock-false;
-                                                    "browser.newtabpage.activity-stream.section.highlights.includeDownloads" = lock-false;
-                                                    "browser.newtabpage.activity-stream.section.highlights.includeVisited" = lock-false;
-                                                    "browser.newtabpage.activity-stream.showSponsored" = lock-false;
-                                                    "browser.newtabpage.activity-stream.system.showSponsored" = lock-false;
-                                                    "browser.newtabpage.activity-stream.showSponsoredTopSites" = lock-false;
-                                                    "browser.newtabpage.activity-stream.feeds.section.highlights" = false;
-                                                };
-                                            };
-                                        };
-                                        profiles = {
-                                            default = {
-                                                id = 0;
-                                                name = "default";
-                                                isDefault = true;
-                                                search = {
-                                                    default = "holocron";
-                                                    order = [ "holocron" "google" ];
-                                                    engines= {
-                                                        holocron = {
-                                                            name = "Holocron";
-                                                            urls = [{
-                                                                template = "https://holocron.scarif.space/search";
-                                                                params = [
-                                                                    { name = "q"; value = "{searchTerms}"; }
-                                                                ];
-                                                            }];
-                                                            icon = "https://holocron.scarif.space/favicon.ico";
-                                                            definedAliases = [ "@h" ];
-                                                        };
-                                                        bing.metaData.hidden = true;
-                                                        ebay.metaData.hidden = true;
-                                                        perplexity.metaData.hidden = true;
-                                                    };
-                                                };
-                                            };
-                                        };
-                                    };
-                                };
-                                nixpkgs = {
-                                    config = {
-                                        allowUnfree = true;
-                                        allowUnfreePredicate = (_: true);
-
-                                        permittedInsecurePackages = [
-                                            "electron-25.9.0" # Obsidian
-                                            "beekeeper-studio-5.3.4"
-                                        ];
-                                    };
-                                };
-                            };
                         extraSpecialArgs = {
                             inherit inputs;
+                            inherit pkgs-unstable;
+                            inherit try-cli;
+                            inherit voxtype;
+                            inherit walker;
+                            inherit impermanence;
+                            inherit hostname;
                         };
                     };
                 }
             ];
+            specialArgs = {
+                inherit inputs;
+                inherit pkgs-unstable;
+                inherit impermanence;
+                inherit disko;
+                inherit hostname;
+                inherit nix-gaming;
             };
         };
+    in {
+        nixosConfigurations = {
+            stationette = mkHost "stationette";
+            station = mkHost "station";
+        };
 
         # Standalone home-manager configuration entrypoint
-        #homeConfigurations = {
+        homeConfigurations = {
-        #    chris = home-manager.lib.homeManagerConfiguration {
+            chris = home-manager.lib.homeManagerConfiguration {
-        #        inherit pkgs;
+                inherit pkgs;
-        #        extraSpecialArgs = {
+                extraSpecialArgs = {
-        #            inherit inputs;
+                    inherit inputs;
-        #        };
+                    inherit pkgs-unstable;
-        #        modules = [
+                    inherit try-cli;
-        #            ./home
+                    inherit voxtype;
-        #        ];
+                    inherit walker;
-        #    };
+                    inherit impermanence;
-        #};
+                };
+                modules = [
+                    ./home
+                ];
+            };
+        };
+
         nix.settings = {
             extra-substituters = [
                 "https://walker.cachix.org"
@@ -595,6 +128,8 @@
                 "walker.cachix.org-1:fG8q+uAaMqhsMxWjwvk0IMb4mFPFLqHjuvfwQxE4oJM="
                 "walker-git.cachix.org-1:vmC0ocfPWh0S/vRAQGtChuiZBTAe4wiKDeyyXM0/7pM="
             ];
+            substituters = ["https://nix-gaming.cachix.org"];
+            trusted-public-keys = ["nix-gaming.cachix.org-1:nbjlureqMbRAxR1gJ/f3hxemL9svXaZF/Ees8vCUUs4="];
         };
     };
 }

hardware-configuration.nix

@@ -1,69 +0,0 @@
-# Do not modify this file!  It was generated by ‘nixos-generate-config’
-# and may be overwritten by future invocations.  Please make changes
-# to /etc/nixos/configuration.nix instead.
-{ config, lib, pkgs, modulesPath, ... }:
-
-{
-    imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
-
-    boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "usb_storage" "sd_mod" "sdhci_pci" ];
-    boot.initrd.kernelModules = [ ];
-    boot.kernelModules = [ "kvm-intel" ];
-    boot.extraModulePackages = [ ];
-
-    fileSystems."/" = {
-        device = "/dev/disk/by-partlabel/disk-stationette-root";
-        fsType = "btrfs";
-        options = [ "subvol=root" ];
-    };
-
-    boot.initrd.postDeviceCommands = lib.mkAfter ''
-        mkdir /btrfs_tmp
-        mount /dev/disk/by-partlabel/disk-stationette-root /btrfs_tmp
-        if [[ -e /btrfs_tmp/root ]]; then
-            mkdir -p /btrfs_tmp/old_roots
-            timestamp=$(date +%Y-%m-%d_%H-%M-%S)
-            mv /btrfs_tmp/root "/btrfs_tmp/old_roots/$timestamp"
-        fi
-
-        delete_subvolume_recursively() {
-            IFS=$'\n'
-            for i in $(btrfs subvolume list -o "$1" | cut -f 9 -d ' '); do
-                delete_subvolume_recursively "/btrfs_tmp/$i"
-            done
-            btrfs subvolume delete "$1"
-        }
-
-        for i in $(find /btrfs_tmp/old_roots/ -maxdepth 1 -mtime +7); do
-            delete_subvolume_recursively "$i"
-        done
-
-        btrfs subvolume create /btrfs_tmp/root
-        umount /btrfs_tmp
-    '';
-
-    fileSystems."/persist" = {
-        device = "/dev/disk/by-partlabel/disk-stationette-root";
-        neededForBoot = true;
-        fsType = "btrfs";
-        options = [ "subvol=persist" ];
-    };
-
-    fileSystems."/nix" = {
-        device = "/dev/disk/by-partlabel/disk-stationette-root";
-        neededForBoot = true;
-        fsType = "btrfs";
-        options = [ "subvol=nix" ];
-    };
-
-    fileSystems."/boot" = {
-        device = "/dev/disk/by-partlabel/disk-stationette-ESP";
-        fsType = "vfat";
-        options = [ "fmask=0022" "dmask=0022" "umask=0077" ];
-    };
-
-    swapDevices = [ ];
-
-    nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
-    hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
-}

hardware/default.nix

@@ -0,0 +1,10 @@
+{ hostname, ... }:
+
+{
+    imports = [
+        ./disko.nix
+        ./filesystem.nix
+        ./mounts.nix
+        ./${hostname}-hardware-configuration.nix
+    ];
+}

hardware/disko.nix

@@ -0,0 +1,63 @@
+{ disko, hostname, ... }:
+
+let
+mkDisk = { hostname, drive }: {
+    type = "disk";
+    # Check this with lsblk
+    device = drive;
+    content = {
+        type = "gpt";
+        partitions = {
+            ESP = {
+                size = "512M";
+                type = "EF00";
+                content = {
+                    type = "filesystem";
+                    format = "vfat";
+                    mountpoint = "/boot";
+                    mountOptions = [ "fmask=0022" "dmask=0022" "umask=0077" ];
+                };
+            };
+            root = {
+                size = "100%";
+                content = {
+                    type = "btrfs";
+                    # Force overwrite
+                    extraArgs = [ "-f" ];
+                    subvolumes = {
+                        "/root" = {
+                            mountpoint = "/";
+                            mountOptions = [ "compress=zstd" "noatime" ];
+                        };
+                        "/nix" = {
+                            mountpoint = "/nix";
+                            mountOptions = [ "compress=zstd" "noatime" ];
+                        };
+                        "/persist" = {
+                            mountpoint = "/persist";
+                            mountOptions = [ "compress=zstd" "noatime" ];
+                        };
+                        "/swap" = {
+                            mountpoint = "/.swapvol";
+                            swap.swapfile.size = "8G";
+                        };
+                    };
+                };
+            };
+        };
+    };
+};
+in
+
+# nix --extra-experimental-features "nix-command flakes" run github:nix-community/disko/latest#disko-install -- --flake ./#${hostname} --disk stationette --write-efi-boot-entries ${drive}
+{
+    imports = [ disko.nixosModules.disko ];
+    disko.devices = {
+        disk = {
+            "${hostname}" = mkDisk { 
+                inherit hostname; 
+                drive = if hostname == "station" then "/dev/nvme0n1" else "/dev/sda"; 
+            };
+        };
+    };
+}

hardware/filesystem.nix

@@ -0,0 +1,66 @@
+{ config, lib, pkgs, modulesPath, hostname, ... }:
+
+let
+rootDisk = "/dev/disk/by-partlabel/disk-${hostname}-root";
+bootDisk = "/dev/disk/by-partlabel/disk-${hostname}-ESP";
+in
+
+{
+    boot.initrd.postDeviceCommands = lib.mkAfter ''
+        mkdir /btrfs_tmp
+        mount ${rootDisk} /btrfs_tmp
+        if [[ -e /btrfs_tmp/root ]]; then
+            mkdir -p /btrfs_tmp/old_roots
+            timestamp=$(date +%Y-%m-%d_%H-%M-%S)
+            mv /btrfs_tmp/root "/btrfs_tmp/old_roots/$timestamp"
+        fi
+
+        delete_subvolume_recursively() {
+            IFS=$'\n'
+            for i in $(btrfs subvolume list -o "$1" | cut -f 9 -d ' '); do
+                delete_subvolume_recursively "/btrfs_tmp/$i"
+            done
+            btrfs subvolume delete "$1"
+        }
+
+        for i in $(find /btrfs_tmp/old_roots/ -maxdepth 1 -mtime +7); do
+            delete_subvolume_recursively "$i"
+        done
+
+        btrfs subvolume create /btrfs_tmp/root
+        umount /btrfs_tmp
+    '';
+
+    # fileSystems."/" = {
+    #     device = rootDisk;
+    #     fsType = "btrfs";
+    #     options = [ "subvol=root" ];
+    # };
+    #
+    # fileSystems."/persist" = {
+    #     device = rootDisk;
+    #     neededForBoot = true;
+    #     fsType = "btrfs";
+    #     options = [ "subvol=persist" ];
+    # };
+    #
+    # fileSystems."/nix" = {
+    #     device = rootDisk;
+    #     neededForBoot = true;
+    #     fsType = "btrfs";
+    #     options = [ "subvol=nix" ];
+    # };
+    #
+    # fileSystems."/boot" = {
+    #     device = bootDisk;
+    #     fsType = "vfat";
+    #     options = [ "fmask=0022" "dmask=0022" "umask=0077" ];
+    # };
+    #
+    # swapDevices = [ {
+    #     device = "/.swapvol/swapfile";
+    # } ];
+
+    fileSystems."/persist".neededForBoot = true;
+    fileSystems."/nix".neededForBoot = true;
+}

hardware/mounts.nix

@@ -30,5 +30,18 @@
                 "noauto"
             ];
         };
+
+        "/home/chris/Games" = {
+            device = "/dev/disk/by-label/Games";
+            fsType = "ext4";
+            options = [ 
+                "defaults"
+                "x-systemd.mount-timeout=5"
+                "user"
+                "exec"
+                "x-systemd.automount"
+                "noauto"
+            ];
+        };
     };
 }

hardware/station-hardware-configuration.nix

@@ -0,0 +1,18 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports =
+    [ (modulesPath + "/installer/scan/not-detected.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "ahci" "usbhid" "usb_storage" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-amd" ];
+  boot.extraModulePackages = [ ];
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}

hardware/stationette-hardware-configuration.nix

@@ -0,0 +1,16 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+    imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
+
+    boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "usb_storage" "sd_mod" "sdhci_pci" ];
+    boot.initrd.kernelModules = [ ];
+    boot.kernelModules = [ "kvm-intel" ];
+    boot.extraModulePackages = [ ];
+
+    nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+    hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}

home/default.nix

@@ -0,0 +1,103 @@
+{ pkgs, lib, ... }:
+
+{
+    imports = [
+        ./packages.nix
+        ./programs.nix
+        ./hooks.nix
+        ./impermanence.nix
+        ./services.nix
+    ];
+    home = {
+        username = "chris";
+        homeDirectory = "/home/chris";
+        enableNixpkgsReleaseCheck = false;
+        stateVersion = "25.11";
+    };
+    xdg.mimeApps = {
+        enable = true;
+        defaultApplications = {
+            # Directories
+            "inode/directory" = [ "org.gnome.Nautilus.desktop" ];
+
+            # Images
+            "image/png" = [ "imv.desktop" ];
+            "image/jpeg" = [ "imv.desktop" ];
+            "image/gif" = [ "imv.desktop" ];
+            "image/webp" = [ "imv.desktop" ];
+            "image/bmp" = [ "imv.desktop" ];
+            "image/tiff" = [ "imv.desktop" ];
+
+            # Documents
+            "application/pdf" = [ "zathura.desktop" ];
+
+            # Web and Browser
+            "x-scheme-handler/http" = [ "firefox.desktop" ];
+            "x-scheme-handler/https" = [ "firefox.desktop" ];
+            "text/html" = [ "firefox.desktop" ];
+
+            # Video
+            "video/mp4" = [ "mpv.desktop" ];
+            "video/x-msvideo" = [ "mpv.desktop" ];
+            "video/x-matroska" = [ "mpv.desktop" ];
+            "video/x-flv" = [ "mpv.desktop" ];
+            "video/x-ms-wmv" = [ "mpv.desktop" ];
+            "video/mpeg" = [ "mpv.desktop" ];
+            "video/ogg" = [ "mpv.desktop" ];
+            "video/webm" = [ "mpv.desktop" ];
+            "video/quicktime" = [ "mpv.desktop" ];
+            "video/3gpp" = [ "mpv.desktop" ];
+            "video/3gpp2" = [ "mpv.desktop" ];
+            "video/x-ms-asf" = [ "mpv.desktop" ];
+            "video/x-ogm+ogg" = [ "mpv.desktop" ];
+            "video/x-theora+ogg" = [ "mpv.desktop" ];
+            "application/ogg" = [ "mpv.desktop" ];
+
+            # Mail
+            "x-scheme-handler/mailto" = [ "mailspring.desktop" ];
+
+            # Text and Code
+            "text/plain" = [ "nvim.desktop" ];
+            "text/english" = [ "nvim.desktop" ];
+            "text/x-makefile" = [ "nvim.desktop" ];
+            "text/x-c++hdr" = [ "nvim.desktop" ];
+            "text/x-c++src" = [ "nvim.desktop" ];
+            "text/x-chdr" = [ "nvim.desktop" ];
+            "text/x-csrc" = [ "nvim.desktop" ];
+            "text/x-java" = [ "nvim.desktop" ];
+            "text/x-moc" = [ "nvim.desktop" ];
+            "text/x-pascal" = [ "nvim.desktop" ];
+            "text/x-tcl" = [ "nvim.desktop" ];
+            "text/x-tex" = [ "nvim.desktop" ];
+            "application/x-shellscript" = [ "nvim.desktop" ];
+            "text/x-c" = [ "nvim.desktop" ];
+            "text/x-c++" = [ "nvim.desktop" ];
+            "application/xml" = [ "nvim.desktop" ];
+            "text/xml" = [ "nvim.desktop" ];
+        };
+    };
+    # systemd.user = {
+    #     enable = true;
+    #     timers = {
+    #         "station-battery-monitor" = {
+    #             wantedBy = [ "timers.target" ];
+    #             timerConfig = {
+    #                 OnBootSec = "1min";
+    #                 OnUnitActiveSec = "30sec";
+    #                 Unit = "station-battery-monitor.service";
+    #             };
+    #         };
+    #     };
+    #     services = {
+    #         "station-battery-monitor" = {
+    #             after = [ "graphical-session.target" ];
+    #             serviceConfig = {
+    #                 Type = "oneshot";
+    #                 ExecStart = "%h/.local/share/omarchy/bin/omarchy-battery-monitor";
+    #                 Environment = "DISPLAY=:0";
+    #                 LogLevelMax = "warning";
+    #             };
+    #         };
+    #     };
+    # };
+}

home/hooks.nix

@@ -0,0 +1,95 @@
+{ lib, pkgs, ... }:
+
+{
+    home.activation = {
+        setupDotfiles = lib.hm.dag.entryAfter ["writeBoundary"] ''
+            if [[ -v DRY_RUN ]]; then
+                echo "Dry run: Would bootstrap dotfiles from labs.scarif.space"
+                exit
+            fi
+
+            TEMP_DIR=$(mktemp -d)
+
+            DOTFILES_DIR="$HOME/.config/dotfiles"
+            DOTFILES_GIT_DIR="$DOTFILES_DIR/.git"
+
+            if [ ! -d "$DOTFILES_GIT_DIR" ]; then
+                echo "No local repository so cloning from remote"
+                SOURCE="https://labs.scarif.space/chris/dotfiles.git"
+                ${pkgs.git}/bin/git clone -b main "$SOURCE" "$TEMP_DIR"
+                mv "$TEMP_DIR/.git" "$DOTFILES_GIT_DIR"
+            else
+                echo "Local repository found so cloning from there"
+                ${pkgs.git}/bin/git clone -b main "$DOTFILES_GIT_DIR" "$TEMP_DIR"
+                ${pkgs.git}/bin/git --git-dir="$DOTFILES_GIT_DIR" --work-tree="$TEMP_DIR" pull --rebase || true
+            fi
+
+            echo "Copying dot files to home"
+            ${pkgs.coreutils}/bin/cp -rfT "$TEMP_DIR" "$HOME"
+
+            NVIM_DIR="$HOME/.config/nvim"
+            echo "Neovim config not initialised so initialising from remote"
+            ${pkgs.git}/bin/git --git-dir="$DOTFILES_GIT_DIR" --work-tree="$HOME" submodule set-url ".config/nvim" https://labs.scarif.space/chris/nvim.git
+            ${pkgs.git}/bin/git --git-dir="$DOTFILES_GIT_DIR" --work-tree="$HOME" submodule update --init || true
+            ${pkgs.git}/bin/git --git-dir="$DOTFILES_GIT_DIR" --work-tree="$HOME" submodule set-url ".config/nvim" git@labs.scarif.space:chris/nvim.git
+
+            cd "$HOME"
+
+            echo "Cleanup"
+            ${pkgs.coreutils}/bin/rm -rf "$TEMP_DIR"
+            ${pkgs.coreutils}/bin/rm -rf "$HOME/.git" || true
+
+            echo "Dotfiles bootstrapped successfully."
+        '';
+        setupDevDirectories = lib.hm.dag.entryAfter ["writeBoundary"] ''
+            if [[ -v DRY_RUN ]]; then
+                echo "Dry run: Would create dev directories"
+                exit
+            fi
+
+            echo "Creating development directories"
+
+            for dir in "DevOps" "FSharp" "JavaScript" "Scala" "Rust" "PHP" "Tutorials" "Sites" "MobileApps" "Tries"; do
+                if [ ! -d "$HOME/Code/$dir" ]; then
+                    mkdir -p "$HOME/Code/$dir"
+                fi
+            done
+        '';
+        setupInitialConfigs = lib.hm.dag.entryAfter ["writeBoundary"] ''
+            if [[ -v DRY_RUN ]]; then
+                echo "Dry run: Would copy initial config files"
+                exit
+            fi
+
+            DEST_FILE="$HOME/.config/sinew.in/Enpass.conf"
+
+            if [ ! -f "$DEST_FILE" ]; then
+                mkdir -p "$(dirname "$DEST_FILE")"
+                cp "${../initial-configs/Enpass.conf}" "$DEST_FILE"
+            fi
+
+            DEST_FILE="$HOME/.config/obsidian/obsidian.json"
+
+            if [ ! -f "$DEST_FILE" ]; then
+                mkdir -p "$(dirname "$DEST_FILE")"
+                cp "${../initial-configs/obsidian.json}" "$DEST_FILE"
+            fi
+        '';
+        setupDefaultWallpaper = lib.hm.dag.entryAfter ["writeBoundary"] ''
+            if [[ -v DRY_RUN ]]; then
+                echo "Dry run: Would copy wallpaper and initialise colour scheme if not set"
+                exit
+            fi
+
+            WALLPAPER_FILE="$HOME/.config/station/current/background"
+
+            if [ ! -f "$WALLPAPER_FILE" ]; then
+                mkdir -p "$(dirname "$WALLPAPER_FILE")"
+                ln -nsf ${../default_wallpaper.png} "$WALLPAPER_FILE"
+            fi
+            if [ ! -f "$HOME/.config/wal/colors" ]; then
+                ${pkgs.pywal16}/bin/wal -i "$WALLPAPER_FILE"
+            fi
+        '';
+    };
+}

home/impermanence.nix

@@ -0,0 +1,46 @@
+{ impermanence, ... }:
+
+{
+    #imports = [ impermanence.nixosModules.impermanence ];
+    home.persistence."/persist" = {
+        directories = [
+            ".cache/Nextcloud"
+            ".cache/wal"
+            ".cache/zsh"
+            ".config/.gemini"
+            ".config/Antigravity"
+            ".config/Nextcloud"
+            ".config/chromium"
+            ".config/dotfiles"
+            ".config/nixos"
+            ".config/Signal"
+            ".config/nvim"
+            ".config/obsidian"
+            ".config/sinew.in"
+            ".config/spotify"
+            ".config/superProductivity"
+            ".config/yazi/plugins"
+            ".local/share/android"
+            ".local/share/Enpass"
+            ".local/share/Steam"
+            ".local/share/direnv"
+            ".local/share/keyrings"
+            ".local/share/krita"
+            ".local/share/nvim"
+            ".local/share/station"
+            ".local/share/voxtype"
+            ".local/share/zoxide"
+            ".local/state/station"
+            ".local/state/wireplumber"
+            ".mozilla/firefox"
+            ".ssh"
+            ".steam"
+            "Code"
+            "Downloads"
+            "Tower"
+        ];
+        files = [
+            ".config/shell/.env"
+        ];
+    };
+}

home/packages.nix

@@ -0,0 +1,79 @@
+{ pkgs, pkgs-unstable, try-cli, nix-direnv, ... }:
+
+let
+krita-appimage = pkgs.callPackage ../packages/krita.nix { };
+enpass = pkgs.enpass.overrideAttrs (oldAttrs: rec {
+    version = "6.11.13.1957";
+    src = pkgs.fetchurl {
+        url = "https://apt.enpass.io/pool/main/e/enpass/enpass_${version}_amd64.deb";
+        sha256 = "2d8c90643851591aff41057b380a7e87bb839bf5c5aa0ca1456144e9996c902a";
+    };
+});
+in
+
+{
+    nixpkgs = {
+        config = {
+            allowUnfree = true;
+            allowUnfreePredicate = (_: true);
+
+            permittedInsecurePackages = [
+                "electron-25.9.0" # Obsidian
+                "beekeeper-studio-5.3.4"
+            ];
+        };
+    };
+    home.packages = with pkgs; [
+        pkgs-unstable.antigravity # Gemini AI coding assistant
+        bluetui # Bluetooth TUI
+        enpass # Password manager
+        enpass-cli # Enpass CLI tool
+        expressvpn # VPN
+        ffmpeg # Video tools
+        ffmpegthumbnailer # Video thumbnailer
+        pkgs-unstable.gemini-cli # Gemini AI CLI tool
+        ghostty # Terminal emulator
+        gimp # Image manipulation software
+        gpu-screen-recorder # GPU screen recorder for Linux
+        imv # Image viewer
+        inkscape # Vector graphics software
+        krita-appimage # Custom digital art software (from AppImage)
+        libreoffice-fresh # Office suite
+        lunar-client # Minecraft launcher
+        mpv # Video player
+        nautilus # Document viewer
+        nextcloud-client # Nextcloud sync client
+        obsidian # Notes software
+        signal-desktop # Messaging
+        spotify # Music
+        super-productivity # Task app
+        sxiv # Minimal image viewer
+        tenacity # Audio software
+        thunderbird # Mail client
+        try-cli.packages.${pkgs.system}.default # Try CLI tool
+        wally-cli # Keyboard flasher
+        wiremix # Audio mixer TUI
+        xournalpp # Handwriting note-taking software
+        yad # For creating dialogs during install script
+        zenity # For creating dialogs during install script
+        zathura # Minimal PDF viewer
+    ];
+    xdg.desktopEntries.enpass = {
+        type = "Application";
+        name = "Enpass";
+        genericName = "Enpass Password Manager";
+        icon = "enpass";
+        terminal = false;
+        exec = "env QT_SCREEN_SCALE_FACTORS=2 ${enpass}/bin/Enpass %U";
+        mimeType = [
+            "x-scheme-handler/enpassauth"
+            "x-scheme-handler/enpasscard"
+            "x-scheme-handler/enpassstart"
+            "x-scheme-handler/enpass"
+            "x-scheme-handler/cloudkit-7adb8cc64f.in.sinew.walletx"
+            "x-scheme-handler/enpassshare"
+            "application/enpasscard"
+        ];
+        categories = [ "Utility" ];
+    };
+}

home/programs.nix

@@ -0,0 +1,136 @@
+{ pkgs, lib, voxtype, walker, ... }:
+
+{
+    imports = [
+        walker.homeManagerModules.default
+        voxtype.homeManagerModules.default
+    ];
+    programs = let
+        lock-false = {
+            Value = false;
+            Status = "locked";
+        };
+        lock-true = {
+            Value = true;
+            Status = "locked";
+        };
+    in {
+        direnv = {
+            enable = true;
+            nix-direnv.enable = true;
+        };
+        walker = {
+            enable = true;
+            config = {};
+            runAsService = true;
+        };
+        elephant = {
+            enable = true;
+        };
+        waybar = {
+            enable = true;
+            systemd.enable = true;
+        };
+        voxtype = {
+            enable = true;
+            package = voxtype.packages.${pkgs.system}.vulkan;
+            service.enable = true;
+            settings = {};
+        };
+        chromium = {
+            enable = true;
+            extensions = [
+                "cjpalhdlnbpafiamejdnhcphjbkeiagm" # uBlock Origin
+                "kmcfomidfpdkfieipokbalgegidffkal" # Enpass
+            ];
+        };
+        firefox = {
+            enable = true;
+            package = pkgs.wrapFirefox pkgs.firefox-unwrapped {
+                extraPolicies = {
+                    DisableTelemetry = true;
+                    DisableFirefoxStudies = true;
+                    EnableTrackingProtection = {
+                        Value= true;
+                        Locked = true;
+                        Cryptomining = true;
+                        Fingerprinting = true;
+                    };
+                    DisablePocket = true;
+                    DisableFirefoxAccounts = false;
+                    DisableAccounts = false;
+                    DisableFirefoxScreenshots = true;
+                    OverrideFirstRunPage = "";
+                    OverridePostUpdatePage = "";
+                    DontCheckDefaultBrowser = true;
+                    DisplayBookmarksToolbar = "always"; # alternatives: "always" or "newtab"
+                        DisplayMenuBar = "default-off"; # alternatives: "always", "never" or "default-on"
+                        SearchBar = "unified"; # alternative: "separate"
+
+                        /* ---- EXTENSIONS ---- */
+                        ExtensionSettings = {
+                            "*".installation_mode = "allowed"; # blocks all addons except the ones specified below
+                                # Enpass
+                                "firefox-enpass@enpass.io" = {
+                                    install_url = "https://dl.enpass.io/stable/extensions/firefox/versions/v6.11.10.2/enpass_password_manager-6.11.10.2.xpi";
+                                    installation_mode = "force_installed";
+                                };
+                        };
+
+                    /* ---- PREFERENCES ---- */
+                    Preferences = { 
+                        "browser.contentblocking.category" = { Value = "strict"; Status = "locked"; };
+                        "extensions.pocket.enabled" = lock-false;
+                        "extensions.screenshots.disabled" = lock-true;
+                        "browser.topsites.contile.enabled" = lock-false;
+                        "browser.formfill.enable" = lock-false;
+                        "browser.search.suggest.enabled" = lock-false;
+                        "browser.search.suggest.enabled.private" = lock-false;
+                        "browser.urlbar.suggest.searches" = lock-false;
+                        "browser.urlbar.showSearchSuggestionsFirst" = lock-false;
+                        "browser.newtabpage.activity-stream.feeds.section.topstories" = lock-false;
+                        "browser.newtabpage.activity-stream.feeds.snippets" = lock-false;
+                        "browser.newtabpage.activity-stream.section.highlights.includePocket" = lock-false;
+                        "browser.newtabpage.activity-stream.section.highlights.includeBookmarks" = lock-false;
+                        "browser.newtabpage.activity-stream.section.highlights.includeDownloads" = lock-false;
+                        "browser.newtabpage.activity-stream.section.highlights.includeVisited" = lock-false;
+                        "browser.newtabpage.activity-stream.showSponsored" = lock-false;
+                        "browser.newtabpage.activity-stream.system.showSponsored" = lock-false;
+                        "browser.newtabpage.activity-stream.showSponsoredTopSites" = lock-false;
+                        "browser.newtabpage.activity-stream.feeds.section.highlights" = false;
+                    };
+                };
+            };
+            profiles = {
+                default = {
+                    id = 0;
+                    name = "default";
+                    isDefault = true;
+                    search = {
+                        default = "holocron";
+                        order = [ "holocron" "google" ];
+                        engines= {
+                            holocron = {
+                                name = "Holocron";
+                                urls = [{
+                                    template = "https://holocron.scarif.space/search";
+                                    params = [
+                                    { name = "q"; value = "{searchTerms}"; }
+                                    ];
+                                }];
+                                icon = "https://holocron.scarif.space/favicon.ico";
+                                definedAliases = [ "@h" ];
+                            };
+                            bing.metaData.hidden = true;
+                            ebay.metaData.hidden = true;
+                            perplexity.metaData.hidden = true;
+                        };
+                    };
+                };
+            };
+        };
+    };
+    xdg.configFile."voxtype/config.toml".enable = false;
+    home.file.".icons/default".source = "${pkgs.vimix-cursors}/share/icons/Vimix-white-cursors";
+    home.file.".mozilla/firefox/default/search.json.mozlz4".force = lib.mkForce true;
+}

home/services.nix

@@ -0,0 +1,7 @@
+{ ... }:
+
+{
+    services = {
+        swayosd.enable = true;
+    };
+}

initial-configs/Enpass.conf

@@ -0,0 +1,34 @@
+[General]
+ALWAYS_SAVE_TO_TEAM=local
+ALWAYS_SAVE_TO_VAULT=primary
+ChangedLocationPath=/home/chris/.local/share/Enpass/Enpass/
+DEVICE_UUID=e2b61cfc-4671-485c-a848-90df077d3a25
+LAST_SELECTED_LANGUAGE=default
+QUICKSETUP_SHOWN=true
+SELECTED_LANGUAGE=default
+assets_copied1=0
+detailPaneTabWidth=0
+masterPaneDesktopWidth=260
+masterPaneTabWidth=240
+sidePaneDesktopWidth=220
+
+[Backup]
+MajorCount=8
+MinorCount=0
+changedBackupPath=/home/chris/.local/share/Enpass/Backups/
+lastMajorCountTime=1772996878
+lastMinorCountTime=0
+
+[%General]
+autorunAtSystemStartup6=true
+avoidSubscriptionDialog=true
+hiddenCategories\size=0
+useDarkTheme=true
+
+[mainWindow]
+height=508
+screen=eDP-1
+visibility=2
+width=941
+x=967
+y=560

initial-configs/obsidian.json

@@ -0,0 +1,13 @@
+{
+  "vaults": {
+    "default": {
+      "path": "/home/chris/Tower/Documents/Notes",
+      "ts": 1773591361639,
+      "open": true
+    },
+    "rpg": {
+      "path": "/home/chris/Tower/Documents/Areas/RPG",
+      "ts": 1773591361639
+    }
+  }
+}

initial-configs/passwords/chris

@@ -0,0 +1 @@
+$6$MCVd.EUOYYB0A1eS$S1/gSfAq1c2dBCofvJp9RtW.o5mLi78h0Y39LABIeIauPRjlEny/1R5aXEA7uPrZ3TPxhnYOYxTdbCi0imFZp.

packages/krita.nix

@@ -0,0 +1,40 @@
+{
+    lib,
+    appimageTools,
+    fetchurl,
+    makeWrapper
+}:
+
+let
+    version = "6.0.1";
+    pname = "krita-appimage";
+
+    src = fetchurl {
+        url = "https://download.kde.org/stable/krita/${version}/krita-${version}-x86_64.AppImage";
+        hash = "sha256-lzIgaqZiTnUOW5FSRF+1ROpj3RASWC390aLVFSBBTQo=";
+    };
+
+    appimageContents = appimageTools.extract { inherit pname version src; };
+in
+appimageTools.wrapType2 {
+    inherit pname version src;
+
+    extraInstallCommands = ''
+        install -m 444 -D ${appimageContents}/org.kde.krita.desktop $out/share/applications/krita.desktop
+        install -m 444 -D ${appimageContents}/krita.png $out/share/icons/hicolor/256x256/apps/krita.png
+        substituteInPlace $out/share/applications/krita.desktop \
+            --replace-fail "Exec=krita" "Exec=krita-appimage"
+        
+        source ${makeWrapper}/nix-support/setup-hook
+        wrapProgram $out/bin/${pname} \
+            --set FONTCONFIG_FILE /etc/fonts/fonts.conf
+    '';
+ 
+    meta = {
+        description = "Digital painting and illustration application";
+        homepage = "https://krita.org";
+        license = lib.licenses.gpl3Only;
+        platforms = [ "x86_64-linux" ];
+        maintainers = with lib.maintainers; [ ];
+    };
+}

system/boot.nix

@@ -0,0 +1,74 @@
+{ pkgs, hostname, ... }:
+
+let
+# Found by running sudo btrfs inspect-internal map-swapfile -r /.swapvol/swapfile
+hibernateBootOffsets = {
+    stationette = "533760";
+    station = "533760";
+};
+
+resumeOffset = hibernateBootOffsets."${hostname}" or "0";
+in
+{
+    boot = {
+        loader = {
+            limine = {
+                enable = true;
+
+                extraConfig = ''
+                    timeout: 3
+                    default_entry: 2
+                    interface_branding: Station Bootloader
+                    interface_branding_color: 2
+                    hash_mismatch_panic: no
+
+                    term_background: 1a1b26
+                    backdrop: 1a1b26
+
+                    # Tokyo Night palette
+                    term_palette: 15161e;f7768e;9ece6a;e0af68;7aa2f7;bb9af7;7dcfff;a9b1d6
+                    term_palette_bright: 414868;f7768e;9ece6a;e0af68;7aa2f7;bb9af7;7dcfff;c0caf5
+
+                    term_foreground: c0caf5
+                    term_foreground_bright: c0caf5
+                    term_background_bright: 24283b
+                    '';
+            };
+            efi.canTouchEfiVariables = true;
+            # timeout = 0; # Skips the menu and uses default entry
+        };
+        # Creates a cool animation for booting
+        plymouth = {
+            enable = true;
+            theme = "black_hud";
+            themePackages = with pkgs; [
+                (adi1090x-plymouth-themes.override {
+                    selected_themes = [ "black_hud" ];
+                })
+            ];
+        };
+        initrd.verbose = false;
+
+        kernelParams = [
+            "resume_offset=${resumeOffset}"
+            "quiet"
+            "udev.log_level=3"
+            "systemd.show_status=auto"
+            "splash"
+        ];
+        bootspec.enable = true;
+        resumeDevice = "/dev/disk/by-partlabel/disk-${hostname}-root";
+        kernel.sysctl = {
+            "net.ipv4.ip_unprivileged_port_start" = 0;
+        };
+    };
+
+    systemd = {
+        settings = {
+            Manager = {
+                DefaultTimeoutStopSec = "5s";
+            };
+        };
+    };
+}
+

system/default.nix

@@ -0,0 +1,18 @@
+{ ... }:
+
+{
+    imports = [
+        ./boot.nix
+        ./impermanence.nix
+        ./networking.nix
+        ./packages.nix
+        ./services.nix
+        ./users.nix
+        ./programs.nix
+        ./fonts.nix
+        ./hardware.nix
+        ./sound.nix
+        ./virtualisation.nix
+        ./time.nix
+    ];
+}

system/fonts.nix

@@ -0,0 +1,23 @@
+{ pkgs, ... }:
+
+{
+    fonts = {
+        packages = with pkgs; [
+            nerd-fonts.jetbrains-mono
+            nerd-fonts.fira-code
+            noto-fonts
+            noto-fonts-cjk-sans
+            noto-fonts-color-emoji
+            liberation_ttf
+        ];
+
+        fontconfig = {
+            enable = true;
+            defaultFonts = {
+                monospace = [ "JetBrainsMono Nerd Font" ];
+                sansSerif = [ "Noto Sans" ];
+                serif = [ "Noto Serif" ];
+            };
+        };
+    };
+}

system/hardware.nix

@@ -0,0 +1,16 @@
+{ ... }:
+
+{
+    hardware = {
+        bluetooth.enable = true;
+
+        graphics = {
+            enable = true;
+            enable32Bit = true;
+        };
+
+        opentabletdriver.enable = true;
+        uinput.enable = true;
+    };
+    boot.kernelModules = [ "uinput" ];
+}

system/impermanence.nix

@@ -0,0 +1,24 @@
+{ impermanence, ... }:
+
+# Define which files and directories should persist between boots
+{
+    imports = [ impermanence.nixosModules.impermanence ];
+
+    environment.persistence."/persist" = {
+        hideMounts = true;
+        directories = [
+            "/var/log"
+            "/var/lib/bluetooth"
+            "/var/lib/networkmanager"
+            "/var/lib/docker"
+            "/var/lib/nixos"
+            "/var/lib/systemd/coredump"
+            "/etc/NetworkManager/system-connections"
+            "/etc/ssh"
+        ];
+        files = [
+            "/etc/machine-id"
+        ];
+    };
+}
+

system/networking.nix

@@ -0,0 +1,53 @@
+{ hostname, ... }:
+
+{
+    networking = {
+        hostName = hostname;
+        networkmanager.enable = true;
+        wireless = {
+            iwd.enable = true;
+            networks = {
+                ssid = "Outskirt Stable";
+                psk = "SidonPhlegm";
+            };
+        };
+        firewall = {
+            enable = true;
+            # Ports used by Local Send
+            allowedTCPPorts = [
+                53317
+                8001
+                8002
+                8003
+                8004
+            ];
+            allowedUDPPorts = [
+                53317
+                8001
+                8002
+                8003
+                8004
+            ];
+            extraCommands = "
+                iptables -I nixos-fw 1 -i br+ -j ACCEPT
+            ";
+            extraStopCommands = "
+                iptables -D nixos-fw -i br+ -j ACCEPT
+            ";
+        };
+        hosts = {
+            "127.0.0.1" = [
+                "localhost"
+                "host.docker.internal"
+                "runcats.test"
+                "dev.runcats.test"
+                "landing.runcats.test"
+                "api.runcats.test"
+                "mail.runcats.test"
+                "kibana.runcats.test"
+                "img.runcats.test"
+                "docs.runcats.test"
+            ];
+        };
+    };
+}

system/packages.nix

@@ -0,0 +1,87 @@
+{ pkgs, pkgs-unstable, nix-gaming, ... }:
+
+{
+    nixpkgs.config.allowUnfree = true;
+    environment.systemPackages = with pkgs; [
+        # hyprland-preview-share-picker.packages.${system}.default # Hyprland share picker TODO: Figure out and configure
+        bat # Better cat
+        brightnessctl # Backlight control
+        btop # Resource monitor
+        cargo # Rust build tool
+        clippy # Rust linter
+        eza # Better ls
+        fcitx5 # Input method framework TODO: Figure out and configure
+        fzf # Fuzzy file finder
+        gcc # C compiler
+        git # Git
+        gnome-calculator # Calculator TODO: Find a better TUI calculator
+        gnome-keyring
+        grim # Screenshot tool TODO: Figure out and configure
+        gum # Terminal UI tool
+        highlight # Syntax highlighting tool TODO: Hook up to ZSH
+        hyprcursor # Hyprland cursor theme support
+        hypridle # Idle daemon for Hyprland
+        hyprlock # Screen locker for Hyprland
+        hyprpaper # Wallpaper utility for Hyprland TODO: Check if necessary with swaybg
+        hyprpicker # Hyprland colour picker
+        imagemagick # Image manipulation tool
+        impala # Wifi TUI
+        jq # CLI JSON processor
+        lazygit # Git TUI
+        less # Pager
+        libnotify # Notification daemon
+        localsend # Local file sharing tool
+        makima # Key remapper for Linux TODO: Figure out and configure
+        mako # Notification daemon
+        pkgs-unstable.neovim # Editor
+        nix-gaming.mo2installer
+        nodePackages.pnpm # JavaScript package manager (used by Neovim plugins)
+        tree-sitter # Incremental parsing tool for editors
+        nodejs_24 # JavaScript runtime
+        openssl # SSL/TLS toolkit
+        p7zip # 7-Zip archiver
+        pipewire
+        pkgs-unstable.yazi # Terminal file manager
+        pywal16 # Image colorscheme generator
+        qt6.qtwayland # qtwayland support
+        ripgrep # Better grep
+        rsync # Remote file sync
+        rustc # Rust compiler
+        rustfmt # Rust formatter
+        satty # Screenshot editor TODO: Figure out and configure
+        seahorse # GNOME Keyring manager
+        sshpass # SSH with password in CLI, used by install scripts
+        swaybg # Wayland wallpaper utility
+        tldr # Simplified man pages
+        tmux # Terminal multiplexer
+        tmuxinator # Tmux configurator
+        tree # Tree structure viewing Tool
+        unzip # Compressing tool
+        uwsm # Universal Wayland Session Manager
+        v4l-utils # Video4Linux utilities TODO: Figure out why I need this
+        waybar # Status bar for Hyprland
+        wget # Download tool
+        pkgs-unstable.wineWow64Packages.stable # Wine packages for 64-bit and 32-bit support
+        pkgs-unstable.winetricks # Windows compatibility tool
+        wl-clipboard # Wayland clipboard manager
+        wlogout # Wayland logout menu
+        xdg-terminal-exec # XDG terminal execution utility
+        yarn # JavaScript package manager
+        zip # Archiver tool
+        zoxide # Better cd
+    ];
+
+    systemd = {
+        packages = with pkgs; [
+            uwsm
+        ];
+    };
+
+    system = {
+        autoUpgrade = {
+            enable = true;
+            allowReboot = false;
+            runGarbageCollection = true;
+        };
+    };
+}

system/programs.nix

@@ -0,0 +1,47 @@
+{ pkgs, pkgs-unstable, hostname, ... }:
+
+{
+    programs = {
+        # Easy file sharing on local network
+        localsend = {
+            enable = true;
+            openFirewall = true;
+        };
+        nix-ld.enable = true;
+        zsh = {
+            enable = true;
+        };
+        hyprland = {
+            enable = true;
+            package = pkgs-unstable.hyprland;
+            portalPackage = pkgs-unstable.xdg-desktop-portal-hyprland;
+            xwayland.enable = true;
+            withUWSM = true;
+        };
+        steam = {
+            enable = hostname == "station";
+            package = pkgs-unstable.steam;
+            remotePlay.openFirewall = true; # Open ports in the firewall for Steam Remote Play
+            dedicatedServer.openFirewall = true; # Open ports in the firewall for Source Dedicated Server
+            localNetworkGameTransfers.openFirewall = true; # Open ports in the firewall for Steam Local Network Game Transfers
+            protontricks.enable = true;
+        };
+        chromium = {
+            enable = true;
+            extraOpts = {
+                "BrowserSignin" = 0;
+                "SyncDisabled" = true;
+                "PasswordManagerEnabled" = false;
+                "SpellcheckEnabled" = true;
+                "SpellcheckLanguage" = [
+                    "en-GB"
+                ];
+            };
+        };
+    };
+    environment = {
+        pathsToLink = [
+            "/share/uwsm"
+        ];
+    };
+}

system/services.nix

@@ -0,0 +1,32 @@
+{ ... }:
+
+{
+    services = {
+        openssh.enable = true;
+        dbus.enable = true;
+        envfs.enable = true; # This ensures normal shebangs work (#!/bin/bash)
+        expressvpn.enable = true;
+        locate.enable = true;
+        fwupd.enable = true;
+        "power-profiles-daemon".enable = true;
+        upower = {
+            enable = true;
+            percentageLow = 20;
+            percentageCritical = 5;
+            percentageAction = 3;
+            criticalPowerAction = "Hibernate";
+        };
+        displayManager = {
+            sddm = {
+                enable = true;
+                wayland.enable = true;
+                theme = "maya";
+            };
+            autoLogin.enable = true;
+            autoLogin.user = "chris";
+            defaultSession = "hyprland-uwsm";
+        };
+        gnome.gnome-keyring.enable = true;
+    };
+    security.pam.services.sddm.enableGnomeKeyring = true;
+}

system/sound.nix

@@ -0,0 +1,11 @@
+{ ... }:
+
+{
+    services.pipewire = {
+        enable = true;
+        alsa.enable = true;
+        alsa.support32Bit = true;
+        pulse.enable = true;
+        jack.enable = true;
+    };
+}

system/time.nix

@@ -0,0 +1,5 @@
+{...}:
+
+{
+    time.timeZone = "Europe/London";
+}

system/users.nix

@@ -0,0 +1,31 @@
+{ pkgs, ... }:
+
+{
+    users.users.chris = {
+        uid = 1000;
+        isNormalUser = true;
+        hashedPasswordFile = "/persist/passwords/chris";
+        shell = pkgs.zsh;
+        extraGroups = [
+            "chris"
+            "wheel"
+            "networkmanager"
+            "docker"
+        ];
+    };
+    system.activationScripts = {
+        setupInitialPassword = {
+            text = ''
+                # Ensure the directory exists
+                mkdir -p /persist/passwords
+
+                # Copy the initial hash if the file is missing
+                if [ ! -f /persist/passwords/chris ]; then
+                    cp ${../initial-configs/passwords/chris} /persist/passwords/chris
+                    chmod 600 /persist/passwords/chris
+                    chown root:root /persist/passwords/chris
+                fi
+            '';
+        };
+    };
+}

system/virtualisation.nix

@@ -0,0 +1,10 @@
+{ ... }:
+
+{
+    virtualisation = {
+        docker = {
+            enable = true;
+            autoPrune.enable = true;
+        };
+    };
+}