-This file has 66261 words spanning 17435 lines and was last revised on 2025-06-11 02:13:52 +0200. +This file has 66145 words spanning 17412 lines and was last revised on 2025-06-11 02:27:48 +0200.
@@ -769,7 +769,7 @@ This section defines my Emacs configuration. For a while, I considered to use ry
-My emacs is built using the emacs-overlay nix flake, which builds a bleeding edge emacs on wayland (pgtk) with utilities like treesitter support. By executing the below source block, the current build setting can be updated at any time, and you can see my most up-to-date build options (last updated: 2025-06-11 02:13:52 +0200) +My emacs is built using the emacs-overlay nix flake, which builds a bleeding edge emacs on wayland (pgtk) with utilities like treesitter support. By executing the below source block, the current build setting can be updated at any time, and you can see my most up-to-date build options (last updated: 2025-06-11 02:27:48 +0200)
@@ -2906,8 +2906,8 @@ This is just a demo host. It applies all the configuration found in the common p I also set theWLR_RENDERER_ALLOW_SOFTWARE=1 to allow this configuration to run in a virtualized environment. I also enable qemuGuest for a smoother experience when testing on QEMU.
-{ self, inputs, config, pkgs, lib, primaryUser, ... }:
@@ -2986,8 +2986,8 @@ in
_: @@ -2997,8 +2997,8 @@ in
_:
@@ -4779,8 +4779,8 @@ appimageTools.wrapType2 {
# heavily inspired from https://github.com/oddlama/nix-config/blob/d42cbde676001a7ad8a3cace156e050933a4dcc3/pkgs/deploy.nix
@@ -4912,8 +4912,8 @@ writeShellApplication {
This programs simply runs ssh-keygen on the last host that I tried to ssh into. I need this frequently when working with cloud-init usually. @@ -5070,8 +5070,8 @@ in
{ lib, config, ... }:
@@ -5140,8 +5140,8 @@ in
{ lib, config, ... }:
@@ -5203,8 +5203,8 @@ in
{ lib, config, ... }:
@@ -5236,8 +5236,8 @@ in
{ lib, config, ... }:
@@ -5258,8 +5258,8 @@ in
{ lib, config, ... }:
@@ -5280,8 +5280,8 @@ in
{ lib, config, ... }:
@@ -5302,8 +5302,8 @@ in
{ lib, config, ... }:
@@ -5324,8 +5324,8 @@ in
{ lib, config, ... }:
@@ -5346,8 +5346,8 @@ in
{ lib, config, ... }:
@@ -5368,8 +5368,8 @@ in
{ lib, config, ... }:
@@ -5420,8 +5420,8 @@ in
{ lib, config, ... }:
@@ -5476,8 +5476,8 @@ in
{ lib, config, ... }:
@@ -5534,8 +5534,8 @@ in
{ lib, config, ... }:
@@ -5587,8 +5587,8 @@ in
{ lib, config, ... }:
@@ -5608,8 +5608,8 @@ in
{ lib, config, ... }:
@@ -5629,8 +5629,8 @@ in
{ lib, config, ... }:
@@ -5651,8 +5651,8 @@ in
{ lib, config, ... }:
@@ -5670,8 +5670,8 @@ in
{ lib, config, ... }:
@@ -5902,12 +5902,12 @@ in
@@ -5932,20 +5932,18 @@ in
"The file to decrypt must be given as a path to prevent impurity.";
assert assertMsg (hasSuffix ".nix.age" nixFile)
"The content of the decrypted file must be a nix expression and should therefore end in .nix.age";
- exec (
- [
+ exec [
./sops-decrypt-and-cache.sh
nixFile
- ]
- );
+ ];
}
#!/usr/bin/env bash
@@ -5953,9 +5951,9 @@ in
set -euo pipefail
print_out_path=false
-if [[ "$1" == "--print-out-path" ]]; then
- print_out_path=true
- shift
+if [[ $1 == "--print-out-path" ]]; then
+ print_out_path=true
+ shift
fi
file="$1"
@@ -5963,8 +5961,8 @@ shift
basename="$file"
# store path prefix or ./ if applicable
-[[ "$file" == "/nix/store/"* ]] && basename="${basename#*"-"}"
-[[ "$file" == "./"* ]] && basename="${basename#"./"}"
+[[ $file == "/nix/store/"* ]] && basename="${basename#*"-"}"
+[[ $file == "./"* ]] && basename="${basename#"./"}"
# Calculate a unique content-based identifier (relocations of
# the source file in the nix store should not affect caching)
@@ -5977,16 +5975,16 @@ umask 077
mkdir -p "$(dirname "$out")"
# Decrypt only if necessary
-if [[ ! -e "$out" ]]; then
- agekey=$(sudo ssh-to-age -private-key -i /etc/ssh/sops || sudo ssh-to-age -private-key -i /etc/ssh/ssh_host_ed25519_key)
- SOPS_AGE_KEY="$agekey" sops decrypt "${args[@]}" --output "$out" "$file"
+if [[ ! -e $out ]]; then
+ agekey=$(sudo ssh-to-age -private-key -i /etc/ssh/sops || sudo ssh-to-age -private-key -i /etc/ssh/ssh_host_ed25519_key)
+ SOPS_AGE_KEY="$agekey" sops decrypt --output "$out" "$file"
fi
# Print out path or decrypted content
-if [[ "$print_out_path" == true ]]; then
- echo "$out"
+if [[ $print_out_path == true ]]; then
+ echo "$out"
else
- cat "$out"
+ cat "$out"
fi
{ self, lib, config, pkgs, ... }:
-# let
- # Try to access the extra builtin we loaded via nix-plugins.
- # Throw an error if that doesn't exist.
- # sopsImportEncrypted =
- # assert lib.assertMsg (builtins ? extraBuiltins.sopsImportEncrypted)
- # "The extra builtin sopsImportEncrypted' is not available, so repo.secrets cannot be decrypted. Did you forget to add nix-plugins and point it to `./nix/extra-builtins.nix` ?";
- # builtins.extraBuiltins.sopsImportEncrypted;
- # secretFile = ../../../secrets/repo/packages.nix.age;
-# in
+{ lib, config, pkgs, ... }:
{
- # imports = [
- # (sopsImportEncrypted secretFile)
- # ];
-
options.swarselsystems.modules.packages = lib.mkEnableOption "install packages";
config = lib.mkIf config.swarselsystems.modules.packages {
environment.systemPackages = with pkgs; [
@@ -7324,8 +7301,8 @@ Most of the time I am using power-saver, however, it is good to be
{ lib, pkgs, config, ... }:
@@ -10170,8 +10147,8 @@ in
The forgejo configuration is a little broken and will show a 500 error when signing in through kanidm. However, when pressing back and refreshing the page, I am logged in. Currently I cannot be bothered to fix this. @@ -10732,8 +10709,8 @@ This smashes Atmosphere 1.3.2 on the switch, which is what I am currenty using.
This holds configuration that is specific to framework laptops. @@ -10771,8 +10748,8 @@ This holds configuration that is specific to framework laptops.
{ lib, config, ... }:
@@ -10788,8 +10765,8 @@ This holds configuration that is specific to framework laptops.
{ lib, config, ... }:
@@ -10811,8 +10788,8 @@ This holds configuration that is specific to framework laptops.
{ lib, config, ... }:
@@ -10843,8 +10820,8 @@ This holds configuration that is specific to framework laptops.
{ lib, config, ... }:
@@ -13796,8 +13773,8 @@ The `extraConfig` section here CANNOT be reindented. This has something to do wi
{ lib, config, ... }:
@@ -15046,8 +15023,8 @@ in
This holds configuration that is specific to framework laptops. @@ -18887,8 +18864,8 @@ autocmd DocStart vc-impimba-1.m.imp.ac.at/ui/webconsole mode ignore
@@ -19385,7 +19362,7 @@ sync USER HOST: