chore: enable quick tab-switch for firefox

profiles/common/home.nix

@@ -721,7 +721,7 @@ programs.zsh = {
     c="git --git-dir=$HOME/.dotfiles/.git --work-tree=$HOME/.dotfiles/";
     passpush = "cd ~/.local/share/password-store; git add .; git commit -m 'pass file changes'; git push; cd -;";
     passpull = "cd ~/.local/share/password-store; git pull; cd -;";
-    hotspot = "nmcli connection up local; nmcli device wifi hotspot password 12345678;";
+    hotspot = "nmcli connection up local; nmcli device wifi hotspot;";
     cd="z";
     cdr = "cd \"$( (find /home/swarsel/Documents/GitHub -maxdepth 1 && echo /home/swarsel/.dotfiles) | fzf )\"";
   };

profiles/common/nixos.nix

@@ -12,6 +12,8 @@ services.xserver = {
 
 nix.settings.experimental-features = ["nix-command" "flakes"];
 
+users.mutableUsers = false;
+
 # use ozone for wayland - chromium apps
   environment.sessionVariables.NIXOS_OZONE_WL = "1";
 
@@ -70,7 +72,210 @@ hardware.bluetooth.settings = {
   };
 };
 
-networking.networkmanager.enable = true;
+networking.networkmanager = {
+  enable = true;
+  ensureProfiles = {
+    environmentFiles = [
+      "${config.sops.templates."network-manager.env".path}"
+    ];
+    profiles = {
+      "Ernest Routerford" = {
+        connection = {
+          id = "Ernest Routerford";
+          permissions = "";
+          type = "wifi";
+        };
+        ipv4 = {
+          dns-search = "";
+          method = "auto";
+        };
+        ipv6 = {
+          addr-gen-mode = "stable-privacy";
+          dns-search = "";
+          method = "auto";
+        };
+        wifi = {
+          mac-address-blacklist = "";
+          mode = "infrastructure";
+          ssid = "Ernest Routerford";
+        };
+        wifi-security = {
+          auth-alg = "open";
+          key-mgmt = "wpa-psk";
+          psk = "$ERNEST";
+        };
+      };
+
+      LAN-Party = {
+        connection = {
+          autoconnect = "false";
+          id = "LAN-Party";
+          type = "ethernet";
+        };
+        ethernet = {
+          auto-negotiate = "true";
+          cloned-mac-address = "preserve";
+          mac-address = "90:2E:16:D0:A1:87";
+        };
+        ipv4 = { method = "shared"; };
+        ipv6 = {
+          addr-gen-mode = "stable-privacy";
+          method = "auto";
+        };
+        proxy = { };
+      };
+
+      eduroam = {
+        "802-1x" = {
+          eap = "ttls;";
+          identity = "$EDUID";
+          password = "$EDUPASS";
+          phase2-auth = "mschapv2";
+        };
+        connection = {
+          id = "eduroam";
+          type = "wifi";
+        };
+        ipv4 = { method = "auto"; };
+        ipv6 = {
+          addr-gen-mode = "default";
+          method = "auto";
+        };
+        proxy = { };
+        wifi = {
+          mode = "infrastructure";
+          ssid = "eduroam";
+        };
+        wifi-security = {
+          auth-alg = "open";
+          key-mgmt = "wpa-eap";
+        };
+      };
+
+      local = {
+        connection = {
+          autoconnect = "false";
+          id = "local";
+          type = "ethernet";
+        };
+        ethernet = { };
+        ipv4 = {
+          address1 = "10.42.1.1/24";
+          method = "shared";
+        };
+        ipv6 = {
+          addr-gen-mode = "stable-privacy";
+          method = "auto";
+        };
+        proxy = { };
+      };
+
+      HH40V_39F5 = {
+        connection = {
+          id = "HH40V_39F5";
+          type = "wifi";
+        };
+        ipv4 = { method = "auto"; };
+        ipv6 = {
+          addr-gen-mode = "stable-privacy";
+          method = "auto";
+        };
+        proxy = { };
+        wifi = {
+          band = "bg";
+          mode = "infrastructure";
+          ssid = "HH40V_39F5";
+        };
+        wifi-security = {
+          key-mgmt = "wpa-psk";
+          psk = "$FRAUNS";
+        };
+      };
+
+      magicant = {
+        connection = {
+          id = "magicant";
+          type = "wifi";
+        };
+        ipv4 = { method = "auto"; };
+        ipv6 = {
+          addr-gen-mode = "default";
+          method = "auto";
+        };
+        proxy = { };
+        wifi = {
+          mode = "infrastructure";
+          ssid = "magicant";
+        };
+        wifi-security = {
+          auth-alg = "open";
+          key-mgmt = "wpa-psk";
+          psk = "$HANDYHOTSPOT";
+        };
+      };
+
+      "sweden-aes-128-cbc-udp-dns" = {
+        connection = {
+          autoconnect = "false";
+          id = "PIA Sweden";
+          type = "vpn";
+        };
+        ipv4 = { method = "auto"; };
+        ipv6 = {
+          addr-gen-mode = "stable-privacy";
+          method = "auto";
+        };
+        proxy = { };
+        vpn = {
+          auth = "sha1";
+          ca =
+            "${config.users.users.swarsel.home}/.dotfiles/secrets/certs/sweden-aes-128-cbc-udp-dns-ca.pem";
+          challenge-response-flags = "2";
+          cipher = "aes-128-cbc";
+          compress = "yes";
+          connection-type = "password";
+          crl-verify-file = "${config.users.users.swarsel.home}/.dotfiles/secrets/certs/sweden-aes-128-cbc-udp-dns-crl-verify.pem";
+          dev = "tun";
+          password-flags = "0";
+          remote = "sweden.privacy.network:1198";
+          remote-cert-tls = "server";
+          reneg-seconds = "0";
+          service-type = "org.freedesktop.NetworkManager.openvpn";
+          username = "$VPNUSER";
+        };
+        vpn-secrets = { password = "$VPNPASS"; };
+      };
+
+      Hotspot = {
+        connection = {
+          autoconnect = "false";
+          id = "Hotspot";
+          type = "wifi";
+        };
+        ipv4 = { method = "shared"; };
+        ipv6 = {
+          addr-gen-mode = "default";
+          method = "ignore";
+        };
+        proxy = { };
+        wifi = {
+          mode = "ap";
+          ssid = "Hotspot-fourside";
+        };
+        wifi-security = {
+          group = "ccmp;";
+          key-mgmt = "wpa-psk";
+          pairwise = "ccmp;";
+          proto = "rsn;";
+          psk = "$HOTSPOT";
+        };
+      };
+
+    };
+  };
+};
+
+systemd.services.NetworkManager-ensure-profiles.after = [ "NetworkManager.service" ];
 
 time.timeZone = "Europe/Vienna";
 
@@ -87,6 +292,36 @@ i18n.extraLocaleSettings = {
   LC_TIME = "de_AT.UTF-8";
 };
 
+sops = {
+
+  defaultSopsFile = "${config.users.users.swarsel.home}/.dotfiles/secrets/general/secrets.yaml";
+  validateSopsFiles = false;
+
+  secrets = {
+    swarseluser = {neededForUsers = true;};
+    ernest = {};
+    frauns = {};
+    hotspot = {};
+    eduid = {};
+    edupass = {};
+    handyhotspot = {};
+    vpnuser = {};
+    vpnpass = {};
+  };
+  templates = {
+    "network-manager.env".content = ''
+  ERNEST=${config.sops.placeholder.ernest}
+  FRAUNS=${config.sops.placeholder.frauns}
+  HOTSPOT=${config.sops.placeholder.hotspot}
+  EDUID=${config.sops.placeholder.eduid}
+  EDUPASS=${config.sops.placeholder.edupass}
+  HANDYHOTSPOT=${config.sops.placeholder.handyhotspot}
+  VPNUSER=${config.sops.placeholder.vpnuser}
+  VPNPASS=${config.sops.placeholder.vpnpass}
+  '';
+  };
+};
+
 environment.systemPackages = with pkgs; [
   # yubikey packages
   gnupg
@@ -100,6 +335,10 @@ environment.systemPackages = with pkgs; [
   cfssl
   pcsctools
   pcscliteWithPolkit.out
+
+  # ledger packages
+  ledger-live-desktop
+
   # pinentry
 
   # theme related
@@ -233,12 +472,15 @@ programs.ssh.startAgent = false;
 
 services.pcscd.enable = true;
 
+hardware.ledger.enable = true;
+
 # environment.systemPackages = with pkgs; [
 # --- IN SYSTEM PACKAGES SECTION ---
 # ];
 
 services.udev.packages = with pkgs; [
   yubikey-personalization
+  ledger-udev-rules
 ];
 
 services.greetd = {

profiles/fourside/nixos.nix

@@ -24,6 +24,8 @@
     # kernelPackages = pkgs.linuxPackages_latest;
   };
 
+  sops.age.sshKeyPaths = [ "${config.users.users.swarsel.home}/.ssh/sops" ];
+
   networking = {
     hostName = "fourside"; # Define your hostname.
     nftables.enable = true;
@@ -136,10 +138,12 @@
     enable = false;
   };
   services.power-profiles-daemon.enable = true;
+  services.fprintd.enable = true;
 
   users.users.swarsel = {
     isNormalUser = true;
     description = "Leon S";
+    hashedPasswordFile = config.sops.secrets.swarseluser.path;
     extraGroups = [ "networkmanager" "wheel" "lp" "audio" "video" "vboxusers" "scanner" ];
     packages = with pkgs; [];
   };