init

2026-03-24 00:29:43 -04:00 · 2026-03-15 02:43:16 -04:00 · 2026-03-15 02:43:16 -04:00 · 259d9ed5a0
commit 259d9ed5a0
111 changed files with 7219 additions and 0 deletions
--- a/user/bookmarks/default.nix
+++ b/user/bookmarks/default.nix
@ -0,0 +1,323 @@
+[
+  {
+    name = "toolbar";
+    toolbar = true;
+    bookmarks = [
+      {
+        name = "ArchWiki";
+        url = "https://wiki.archlinux.org/";
+        tags = [ "dev" "linux" "docs" ];
+      }
+      {
+        name = "NixOS";
+        bookmarks = [
+          {
+            name = "Nixpkgs";
+            url = "https://search.nixos.org/packages";
+            tags = [ "nix" "dev" "linux" ];
+            keyword = "pkgs";
+          }
+          {
+            name = "Home Manager";
+            bookmarks = [
+              {
+                name = "Home Manager Option Docs";
+                url = "https://nix-community.github.io/home-manager/options.xhtml";
+                tags = [ "nix" "dev" "linux" ];
+                keyword = "hm";
+              }
+              {
+                name = "Home Manager Option Search";
+                url = "https://home-manager-options.extranix.com";
+                tags = [ "nix" "dev" "linux" ];
+                keyword = "hm";
+              }
+            ];
+          }
+          {
+            name = "Nix Docs";
+            bookmarks = [
+              {
+                name = "nix.dev";
+                url = "https://nix.dev";
+                tags = [ "nix" "dev" "docs" ];
+                keyword = "nix";
+              }
+            ];
+          }
+        ];
+      }
+      {
+        name = "Gentoo Wiki";
+        url = "https://wiki.gentoo.org";
+        tags = [ "dev" "linux" "docs" ];
+        keyword = "gentoo";
+      }
+      {
+        name = "Email";
+        bookmarks = [
+          {
+            name = "Gmail";
+            url = "https://gmail.com";
+            tags = [ "google" "email" ];
+            keyword = "gmail";
+          }
+          {
+            name = "ProtonMail";
+            url = "https://mail.protonmail.com";
+            tags = [ "email" "personal" "work" ];
+            keyword = "email";
+          }
+        ];
+      }
+      {
+        name = "Work";
+        bookmarks = [
+          {
+            name = "Outlook";
+            url = "https://outlook.office365.com";
+            tags = [ "work" "email" "microsoft" ];
+            keyword = "work";
+          }
+          {
+            name = "Teams";
+            url = "https://teams.microsoft.com";
+            tags = [ "work" "microsoft" ];
+            keyword = "teams";
+          }
+        ];
+      }
+      {
+        name = "Youtube";
+        url = "https://youtube.com";
+        tags = [ "social" "entertainment" "google" ];
+        keyword = "youtube";
+      }
+      {
+        name = "Substack";
+        url = "https://substack.com";
+        tags = [ "social" "blogging" "personal" ];
+        keyword = "blog";
+      }
+      {
+        name = "Amazon";
+        url = "https://amazon.com";
+        tags = [ "shopping" "amazon" ];
+        keyword = "amazon";
+      }
+      {
+        name = "Social";
+        bookmarks = [
+          {
+            name = "Twitter";
+            url = "https://x.com";
+            tags = [ "social" "forum" ];
+            keyword = "x";
+          }
+          {
+            name = "Reddit";
+            url = "https://reddit.com";
+            tags = [ "social" "forum" ];
+            keyword = "reddit";
+          }
+          {
+            name = "Twitch";
+            url = "https://twitch.com";
+            tags = [ "social" "entertainment" "amazon" ];
+            keyword = "twitch";
+          }
+          {
+            name = "Nostr";
+            url = "https://primal.net";
+            tags = [ "social" "nostr" "bitcoin" ];
+            keyword = "nostr";
+          }
+        ];
+      }
+      {
+        name = "ChatGPT";
+        url = "https://chat.openai.com";
+        tags = [ "dev" "ai" "microsoft" ];
+        keyword = "ai";
+      }
+      {
+        name = "Dev";
+        bookmarks = [
+          {
+            name = "Github";
+            url = "https://github.com";
+            tags = [ "dev" "work" "personal" "microsoft" ];
+            keyword = "git";
+          }
+          {
+            name = "Gist";
+            url = "https://gist.github.com";
+            tags = [ "dev" "work" "personal" "microsoft" "blogging" ];
+            keyword = "gist";
+          }
+          {
+            name = "Stack Overflow";
+            url = "https://stackoverflow.com";
+            tags = [ "dev" "work" "forum" ];
+          }
+          {
+            name = "Learning";
+            bookmarks = [
+              {
+                name = "Coding";
+                bookmarks = [
+                  {
+                    name = "Leetcode";
+                    url = "https://leetcode.com";
+                  }
+                  {
+                    name = "CodeWars";
+                    url = "https://codewars.com";
+                  }
+                ];
+              }
+              {
+                name = "Projects";
+                bookmarks = [
+                  {
+                    name = "Linux From Scratch";
+                    url = "https://linuxfromscratch.org/lfs/view/stable/index.html";
+                  }
+                ];
+              }
+            ];
+          }
+          {
+            name = "Documentation";
+            bookmarks = [
+              {
+                name = "MDN";
+                url = "https://developer.mozilla.org";
+                tags = [ "dev" "docs" ];
+                keyword = "mdn";
+              }
+              {
+                name = "DevDocs";
+                url = "https://devdocs.io";
+                tags = [ "dev" "docs" ];
+                keyword = "docs";
+              }
+              {
+                name = "Linux Kernel";
+                url = "https://docs.kernel.org";
+              }
+              {
+                name = "References";
+                bookmarks = [
+                  {
+                    name = "ASCII Table";
+                    url = "https://asciitable.com";
+                    tags = [ "dev" ];
+                    keyword = "ascii";
+                  }
+                  {
+                    name = "Regex Cheat Sheet";
+                    url = "https://rexegg.com/regex-quickstart.php";
+                    tags = [ "dev" ];
+                    keyword = "regex";
+                  }
+                ];
+              }
+            ];
+          }
+          {
+            name = "Tools";
+            bookmarks = [
+              {
+                name = "GitBook";
+                url = "https://gitbook.com";
+                tags = [ "dev" "docs" ];
+              }
+              {
+                name = "Namecheap";
+                url = "https://namecheap.com";
+                tags = [ "dev" "shopping" "hosting" ];
+              }
+              {
+                name = "LetsEncrypt";
+                url = "https://letsencrypt.com";
+                tags = [ "dev" "hosting" ];
+              }
+              {
+                name = "Gitea";
+                url = "https://gitea.com";
+                tags = [ "dev" "hosting" ];
+              }
+              {
+                name = "Hosting";
+                bookmarks = [
+                  {
+                    name = "DigitalOcean";
+                    url = "https://digitalocean.com";
+                    tags = [ "dev" "hosting" ];
+                  }
+                  {
+                    name = "Supabase";
+                    url = "https://supabase.com";
+                    tags = [ "dev" "hosting" ];
+                  }
+                  {
+                    name = "Vercel";
+                    url = "https://vercel.com";
+                    tags = [ "dev" "hosting" ];
+                  }
+                  {
+                    name = "AWS";
+                    url = "https://aws.amazon.com";
+                    tags = [ "dev" "hosting" ];
+                  }
+                  {
+                    name = "Azure";
+                    url = "https://azure.microsoft.com";
+                    tags = [ "dev" "hosting" ];
+                  }
+                  {
+                    name = "Firebase";
+                    url = "https://firebase.google.com";
+                    tags = [ "dev" "hosting" ];
+                  }
+                ];
+              }
+            ];
+          }
+        ];
+      }
+      {
+        name = "Financials";
+        bookmarks = [
+          {
+            name = "Fidelity";
+            url = "https://fidelity.com";
+            tags = [ "banking" ];
+            keyword = "bank";
+          }
+          {
+            name = "Chase";
+            url = "https://chase.com";
+            tags = [ "banking" ];
+          }
+          {
+            name = "Wells Fargo";
+            url = "https://wellsfargo.com";
+            tags = [ "banking" ];
+          }
+          {
+            name = "Crapto";
+            bookmarks = [
+              {
+                name = "Coinbase";
+                url = "https://coinbase.com";
+                tags = [ "banking" ];
+              }
+            ];
+          }
+        ];
+      }
+    ];
+  }
+]
--- a/user/config/keys/age/yubikey
+++ b/user/config/keys/age/yubikey
@ -0,0 +1 @@
+AGE-PLUGIN-YUBIKEY-1C8CXVQVZUK7AV2CFWEKFP
--- a/user/default.nix
+++ b/user/default.nix
@ -0,0 +1,20 @@
+{ lib, pkgs, ... }:
+
+with lib;
+{
+  options = {
+    user = mkOption {
+      description = "User Configurations";
+      type = types.attrs;
+      default = with pkgs; rec {
+        name = "bryan";
+        email = "bryan@ramos.codes";
+        shell = bash;
+        keys = import ./keys { inherit lib; };
+
+        groups = [ "wheel" "networkmanager" "home-manager" "input" ];
+        bookmarks = import ./bookmarks;
+      };
+    };
+  };
+}
--- a/user/home.nix
+++ b/user/home.nix
@ -0,0 +1,40 @@
+{ lib, pkgs, config, ... }:
+
+let
+  pass = pkgs.pass.withExtensions (exts: with exts; [
+    pass-audit
+    pass-otp
+    pass-update
+    pass-tomb
+  ]);
+
+in
+{
+  programs.home-manager.enable = true;
+
+  home.username = config.user.name;
+  home.homeDirectory = "/home/${config.user.name}";
+
+  # Essential packages for all users
+  home.packages = with pkgs; [
+    pass
+    wget curl fastfetch fd
+    unzip zip rsync
+    calc calcurse
+    age
+    sops
+  ];
+
+  programs.bash.shellAliases = {
+    cal = "${pkgs.calcurse}/bin/calcurse";
+    calendar = "${pkgs.calcurse}/bin/calcurse";
+  };
+
+  # Default modules for all users (machines can override with mkForce false)
+  modules.user = {
+    bash.enable = lib.mkDefault true;
+    git.enable = lib.mkDefault true;
+    neovim.enable = lib.mkDefault true;
+    security.gpg.enable = lib.mkDefault true;
+  };
+}
--- a/user/keys/age/README.md
+++ b/user/keys/age/README.md
@ -0,0 +1,3 @@
+# Age Keys
+
+yubikey.pub.key - Cold storage backup for age encryption
--- a/user/keys/age/yubikey.pub.key
+++ b/user/keys/age/yubikey.pub.key
@ -0,0 +1 @@
+age1yubikey1qfapxqnnkh92zkgayzzm9n0gtpkwaqcvrzy4d4xa4rxnjua8vjhy72hh9r9
--- a/user/keys/default.nix
+++ b/user/keys/default.nix
@ -0,0 +1,33 @@
+{ lib }:
+
+with builtins;
+let
+  extractName = filename:
+    let
+      # Remove .key extension
+      noKey = lib.removeSuffix ".key" filename;
+      # Remove .pub/.priv/.public/.private markers
+      noMarkers = replaceStrings
+        [ ".pub" ".priv" ".public" ".private" ]
+        [ "" "" "" "" ]
+        noKey;
+    in noMarkers;
+
+  constructKeys = dir: (
+    listToAttrs (
+      map (subdir: {
+        name = subdir;
+        value = listToAttrs (
+          map (file: {
+            name = extractName file;
+            value = readFile "${dir}/${subdir}/${file}";
+          }) (filter (file:
+            (readDir "${dir}/${subdir}").${file} == "regular" &&
+            lib.hasSuffix ".key" file
+          ) (attrNames (readDir "${dir}/${subdir}")))
+        );
+      }) (filter (node: (readDir dir).${node} == "directory") (attrNames (readDir dir)))
+    )
+  );
+in
+  constructKeys ./.
--- a/user/keys/pgp/README.md
+++ b/user/keys/pgp/README.md
@ -0,0 +1,5 @@
+# PGP Keys
+
+yubikey.pub.key -
+work.pub.key -> bryan.ramos@concurrent-rt.com
+ccur.pub.key -> ?
--- a/user/keys/pgp/ccur.pub.key
+++ b/user/keys/pgp/ccur.pub.key
@ -0,0 +1,53 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v1
+
+mQINBGM8ZXIBEADD3ZTfTFYRtkgH4Mtjy5sxe3Z+3xqxtZFQUg1dFuvPHdQFrNCB
+hbmEnMeyDC2FK92OLnYdnfO+evRg4V3AJSl0dyBM1m9bgSuuIw7b9ni3yYVbh4zg
+BK0Dcj6E+zGrGMsPje08O+NdOh5pJLfY2Xra9LBGteN7Ck+NnDAwBhE4/0tdm5Y3
+bjvKyq3HelpTYLQFiwi2lFCXMEEUeGM3bAUWUEXZn5g8FbFm9Y9KMKivHsNvSFnd
+7U3WZg9K1uDMV8+xA/+nxd7CqI03oafxEUlW48a0Z1nowzEbG22OOw0I78FtrqTj
+PSKBlIJHYBEF/x0UMfeJnbnR89jJZihPzLRCpSzuMiX4NF39S1nnmpjcn+vwgngE
+NIxPBXh4fOdBzvplgS/iaS/wxkoMcXgRe4qMVp/jQzE19XzxUkHcWFxUeG4L0gDJ
+77STrDDpIBExkd2EAz1AtxRfuW1PD94uHex3ar41GfU088sYO1pmzwEl5h9ep/Zr
+oHLfwb61h85V4+5tw+cFzOa1iA/Rgh/qOCVKrU/A9aibxDh1/x54wo7nwkCuIbjA
+W/3wiNiQn9a/GRBoIoSwdpdd90RAxINhXiVqhzkCtQskeCrOiWyZRdHTOQnV6GDH
+/s5EaPj4o4v1NpbBh+y4QMtJXk+rpV3ncyBJpBIWwswCXZhVqB6FFRy7uwARAQAB
+tExDb25jdXJyZW50IFJlYWwtVGltZSBTb2Z0d2FyZSBTdXBwb3J0IChSVzlSS1lH
+QSkgPHN1cHBvcnRAY29uY3VycmVudC1ydC5jb20+iQI+BBMBCAAoBQJjPGVyAhsD
+BQkJZgGABgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAKCRDcXtpJfTtL0m3hEACZ
+P9QRj4I9puaXweAiaq1WHDztTBO0Xoi7D+7NlfQiZQ1bONdRN5tYQTCZighcXelQ
+Zsjtz/rDrVykBC2r3dG5X81gDTZx9WwGhFu/MuaUnU1Df9LUIAi5FliypqRV/NtH
+MyeaOATlpgEBkVBe2fcoCSIqrUJXdW2Cu38w+AJce4IuaUSJeWDiumcW5SvwpdiT
+2qsKhbdyjdb2ayRipimEWsaNUDkxz3e6kvz1npgyk5CaLo82yzVMBGxAGfWrJqYr
+TZOFm4UG1ObZCP8gq33LKOzB45UZP5lNE+5Cr68MC6tUF5s/Cai8BiskP+gWiDJQ
+LPenKDjaf4H11s98/Dfw86DwKY2zfDXTkJ6nQXjqvnZYsovjeFJVXx9jjBh3i98W
+5/VwogbWfwpbnRt/rtDq1MglqvHsL9QjA9CSaHRdy0hy2JmZ9S2msFrMR/DrKfcO
+kCr8ciLilxvyCpaYUjRmH38w29YUW6JIImPtBlt4QpYiw9cLsU9RGLZ+nu40AFiC
+rzo8xiYO6kXEk5znFRy5JzmiFu5QouhMpeVXXEnBZCt5j+A9DkzwlNShHl3UgWfg
+xatllI0FUJsJpIKqQq1jkPdC+fZliN2dDKiVgTmz0VvFwZRCxMz30yhsX1ZhtPGx
+U2Z/3xIyOE+OEp2iPnCD4fhBnOc6t39rOX7jhSqim7kCDQRjPGVyARAA2zN8zwUa
+i8dkeUYxQDjQxhSZsTsE7VGvL5gGRZhJ8whFNxCcjya9xPbGNnsXh8Zp9MM6Ji7a
+1OZt9qzOH3Corgp2KA2ascLLpby5OAnIR5fULfqh5XR6byH/X59myrV88mifGCmM
+anEjK+Tw5KybaBEHkNE2G2aUzjrYAMsfQnnHgYT8jUN1LkXqHVftX/0dwrhOcCqJ
+YjLP9Vp4gZEz/Y5PQEjaEG3U0YCtaBBmnekBZ8bozO0og5/zbnX+IsY1F0QBsCmZ
+cVSuheWhFIJTBK2jyF8mHzAauOtYHHJQYyRsXNuxt5uqYj1it2Hag2jw7+q+ZDx
+7FzqcKyxvT+usczHH5QhtzZpWrgZE+Po/2gmEg7Qz/c1I4Hy7DtOVv7ql8kluGpM
+NM3cQYivZ4LD7Qsbnfj72muCD5W+T2c044y8WGE0U7GVTQw2ej6eLXutizlzNTmu
+eW1r1OvcLXQUH5Ck2DC8HOauoCRPpRZeP+OQuiJax0VFqGdC1s99TCYow15OKWeE
+HYCLIhAqz1oKq/4p92HPEV33kx7cGVPBXagw/KZKFlKTVbhHZxWQQDYkTrh/Fx5p
+197U4XUG5qxTmMo03uJeppAyufmfpuHX7JVkHfZfXx1ZJdsXKlMahT3z7GhkJgjm
+mPaoUroDS0Ddvs7qzYMprPJpiI3V78Q5lakAEQEAAYkCJQQYAQgADwUCYzxlcgIb
+DAUJCWYBgAAKCRDcXtpJfTtL0g5SD/9A8fGzmOpnO7u3zKsER5GPxHVuwc4NRDVa
+UIEvTrmfR1DSgrIJR4jQ1I4rGeoZ/7kUaYd6l1b5Apj8zp+Z04l0+nlIKvdd97Mg
+Sb4kVuyyeUQN2d83ETBcZQC31061bnjH/W3+j5ojDqvjxPFJ7bz/AmVbi0s9MElc
+c9h+jJ8LtK24yNQ6ribq+7X4YY7G87eeCkXY+Rdv96V1aaNNortZHQPNAMQRDrK8
+sH2nsyfEifyyf3RGmnhrfvVkpPZvBrtoSZStdHqpbD8NRuZgmHFN2EUE210SgSU0
+/W2eGDb/VGgAd7Cfh/qncYZWPxRwcnmkAu+bbdeFiyVoCSMzNKY0+6Ub0B7xmCsH
+V144cNW01HAOkv/RtFyUIzpY0RhV1SaJ5XqFFNnWpcYjYR5l2YJACvS39nD1Yd+S
+vCDTddpK1okCfk1oXRN7vUYPBjF7Suu+/Kets9FBGoypK+4L2WlC36XYIpBXohB
+r/tMoQhcoq73sp04IG3k1+Am5yiCbDMU3+1UhT/m5tL3o02by0c60RMHU/T6vfE8
+qj3FjF7Qy37xoWmPCrWkpwPscG+WDogupBc3RpxGP9ET8Th+HJM0IpQLoKeDYl5I
+9z/kRFbY243tkJ1r65TMfa5My9J9ZdP22ZcOR2ql5z2IT7dvuteupaD82ojSXPzJ
+uWsnbjV0Rg==
+=56r2
+-----END PGP PUBLIC KEY BLOCK-----
--- a/user/keys/pgp/work.pub.key
+++ b/user/keys/pgp/work.pub.key
@ -0,0 +1,121 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=my/o
+-----END PGP PUBLIC KEY BLOCK-----
--- a/user/keys/pgp/yubikey.pub.key
+++ b/user/keys/pgp/yubikey.pub.key
@ -0,0 +1,109 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=5uun
+-----END PGP PUBLIC KEY BLOCK-----
--- a/user/keys/ssh/README.md
+++ b/user/keys/ssh/README.md
@ -0,0 +1,5 @@
+# SSH Keys
+
+yubikey.pub.key -> PGP derived from `pgp.yubikey.pub.key`
+work.pub.key - ?
+graphone.pub.key -> For Android `pass`
--- a/user/keys/ssh/graphone.pub.key
+++ b/user/keys/ssh/graphone.pub.key
@ -0,0 +1 @@
+ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBJM1HutPcWXdeTaAXY7ha8SlgeZFtLJGwNa3Kd/DL/R38fq5+fkh3iCoHgv+iiKcordtVTMhbOsHhz3H+Jm274c=
--- a/user/keys/ssh/work.pub.key
+++ b/user/keys/ssh/work.pub.key
@ -0,0 +1 @@
+ssh-rsa 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
--- a/user/keys/ssh/yubikey.pub.key
+++ b/user/keys/ssh/yubikey.pub.key
@ -0,0 +1 @@
+ssh-rsa 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
--- a/user/modules/bash/bash
+++ b/user/modules/bash/bash
@ -0,0 +1 @@
+Subproject commit a90d89277c4bbd363d6929f434eef633bea439f5
--- a/user/modules/bash/default.nix
+++ b/user/modules/bash/default.nix
@ -0,0 +1,32 @@
+{ lib, config, ... }:
+
+with lib;
+let
+  cfg = config.modules.user.bash;
+
+in
+{ options.modules.user.bash = { enable = mkEnableOption "user.bash"; };
+  config = mkIf cfg.enable {
+    programs.bash = {
+      enable = true;
+      initExtra = "source ~/.config/bash/bashrc";
+    };
+
+    home.file.".config/bash" = {
+      source = ./bash;
+      recursive = true;
+    };
+
+    programs = {
+      ripgrep.enable = true;
+      eza = {
+        enable = true;
+        enableBashIntegration = true;
+        enableFishIntegration = false;
+        enableZshIntegration = false;
+        enableNushellIntegration = false;
+        enableIonIntegration = false;
+      };
+    };
+  };
+}
--- a/user/modules/default.nix
+++ b/user/modules/default.nix
@ -0,0 +1,34 @@
+let
+  mkModules = dir: isRoot:
+    let
+      entries = builtins.readDir dir;
+      names = builtins.attrNames entries;
+
+      excludedDirs = [ "config" "scripts" ];
+      isSubmodule = path:
+        builtins.pathExists "${path}/.git" &&
+        builtins.readFileType "${path}/.git" == "regular";
+      isModuleDir = path:
+        builtins.pathExists path &&
+        builtins.readFileType path == "directory" &&
+        !(builtins.elem (builtins.baseNameOf path) excludedDirs) &&
+        !(isSubmodule path);
+      isModule = file: file == "default.nix";
+
+    in
+      builtins.concatMap (name:
+        let
+          path = "${dir}/${name}";
+        in
+          if isModuleDir path then
+            mkModules path false
+          else if isModule name && !isRoot then
+            [ dir ]
+          else
+            []
+      ) names;
+
+in
+{
+  imports = mkModules ./. true;
+}
--- a/user/modules/git/default.nix
+++ b/user/modules/git/default.nix
@ -0,0 +1,32 @@
+{ lib, pkgs, config, ... }:
+
+with lib;
+let
+  cfg = config.modules.user.git;
+
+in
+{ options.modules.user.git = { enable = mkEnableOption "user.git"; };
+  config = mkIf cfg.enable {
+    programs = {
+      git = {
+        enable = true;
+      };
+      gh = {
+        enable = true;
+        settings.git_protocol = "ssh";
+      };
+    };
+
+    home = {
+      packages = with pkgs; [
+        git-crypt
+      ];
+      file.".config/git" = {
+        source = ./git;
+        recursive = true;
+      };
+    };
+
+    programs.bash.initExtra = import ./scripts/cdg.nix;
+  };
+}
--- a/user/modules/git/git
+++ b/user/modules/git/git
@ -0,0 +1 @@
+Subproject commit d394ee0594e8b1162f05547c3f7da817b6fcb62a
--- a/user/modules/git/scripts/cdg.nix
+++ b/user/modules/git/scripts/cdg.nix
@ -0,0 +1,24 @@
+''
+function cdg() {
+  if [[ $1 == "--help" ]]; then
+    echo "A simple utility for navigating to the root of a git repo"
+    return 0
+  fi
+
+  if [[ -n "$1" ]]; then
+    echo "Invalid command: $1. Try 'cdg --help'."
+    return 1
+  fi
+
+  local root_dir
+  root_dir=$(git rev-parse --show-toplevel 2>/dev/null)
+  local git_status=$?
+
+  if [ $git_status -ne 0 ]; then
+    echo "Error: Not a git repo."
+    return 1
+  fi
+
+  cd "$root_dir"
+}
+''
--- a/user/modules/gui/alacritty/config/alacritty.nix
+++ b/user/modules/gui/alacritty/config/alacritty.nix
@ -0,0 +1,83 @@
+{ config, ... }:
+
+let
+hyprland = config.modules.user.gui.wm.hyprland;
+
+in
+{
+  scrolling = {
+    history = 10000;
+    multiplier = 3;
+  };
+
+  window = {
+    opacity = if hyprland.enable then 0.9 else 1;
+  };
+
+  keyboard.bindings = [
+    {
+      key = "Enter";
+      mods = "Alt | Shift";
+      action = "SpawnNewInstance";
+    }
+  ];
+
+  colors = {
+    primary = {
+      background = "#000000";
+      foreground = "#cdd6f4";
+    };
+
+    normal = {
+      black   = "#1e2127";
+      red     = "#e06c75";
+      green   = "#98c379";
+      yellow  = "#d19a66";
+      blue    = "#61afef";
+      magenta = "#c678dd";
+      cyan    = "#56b6c2";
+      white   = "#abb2bf";
+    };
+
+    bright = {
+      black   =  "#5c6370";
+      red     =  "#e06c75";
+      green   =  "#98c379";
+      yellow  =  "#d19a66";
+      blue    =  "#61afef";
+      magenta =  "#c678dd";
+      cyan    =  "#56b6c2";
+      white   =  "#ffffff";
+    };
+  };
+
+  font = {
+    size = 12;
+    normal = {
+      family = "Terminess Nerd Font Propo";
+      style = "Regular";
+    };
+
+    bold = {
+      family = "Terminess Nerd Font Propo";
+      style = "Bold";
+    };
+
+    italic = {
+      family = "Terminess Nerd Font Propo";
+      style = "Italic";
+    };
+
+    bold_italic = {
+      family = "Terminess Nerd Font Propo";
+      style = "Bold Italic";
+    };
+  };
+
+
+  #cursor = {
+  #  shape = "Block";
+  #  blinking = "Always";
+  #  blink_interval = 750;
+  #};
+}
--- a/user/modules/gui/alacritty/default.nix
+++ b/user/modules/gui/alacritty/default.nix
@ -0,0 +1,15 @@
+{ lib, config, ... }:
+
+with lib;
+let
+  cfg = config.modules.user.gui.alacritty;
+
+in
+{ options.modules.user.gui.alacritty = { enable = mkEnableOption "Enable Alacritty terminal"; };
+  config = mkIf cfg.enable {
+    programs.alacritty = {
+      enable = true;
+      settings = import ./config/alacritty.nix { inherit config; };
+    };
+  };
+}
--- a/user/modules/gui/browsers/chromium/default.nix
+++ b/user/modules/gui/browsers/chromium/default.nix
@ -0,0 +1,53 @@
+{ pkgs, lib, config, ... }:
+
+with lib;
+let
+  cfg = config.modules.user.gui.browser.chromium;
+
+in
+{ options.modules.user.gui.browser.chromium = { enable = mkEnableOption "Enable Chromium browser"; };
+  config = mkIf cfg.enable {
+    programs = {
+      chromium = rec {
+        enable = true;
+        package = pkgs.ungoogled-chromium;
+        extensions =
+        let
+          vrs = package.version;
+        in
+        [
+          rec {
+            id = "cjpalhdlnbpafiamejdnhcphjbkeiagm";
+            crxPath = builtins.fetchurl {
+              url = "https://clients2.google.com/service/update2/crx?response=redirect&prodversion=${vrs}&acceptformat=crx2,crx3&x=id%3D${id}%26uc";
+              name = "ublock_${version}.crx";
+              sha256 = "0ycnkna72n969crgxfy2lc1qbndjqrj46b9gr5l9b7pgfxi5q0ll";
+            };
+            version = "1.62.0";
+          }
+          rec {
+            id = "dbepggeogbaibhgnhhndojpepiihcmeb";
+            crxPath = builtins.fetchurl {
+              url = "https://clients2.google.com/service/update2/crx?response=redirect&prodversion=${vrs}&acceptformat=crx2,crx3&x=id%3D${id}%26uc";
+              name = "vimium_${version}.crx";
+              sha256 = "0m8xski05w2r8igj675sxrlkzxlrl59j3a7m0r6c8pwcvka0r88d";
+            };
+            version = "2.1.2";
+          }
+          rec {
+            id = "naepdomgkenhinolocfifgehidddafch";
+            crxPath = builtins.fetchurl {
+              url = "https://clients2.google.com/service/update2/crx?response=redirect&prodversion=${vrs}&acceptformat=crx2,crx3&x=id%3D${id}%26uc";
+              name = "browserpass_${version}.crx";
+              sha256 = "074sc9hxh7vh5j79yjhsrnhb5k4dv3bh5vip0jr30hkkni7nygbd";
+            };
+            version = "3.9.0";
+          }
+        ];
+      };
+      browserpass = {
+        enable = true;
+      };
+    };
+  };
+}
--- a/user/modules/gui/browsers/firefox/default.nix
+++ b/user/modules/gui/browsers/firefox/default.nix
@ -0,0 +1,338 @@
+{ pkgs, lib, config, ... }:
+
+with lib;
+let
+  cfg = config.modules.user.gui.browser.firefox;
+  passffHost= {
+    home.packages = with pkgs; [
+      passff-host
+    ];
+    home.file = {
+      ".mozilla/native-messaging-hosts/passff.json" = {
+        text = ''
+          {
+            "name": "passff",
+            "description": "Host for communicating with zx2c4 pass",
+            "path": "${pkgs.passff-host}/share/passff-host/passff.py",
+            "type": "stdio",
+            "allowed_extensions": [ "passff@invicem.pro" ]
+          }
+        '';
+      };
+    };
+    assertions =
+    let
+      pinentry = config.services.gpg-agent.pinentry.package;
+    in
+    [
+      {
+        assertion = pinentry != pkgs.pinentry-curses || pinentry != pkgs.pinentry-tty;
+        message = "Firefox plugin passff requires graphical pinentry";
+      }
+    ];
+  };
+
+in
+{
+  options.modules.user.gui.browser.firefox = { enable = mkEnableOption "Enable Firefox browser"; };
+  config = mkIf cfg.enable (passffHost // {
+    programs.firefox = {
+      enable = true;
+      profiles = {
+        "${config.user.name}" = {
+          isDefault = true;
+          #bookmarks = config.user.bookmarks;
+
+          extensions = {
+            packages = with pkgs.nur.repos.rycee.firefox-addons; [
+              ublock-origin
+              tridactyl
+              #darkreader
+              tampermonkey
+              clearurls
+              passff
+              multi-account-containers
+            ];
+          };
+
+          search = {
+            force = true;
+            default = "google";
+            engines = {
+              "Startpage" = {
+                urls = [{
+                  template = "https://www.startpage.com/sp/search?q={searchTerms}";
+                }];
+                icon = "https://www.startpage.com/sp/cdn/favicons/favicon--default.ico";
+              };
+            };
+          };
+
+          containersForce = true;
+          containers = {
+            Banking = {
+              color = "green";
+              icon = "dollar";
+              id = 1;
+            };
+            Personal = {
+              color = "orange";
+              icon = "fingerprint";
+              id = 2;
+            };
+            Work = {
+              color = "yellow";
+              icon = "briefcase";
+              id = 3;
+            };
+            Personal_Work = {
+              color = "turquoise";
+              icon = "briefcase";
+              id = 4;
+            };
+            Social = {
+              color = "red";
+              icon = "chill";
+              id = 5;
+            };
+            Shopping = {
+              color = "purple";
+              icon = "cart";
+              id = 6;
+            };
+            Google = {
+              color = "pink";
+              icon = "vacation";
+              id = 7;
+            };
+          };
+
+          settings = {
+            "layout.spellcheckDefault" = 0;
+            "ui.key.menuAccessKeyFocuses" = false;
+            "signon.rememberSignons" = false;
+            "extensions.pocket.enabled" = false;
+            "extensions.autoDisableScopes" = 0;
+
+            # May break extensions due to Nix
+            "extensions.enabledScopes" = 5;
+
+            # May break stuff but increases privacy
+            #"extensions.webextensions.restrictedDomains" = "";
+            #"privacy.resistFingerprinting" = true;
+            #"privacy.resistFingerprinting.letterboxing" = true;
+            #"privacy.resistFingerprinting.block_mozAddonManager" = true;
+
+            "browser.startup.homepage_override.mstone" = "ignore";
+
+            "browser.aboutConfig.showWarning" = false;
+            "browser.startup.page" = 0;
+            "browser.formfill.enable" = false;
+            "places.history.enabled" = false;
+
+            "browser.urlbar.suggest.history" = false;
+            "browser.urlbar.suggest.topsites" = false;
+            "browser.urlbar.sponsoredTopSites" = false;
+            "browser.urlbar.autoFill" = false;
+            "browser.urlbar.suggest.pocket" = false;
+            "browser.urlbar.suggest.quicksuggest.nonsponsored" = false;
+            "browser.urlbar.suggest.quicksuggest.sponsored" = false;
+            "browser.toolbars.bookmarks.showOtherBookmarks" = false;
+            "browser.aboutwelcome.showModal" = false;
+            "browser.migrate.content-modal.about-welcome-behavior" = "";
+
+            "browser.newtabpage.enabled" = false;
+            "browser.newtabpage.activity-stream.showSponsored" = false;
+            "browser.newtabpage.activity-stream.showSponsoredTopSites" = false;
+            "browser.newtabpage.activity-stream.default.sites" = "";
+
+            "extensions.getAddons.showPane" = false;
+            "extensions.htmlaboutaddons.recommendations.enabled" = false;
+            "browser.discovery.enabled" = false;
+            "browser.shopping.experience2023.enabled" = false;
+
+            "datareporting.policy.dataSubmissionEnabled" = false;
+            "datareporting.healthreport.uploadEnabled" = false;
+
+            "toolkit.telemetry.unified" = false;
+            "toolkit.telemetry.enabled" = false;
+            "toolkit.telemetry.server" = "";
+            "toolkit.telemetry.archive.enabled" = false;
+            "toolkit.telemetry.newProfilePing.enabled" = false;
+            "toolkit.telemetry.shutdownPingSender.enabled" = false;
+            "toolkit.telemetry.updatePing.enabled" = false;
+            "toolkit.telemetry.bhrPing.enabled" = false;
+            "toolkit.telemetry.firstShutdownPing.enabled" = false;
+            "toolkit.telemetry.coverage.opt-out" = false;
+            "toolkit.coverage.endpoint.base" = "";
+
+            "browser.newtabpage.activity-stream.feeds.telemetry" = false;
+            "browser.newtabpage.activity-stream.telemetry" = false;
+
+            "app.shield.optoutstudies.enabled" = false;
+            "app.normandy.enabled" = false;
+            "app.normandy.api_url" = "";
+
+            "breakpad.reportURL" = false;
+            "browser.tabs.crashReporting.sendReport" = false;
+            "browser.crashReports.unsubmittedCheck.autoSubmit2" = false;
+
+            "captivedetect.canonicalURL" = "";
+            "network.captive-portal-service.enabled" = false;
+            "network.connectivity-service.enabled" = false;
+
+            "browser.safebrowsing.downloads.remote.enabled" = false;
+
+            "network.prefetch-next" = false;
+            "network.dns.disablePrefetch" = true;
+            "network.predictor.enabled" = false;
+            "network.predictor.enable-prefetch" = false;
+            "network.http.speculative-parallel-limit" = 0;
+            "network.http.speculativeConnect.enabled" = false;
+
+            "network.proxy.sock_remote_dns" = true;
+            "network.file.disable_unc_paths" = true;
+            "network.gio.supported-protocols" = "";
+
+            "browser.urlbar.speculativeConnect.enabled" = false;
+            "browser.search.suggest.enabled" = false;
+            "browser.urlbar.suggest.searches" = false;
+
+            "browser.urlbar.clipboard.featureGate" = false;
+            "browser.urlbar.richSuggestions.featureGate" = false;
+            "browser.urlbar.trending.featureGate" = false;
+            "browser.urlbar.addons.featureGate" = false;
+            "browser.urlbar.pocket.featureGate" = false;
+            "browser.urlbar.weather.featureGate" = false;
+            "browser.urlbar.yelp.featureGate" = false;
+            "browser.urlbar.suggest.engines" = false;
+
+            "signon.autofillForms" = false;
+            "signon.formlessCapture.enabled" = false;
+
+            "network.auth.subresource-http-auth-allow" = 1;
+
+            "browser.privatebrowsing.forceMediaMemoryCache" = true;
+            "media.memory_cache_max_size" = 65536;
+            "browser.sessionstore.privacy_level" = 2;
+            "browser.shell.shortcutFavicons" = false;
+
+            "security.ssl.require_safe_negotiation" = true;
+            "security.tls.enable_0rtt_data" = false;
+            "security.OCSP.enabled" = true;
+            "security.OCSP.require" = true;
+
+            "security.cert_pinning.enforcement_level" = 2;
+            "security.remote_settings.crlite_filters.enabled" = true;
+            "security.pki.crlite_mode" = 2;
+
+            "dom.security.https_only_mode" = true;
+            "dom.security.https_only_mode_send_http_background_request" = false;
+
+            "security.ssl.treat_unsafe_negotiation_as_broken" = true;
+            "browser.xul.error_pages.expert_bad_cert" = true;
+
+            "network.http.referer.XOriginTrimmingPolicy" = 2;
+
+            "privacy.userContext.enabled" = true;
+            "privacy.userContext.ui.enabled" = true;
+
+            "media.peerconnection.ice.proxy_only_if_behind_proxy" = true;
+            "media.peerconnection.ice.default_address_only" = true;
+
+            "dom.disable_window_move_resize" = true;
+
+            "browser.download.start_downloads_in_tmp_dir" = false;
+            "browser.helperApps.deleteTempFileOnExit" = true;
+            "browser.uitour.enabled" = false;
+
+            "devtools.debugger.remote-enabled" = false;
+            "permissions.manager.defaultsUrl" = "";
+            "webchannel.allowObject.urlWhitelist" = "";
+            "network.IDN_show_punycode" = true;
+
+            "pdfjs.disabled" = false;
+            "pdfjs.enableScripting" = false;
+
+            "browser.tabs.searchclipboardfor.middleclick" = false;
+            "browser.contentanalysis.default_allow" = false;
+
+            "browser.download.useDownloadDir" = true;
+            "browser.download.alwaysOpenPanel" = true;
+            "browser.download.manager.addToRecentDocs" = false;
+            "browser.download.always_ask_before_handling_new_types" = true;
+            "extensions.postDownloadThirdPartyPrompt" = true;
+
+            "browser.contentblocking.category" = "strict";
+
+            "privacy.sanitize.sanitizeOnShutdown" = true;
+            "privacy.clearOnShutdown.cache" = true;
+            "privacy.clearOnShutdown_v2.cache" = true;
+            "privacy.clearOnShutdown.downloads" = true;
+            "privacy.clearOnShutdown.formdata" = true;
+            "privacy.clearOnShutdown.history" = true;
+            "privacy.clearOnShutdown_v2.historyFormDataAndDownloads" = true;
+
+            "privacy.clearOnShutdown.cookies" = false;
+            "privacy.clearOnShutdown.offlineApss" = true;
+            "privacy.clearOnShutdown.sessions" = true;
+            "privacy.clearOnShutdown_v2.cookiesAndStorage" = false;
+
+            "privacy.clearSiteData.cache" = true;
+            "privacy.clearSiteData.cookiesAndStorage" = false;
+            "privacy.clearSiteData.historyFormDataAndDownloads" = true;
+
+            "privacy.cpd.cache" = true;
+            "privacy.clearHistory.cache" = true;
+            "privacy.cpd.formdata" = true;
+            "privacy.cpd.history" = true;
+            "privacy.clearHistory.historyFormDataAndDownloads" = true;
+            "privacy.cpd.cookies" = false;
+            "privacy.cpd.sessions" = true;
+            "privacy.cpd.offlineApps" = false;
+            "privacy.clearHistory.cookiesAndStorage" = false;
+
+            "privacy.sanitize.timeSpan" = 0;
+
+            "privacy.window.maxInnerWidth" = 1600;
+            "privacy.window.maxInnerHeight" = 900;
+
+            "privacy.spoof_english" = 1;
+
+            "browser.display.use_system_colors" = false;
+            "widget.non-native-theme.enabled" = true;
+
+            "browser.link.open_newwindow" = 3;
+            "browser.link.open_newwindow.restriction" = 0;
+            "browser.chrome.site_icons" = false;
+            "browser.download.forbid_open_with" = true;
+
+            "extensions.blocklist.enabled" = true;
+            "network.http.referer.spoofSource" = false;
+            "security.dialog_enable_delay" = 1000;
+            "privacy.firstparty.isolate" = false;
+            "extensions.webcompat.enable_shims" = true;
+            "security.tls.version.enable-deprecated" = false;
+            "extensions.webcompat-reporter.enabled" = false;
+            "extensions.quarantinedDomains.enabled" = true;
+
+            "media.videocontrols.picture-in-picture.enabled" = false;
+
+            # VA-API hardware video acceleration (NVIDIA)
+            "media.ffmpeg.vaapi.enabled" = true;
+            "media.rdd-ffmpeg.enabled" = true;
+            "media.av1.enabled" = false; # GTX 1650 doesn't support AV1 decode
+            "gfx.x11-egl.force-enabled" = true;
+          };
+        };
+      };
+      policies = {
+        WebsiteFilter = {
+          Block = [
+            "*://*.pokemonshowdown.com/*"
+          ];
+        };
+      };
+    };
+  });
+}
--- a/user/modules/gui/corn/default.nix
+++ b/user/modules/gui/corn/default.nix
@ -0,0 +1,36 @@
+{ pkgs, lib, config, ... }:
+
+with lib;
+let
+  cfg = config.modules.user.gui.corn;
+
+in
+{ options.modules.user.gui.corn = { enable = mkEnableOption "Enable Bitcoin client applications"; };
+  config = mkIf cfg.enable {
+    home.packages = with pkgs; [
+      #trezor-suite
+      #trezorctl
+      #trezord
+
+      sparrow
+    ];
+
+    #systemd.user.services = {
+    #  trezord = {
+    #    Unit = {
+    #      Description = "Trezor Bridge";
+    #      After = [ "network.target" ];
+    #      Wants = [ "network.target" ];
+    #      PartOf = [ "graphical-session.target" ];
+    #    };
+    #    Service = {
+    #      ExecStart = "${pkgs.trezord}/bin/trezord-go";
+    #      Restart = "always";
+    #    };
+    #    Install = {
+    #      WantedBy = [ "default.target" ];
+    #    };
+    #  };
+    #};
+  };
+}
--- a/user/modules/gui/default.nix
+++ b/user/modules/gui/default.nix
@ -0,0 +1,30 @@
+{ lib, config, ... }:
+
+let
+  programs = config.programs;
+
+  defaultBrowser =
+    if programs.firefox.enable then "firefox.desktop"
+    else if programs.brave.enable then "brave-browser.desktop"
+    else if programs.chromium.enable then "chromium.desktop"
+    else null;
+
+  types = [
+    "text/html" "application/xhtml+xml"
+    "x-scheme-handler/http" "x-scheme-handler/https"
+    "application/pdf"
+    "image/png" "image/jpeg" "image/jpg" "image/gif"
+    "image/webp" "image/avif" "image/bmp" "image/tiff" "image/svg+xml"
+    "video/mp4" "video/webm" "video/mkv" "video/avi"
+    "video/x-matroska" "video/quicktime"
+  ];
+
+in
+{
+  xdg.mimeApps = lib.mkIf (defaultBrowser != null) {
+    enable = true;
+    defaultApplications = builtins.listToAttrs (
+      map (t: { name = t; value = [ defaultBrowser ]; }) types
+    );
+  };
+}
--- a/user/modules/gui/dev/design/default.nix
+++ b/user/modules/gui/dev/design/default.nix
@ -0,0 +1,14 @@
+{ pkgs, lib, config, ... }:
+
+with lib;
+let
+  cfg = config.modules.user.gui.dev.design;
+
+in
+{ options.modules.user.gui.dev.design = { enable = mkEnableOption "Enable design tools"; };
+  config = mkIf cfg.enable {
+    home.packages = with pkgs; [
+      penpot-desktop
+    ];
+  };
+}
--- a/user/modules/gui/dev/pcb/default.nix
+++ b/user/modules/gui/dev/pcb/default.nix
@ -0,0 +1,16 @@
+{ pkgs, lib, config, ... }:
+
+with lib;
+let
+  cfg = config.modules.user.gui.dev.pcb;
+
+in
+{ options.modules.user.gui.dev.pcb = { enable = mkEnableOption "Enable PCB development suite"; };
+  config = mkIf cfg.enable {
+    home.packages = with pkgs; [
+      arduino-ide
+      kicad-small
+      ngspice
+    ];
+  };
+}
--- a/user/modules/gui/fun/config/discord.config.json
+++ b/user/modules/gui/fun/config/discord.config.json
@ -0,0 +1,82 @@
+{
+    "settings": {
+        "general": {
+            "menuBar": {
+                "hide": false
+            },
+            "tray": {
+                "disable": false
+            },
+            "taskbar": {
+                "flash": true
+            },
+            "window": {
+                "transparent": false,
+                "hideOnClose": false
+            }
+        },
+        "privacy": {
+            "blockApi": {
+                "science": true,
+                "typingIndicator": false,
+                "fingerprinting": true
+            },
+            "permissions": {
+                "video": null,
+                "audio": true,
+                "fullscreen": true,
+                "notifications": null,
+                "display-capture": true,
+                "background-sync": false
+            }
+        },
+        "advanced": {
+            "csp": {
+                "enabled": true
+            },
+            "cspThirdParty": {
+                "spotify": true,
+                "gif": true,
+                "hcaptcha": true,
+                "youtube": true,
+                "twitter": true,
+                "twitch": true,
+                "streamable": true,
+                "vimeo": true,
+                "soundcloud": true,
+                "paypal": true,
+                "audius": true,
+                "algolia": true,
+                "reddit": true,
+                "googleStorageApi": true
+            },
+            "currentInstance": {
+                "radio": 0
+            },
+            "devel": {
+                "enabled": true
+            },
+            "redirection": {
+                "warn": true
+            },
+            "optimize": {
+                "gpu": true
+            },
+            "webApi": {
+                "webGl": true
+            },
+            "unix": {
+                "autoscroll": false
+            }
+        }
+    },
+    "update": {
+        "notification": {
+            "version": "",
+            "till": ""
+        }
+    },
+    "screenShareStore": {
+        "audio": false
+    }
+}
--- a/user/modules/gui/fun/default.nix
+++ b/user/modules/gui/fun/default.nix
@ -0,0 +1,26 @@
+{ pkgs, lib, config, ... }:
+
+with lib;
+let
+  cfg = config.modules.user.gui.fun;
+
+in
+{ options.modules.user.gui.fun = { enable = mkEnableOption "Enable entertainment apps"; };
+  config = mkIf cfg.enable {
+    #programs.obs-studio = {
+    #  enable = true;
+    #  plugins = with pkgs.obs-studio-plugins; [
+    #    wlrobs
+    #    obs-pipewire-audio-capture
+    #    input-overlay
+    #  ];
+    #};
+
+    home.packages = with pkgs; [
+      ytmdesktop
+      #discordo
+      #webcord
+      discord
+    ];
+  };
+}
--- a/user/modules/gui/utils/default.nix
+++ b/user/modules/gui/utils/default.nix
@ -0,0 +1,16 @@
+{ pkgs, lib, config, ... }:
+
+with lib;
+let
+  cfg = config.modules.user.gui.utils;
+
+in
+{ options.modules.user.gui.utils = { enable = mkEnableOption "Enable desktop utils"; };
+  config = mkIf cfg.enable {
+    programs.btop.enable = true;
+    home.packages = with pkgs; [
+      gimp
+      libreoffice
+    ];
+  };
+}
--- a/user/modules/gui/wm/hyprland/config/rofi/config/config.rasi
+++ b/user/modules/gui/wm/hyprland/config/rofi/config/config.rasi
@ -0,0 +1,7 @@
+configuration {
+  font: "SF Pro Rounded 10";
+  show-icons: true;
+  kb-cancel: "Escape,Alt+F1";
+}
+
+@theme "~/.config/rofi/material-ocean.rasi"
--- a/user/modules/gui/wm/hyprland/config/rofi/config/material-ocean.rasi
+++ b/user/modules/gui/wm/hyprland/config/rofi/config/material-ocean.rasi
@ -0,0 +1,95 @@
+* {
+  background: #0f111a;
+  foreground: #f1f1f1;
+  selected: #ff4151;
+}
+
+window {
+  transparency: "real";
+  background-color: @background;
+  text-color: @foreground;
+}
+
+prompt {
+  enabled: true;
+  padding: 4px 4px 6px 6px;
+  background-color: @background;
+  text-color: @foreground;
+}
+
+textbox-prompt-colon {
+  expand: false;
+  background-color: @background;
+  padding: 4px 0px 0px 6px;
+}
+
+inputbar {
+  children: [ textbox-prompt-colon, entry ];
+  background-color: @background;
+  text-color: @foreground;
+  expand: false;
+  border: 0px 0px 0px 0px;
+  border-radius: 0px;
+  border-color: @selected;
+  margin: 0px 0px 0px 0px;
+  padding: 0px 0px 4px 0px;
+  position: center;
+}
+
+entry {
+  background-color: @background;
+  text-color: @foreground;
+  placeholder-color: @foreground;
+  expand: true;
+  horizontal-align: 0;
+  blink: true;
+  padding: 4px 0px 0px 4px;
+}
+
+case-indicator {
+  background-color: @background;
+  text-color: @foreground;
+  spacing: 0;
+}
+
+listview {
+  background-color: @background;
+  columns: 1;
+  spacing: 5px;
+  cycle: true;
+  dynamic: true;
+  layout: vertical;
+}
+
+mainbox {
+  background-color: @background;
+  children: [ inputbar, listview ];
+  spacing: 5px;
+  padding: 5px 5px 5px 5px;
+}
+
+element {
+  background-color: @background;
+  text-color: @foreground;
+  orientation: horizontal;
+  border-radius: 4px;
+  padding: 6px 6px 6px 6px;
+}
+
+element-text, element-icon {
+    background-color: inherit;
+    text-color: inherit;
+}
+
+element-icon {
+  size: 18px;
+  border: 4px;
+}
+
+element selected {
+  background-color: @selected;
+  text-color: @background;
+  border: 0px;
+  border-radius: 0px;
+  border-color: @selected;
+}
--- a/user/modules/gui/wm/hyprland/config/rofi/default.nix
+++ b/user/modules/gui/wm/hyprland/config/rofi/default.nix
@ -0,0 +1,183 @@
+{ pkgs, config, ... }:
+let
+  inherit (config.lib.formats.rasi) mkLiteral;
+
+in
+{
+  enable = true;
+  package = pkgs.rofi;
+  location = "center";
+  terminal = "\${pkgs.alacritty}/bin/alacritty";
+  plugins = with pkgs; [
+    rofi-emoji
+  ];
+
+  #theme = {
+  #  "*" = {
+  #    nord0 = mkLiteral "#2e3440";
+  #    nord1 = mkLiteral "#3b4252";
+  #    nord2 = mkLiteral "#434c5e";
+  #    nord3 = mkLiteral "#4c566a";
+  #    nord4 = mkLiteral "#d8dee9";
+  #    nord5 = mkLiteral "#e5e9f0";
+  #    nord6 = mkLiteral "#eceff4";
+  #    nord7 = mkLiteral "#8fbcbb";
+  #    nord8 = mkLiteral "#88c0d0";
+  #    nord9 = mkLiteral "#81a1c1";
+  #    nord10 = mkLiteral "#5e81ac";
+  #    nord11 = mkLiteral "#bf616a";
+  #    nord12 = mkLiteral "#d08770";
+  #    nord13 = mkLiteral "#ebcb8b";
+  #    nord14 = mkLiteral "#a3be8c";
+  #    nord15 = mkLiteral "#b48ead";
+  #    spacing = 2;
+  #    background-color = mkLiteral "var(nord1)";
+  #    background = mkLiteral "var(nord1)";
+  #    foreground = mkLiteral "var(nord4)";
+  #    normal-background = mkLiteral "var(background)";
+  #    normal-foreground = mkLiteral "var(foreground)";
+  #    alternate-normal-background = mkLiteral "var(background)";
+  #    alternate-normal-foreground = mkLiteral "var(foreground)";
+  #    selected-normal-background = mkLiteral "var(nord8)";
+  #    selected-normal-foreground = mkLiteral "var(background)";
+  #    active-background = mkLiteral "var(background)";
+  #    active-foreground = mkLiteral "var(nord10)";
+  #    alternate-active-background = mkLiteral "var(background)";
+  #    alternate-active-foreground = mkLiteral "var(nord10)";
+  #    selected-active-background = mkLiteral "var(nord10)";
+  #    selected-active-foreground = mkLiteral "var(background)";
+  #    urgent-background = mkLiteral "var(background)";
+  #    urgent-foreground = mkLiteral "var(nord11)";
+  #    alternate-urgent-background = mkLiteral "var(background)";
+  #    alternate-urgent-foreground = mkLiteral "var(nord11)";
+  #    selected-urgent-background = mkLiteral "var(nord11)";
+  #    selected-urgent-foreground = mkLiteral "var(background)";
+  #  };
+  #  
+  #  element = {
+  #    padding = mkLiteral "0px 0px 0px 7px";
+  #    spacing = mkLiteral "5px";
+  #    border = 0;
+  #    cursor = mkLiteral "pointer";
+  #  };
+
+  #  "element normal.normal" = {
+  #    background-color = mkLiteral "var(normal-background)";
+  #    text-color = mkLiteral "var(normal-foreground)";
+  #  };
+
+  #  "element normal.urgent" = {
+  #    background-color = mkLiteral "var(urgent-background)";
+  #    text-color = mkLiteral "var(urgent-foreground)";
+  #  };
+
+  #  "element normal.active" = {
+  #    background-color = mkLiteral "var(active-background)";
+  #    text-color = mkLiteral "var(active-foreground)";
+  #  };
+
+  #  "element selected.normal" = {
+  #    background-color = mkLiteral "var(selected-normal-background)";
+  #    text-color = mkLiteral "var(selected-normal-foreground)";
+  #  };
+
+  #  "element selected.urgent" = {
+  #    background-color = mkLiteral "var(selected-urgent-background)";
+  #    text-color = mkLiteral "var(selected-urgent-foreground)";
+  #  };
+
+  #  "element selected.active" = {
+  #    background-color = mkLiteral "var(selected-active-background)";
+  #    text-color = mkLiteral "var(selected-active-foreground)";
+  #  };
+
+  #  "element alternate.normal" = {
+  #    background-color = mkLiteral "var(alternate-normal-background)";
+  #    text-color = mkLiteral "var(alternate-normal-foreground)";
+  #  };
+
+  #  "element alternate.urgent" = {
+  #    background-color = mkLiteral "var(alternate-urgent-background)";
+  #    text-color = mkLiteral "var(alternate-urgent-foreground)";
+  #  };
+
+  #  "element alternate.active" = {
+  #    background-color = mkLiteral "var(alternate-active-background)";
+  #    text-color = mkLiteral "var(alternate-active-foreground)";
+  #  };
+
+  #  "element-text" = {
+  #    background-color = mkLiteral "rgba(0, 0, 0, 0%)";
+  #    text-color = mkLiteral "inherit";
+  #    highlight = mkLiteral "inherit";
+  #    cursor = mkLiteral "inherit";
+  #  };
+
+  #  "element-icon" = {
+  #    background-color = mkLiteral "rgba(0, 0, 0, 0%)";
+  #    size = mkLiteral "1.0000em";
+  #    text-color = mkLiteral "inherit";
+  #    cursor = mkLiteral "inherit";
+  #  };
+
+  #  window = {
+  #    padding = 0;
+  #    border = 0;
+  #    background-color = mkLiteral "var(background)";
+  #  };
+
+  #  mainbox = {
+  #    padding = 0;
+  #    border = 0;
+  #  };
+
+  #  message = {
+  #    margin = mkLiteral "0px 7px";
+  #  };
+
+  #  textbox = {
+  #    text-color = mkLiteral "var(foreground)";
+  #  };
+
+  #  listview = {
+  #    margin = mkLiteral "0px 0px 5px";
+  #    scrollbar = true;
+  #    spacing = mkLiteral "2px";
+  #    fixed-height = 0;
+  #  };
+
+  #  scrollbar = {
+  #    padding = 0;
+  #    handle-width = mkLiteral "14px";
+  #    border = 0;
+  #    handle-color = mkLiteral "var(nord3)";
+  #  };
+
+  #  button = {
+  #    spacing = 0;
+  #    text-color = mkLiteral "var(normal-foreground)";
+  #    cursor = mkLiteral "pointer";
+  #  };
+
+  #  "button selected" = {
+  #    background-color = mkLiteral "var(selected-normal-background)";
+  #    text-color = mkLiteral "var(selected-normal-foreground)";
+  #  };
+
+  #  inputbar = {
+  #    padding = mkLiteral "7px";
+  #    margin = mkLiteral "7px";
+  #    spacing = 0;
+  #    text-color = mkLiteral "var(normal-foreground)";
+  #    background-color = mkLiteral "var(nord3)";
+  #    children = [ "entry" ];
+  #  };
+
+  #  entry = {
+  #    spacing = 0;
+  #    cursor = mkLiteral "text";
+  #    text-color = mkLiteral "var(normal-foreground)";
+  #    background-color = mkLiteral "var(nord3)";
+  #  };
+  #};
+}
--- a/user/modules/gui/wm/hyprland/config/waybar/config
+++ b/user/modules/gui/wm/hyprland/config/waybar/config
@ -0,0 +1,126 @@
+{
+  "layer": "top",
+  "position": "top",
+  "output": "HDMI-A-1",
+  "modules-left": [ "custom/logo", "clock", "custom/blockheight", "custom/price", "memory", "cpu" ],
+  "modules-center": [ "hyprland/workspaces" ],
+  "modules-right": [ "tray", "pulseaudio", "network" ],
+  "reload_style_on_change":true,
+
+  "custom/logo": {
+    "format": "",
+    "tooltip": false,
+    "on-click": "alacritty --class sys-specs -e bash -c 'fastfetch; read -n 1'"
+  },
+
+  "hyprland/workspaces": {
+    "format": "<span color='#ffffff'>{icon}</span>",
+    "format-icons": {
+      "1": "",
+      "2": "",
+      "3": "",
+      "4": "",
+      "5": "",
+      "6": "",
+      "active": "",
+      "default": ""
+    },
+    "persistent-workspaces": {
+      "*": [ 2, 3, 4, 5, 6 ]
+    }
+  },
+
+  "custom/weather": {
+    "format": "<span color='#ffffff'>{}</span>",
+    "return-type": "json",
+    "exec": "~/.config/waybar/scripts/weather.sh",
+    "interval": 10,
+  },
+
+  "custom/blockheight": {
+    "format": "<span color='#ef8e19'>󰠓 </span><span color='#ffffff'>{} </span>",
+    "interval": 30,
+    "exec": "~/.config/waybar/scripts/getBlock",
+    "on-click": "xdg-open https://www.mempool.space",
+  },
+
+  "custom/price": {
+    "format": "<span color='#00ff00'>$</span><span color='#ffffff'>{}</span>",
+    "interval": 10,
+    "exec": "~/.config/waybar/scripts/getPrice",
+    "on-click": "xdg-open https://www.coinbase.com/price/bitcoin",
+  },
+
+  "clock": {
+    "format": "{:%I:%M:%S %p}",
+    "interval":1,
+    "tooltip-format": "\n<big>{:%d %A}</big>\n<tt><small>{calendar}</small></tt>",
+    "calendar-weeks-pos": "right",
+    "today-format": "<span color='#7645AD'><b><u>{}</u></b></span>",
+    "format-calendar": "<span color='#aeaeae'><b>{}</b></span>",
+    "format-calendar-weeks": "<span color='#aeaeae'><b>W{:%V}</b></span>",
+    "format-calendar-weekdays": "<span color='#aeaeae'><b>{}</b></span>"
+  },
+
+  "network": {
+    "format-wifi": "<span color='#ffffff'> </span>",
+    "format-ethernet":"<span color='#ffffff'>󰌘</span>",
+    "format-disconnected": "<span class='#e11e2d'></span>",
+    "tooltip-format": "{ipaddr}",
+    "tooltip-format-wifi": "{essid} ({signalStrength}%) | {ipaddr}",
+    "tooltip-format-ethernet": "{ifname} | {ipaddr}",
+    "tooltip-format-disconnected": "Offline",
+    "on-click": "alacritty -e nmtui"
+  },
+
+  "cpu": {
+    "interval": 1,
+    "format": "<span color='#ffd808'> </span><span color='#ffffff'> {usage}%</span>",
+    "min-length": 6,
+    "max-length": 6,
+    "format-icons": ["▁", "▂", "▃", "▄", "▅", "▆", "▇", "█"],
+  },
+
+  "memory": {
+    "format": "<span color='#cc63ff'>󱐋</span><span color='#ffffff'>{percentage}%</span>"
+  },
+
+  "temperature": {
+    "format": "<span color='#99c3ff'>󱩱 </span><span color='#ffffff'>:{temperatureC}°C</span>",
+    "format-critical": "<span color='#fd4400'>󰈸</span><span color='#ffffff'>:{temperatureC}°C</span>",
+    "interval": 1,
+    "critical-threshold": 80,
+    "on-click": "alacritty -e btop",
+  },
+
+  "pulseaudio": {
+    "format": "<span color='#ffffff'>{icon}</span>",
+    "format-bluetooth":"󰂰",
+    "format-muted": "<span font='12'></span>",
+    "format-icons": {
+      "headphones": "",
+      "bluetooth": "󰥰",
+      "handsfree": "",
+      "headset": "󱡬",
+      "phone": "",
+      "portable": "",
+      "car": "",
+      "default": ["","",""]
+    },
+    "justify": "center",
+    "on-click": "alacritty -e pulsemixer",
+    "tooltip-format": "{volume}%"
+  },
+
+  "jack": {
+    "format": "{} 󱎔",
+    "format-xrun": "{xruns} xruns",
+    "format-disconnected": "DSP off",
+    "realtime": true
+  },
+
+  "tray": {
+    "icon-size": 14,
+    "spacing": 10
+  },
+}
--- a/user/modules/gui/wm/hyprland/config/waybar/scripts/getBlock
+++ b/user/modules/gui/wm/hyprland/config/waybar/scripts/getBlock
--- a/user/modules/gui/wm/hyprland/config/waybar/scripts/getPrice
+++ b/user/modules/gui/wm/hyprland/config/waybar/scripts/getPrice
@ -0,0 +1,12 @@
+#!/usr/bin/env bash
+
+response=$(curl -s "https://api.coinbase.com/v2/prices/BTC-USD/spot")
+price=$(echo "$response" | jq -r .data.amount | awk -F. '{print $1}')
+
+if [ -z "$price" ]; then
+  echo -e "\033[31mErr\033[0m"
+  exit 1
+fi
+
+echo "$price"
+exit 0
--- a/user/modules/gui/wm/hyprland/config/waybar/scripts/weather.sh
+++ b/user/modules/gui/wm/hyprland/config/waybar/scripts/weather.sh
@ -0,0 +1,24 @@
+#!/bin/sh
+BSSIDS="$(nmcli device wifi list |
+    awk 'NR>1 {if ($1 != "*") {print $1}}' |
+    tr -d ":" |
+    tr "\n" ",")"
+
+LOC=""
+REQUEST_GEO="$(wget -qO - http://openwifi.su/api/v1/bssids/"$BSSIDS")"
+if [[ "$(jq ".count_results" <<< "$REQUEST_GEO")" -gt 0 ]] ; then
+    LAT="$(jq ".lat" <<< "$REQUEST_GEO")"
+    LON="$(jq ".lon" <<< "$REQUEST_GEO")"
+    LOC="$LAT,$LON"
+fi
+
+text="$(curl -s "https://wttr.in/$LOC?format=1" | sed 's/ //g')"
+tooltip="$(curl -s "https://wttr.in/$LOC?0QT" |
+    sed 's/\\/\\\\/g' |
+    sed ':a;N;$!ba;s/\n/\\n/g' |
+    sed 's/"/\\"/g')"
+
+if ! grep -q "Unknown location" <<< "$text"; then
+    echo "{\"text\": \"$text\", \"tooltip\": \"<tt>$tooltip</tt>\", \"class\": \"weather\"}"
+fi
+
--- a/user/modules/gui/wm/hyprland/config/waybar/style.css
+++ b/user/modules/gui/wm/hyprland/config/waybar/style.css
@ -0,0 +1,73 @@
+* {
+  border: none;
+  font-size: 14px;
+  font-family: "Terminus Nerd Font Propo" ;
+  min-height: 25px;
+}
+
+window#waybar {
+  background: transparent;
+  margin: 5px;
+ }
+
+#custom-logo {
+  padding: 0 10px;
+  color: #5277c3;
+}
+
+.modules-right {
+  padding-left: 5px;
+  border-radius: 15px 0 0 15px;
+  margin-top: 2px;
+  background: #000000;
+}
+
+.modules-center {
+  padding: 0 15px;
+  margin-top: 2px;
+  border-radius: 15px 15px 15px 15px;
+  background: #000000;
+}
+
+.modules-left {
+  border-radius: 0 15px 15px 0;
+  margin-top: 2px;
+  background: #000000;
+}
+
+#custom-clipboard,
+#pulseaudio,
+#network,
+#disk,
+#memory,
+#backlight,
+#cpu,
+#temperature,
+#custom-weather,
+#jack,
+#tray,
+#window,
+#workspaces,
+#clock {
+  padding: 0 5px;
+}
+#pulseaudio {
+  padding-top: 3px;
+}
+
+#temperature.critical,
+#pulseaudio.muted {
+  color: #FF0000;
+  padding-top: 0;
+}
+
+#clock{
+  color: #5fd1fa;
+}
+
+@keyframes blink {
+  to {
+    background-color: #ffffff;
+    color: #000000;
+  }
+}
--- a/user/modules/gui/wm/hyprland/default.nix
+++ b/user/modules/gui/wm/hyprland/default.nix
@ -0,0 +1,246 @@
+{ pkgs, lib, config, monitors ? [], ... }:
+
+with lib;
+let
+  cfg = config.modules.user.gui.wm.hyprland;
+
+  wallpaper = builtins.fetchurl {
+    url = "https://images6.alphacoders.com/117/1174033.png";
+    sha256 = "1ph5m9s57076jx6042iipqx2ifzadmd5z4lf5l49wgq4jb92mp16";
+  };
+
+  toHyprlandMonitor = m:
+    "${m.name}, ${toString m.width}x${toString m.height}@${toString m.refreshRate}, ${toString m.x}x${toString m.y}, ${toString m.scale}";
+
+in
+{ options.modules.user.gui.wm.hyprland = { enable = mkEnableOption "Enable Hyprland WM"; };
+  config = mkIf cfg.enable {
+    wayland.windowManager.hyprland = {
+      enable = true;
+      xwayland.enable = true;
+
+      settings = {
+        "$mod" = "ALT";
+        "$terminal" = "${pkgs.alacritty}/bin/alacritty";
+        "$menu" = "rofi -show drun -show-icons -drun-icon-theme Qogir -font 'Noto Sans 14'";
+
+        monitor = if monitors != []
+          then map toHyprlandMonitor monitors
+          else [ ", preferred, auto, 1" ];
+
+        exec-once = [
+          "waybar"
+          "hyprctl setcursor Vanilla-DMZ 24"
+        ];
+
+        bind = [
+          "$mod, Return, exec, $terminal"
+          "$mod, q, killactive"
+
+          "$mod, J, movefocus, d"
+          "$mod, K, movefocus, u"
+          "$mod, H, movefocus, l"
+          "$mod, L, movefocus, r"
+
+          "$mod&SHIFT, J, movewindow, d"
+          "$mod&SHIFT, K, movewindow, u"
+          "$mod&SHIFT, H, movewindow, l"
+          "$mod&SHIFT, L, movewindow, r"
+
+          "$mod, F, fullscreen"
+
+          ", Print, exec, grim ~/Pictures/screenshot-$(date +'%Y%m%d-%H%M%S').png"
+          "$mod&SHIFT, Print, exec, grim -g \"$(slurp)\" ~/Pictures/screenshot-$(date +'%Y%m%d-%H%M%S').png"
+          "$mod&SHIFT, F, exec, alacritty -e sh -c 'EDITOR=nvim ranger'"
+          ''SHIFT, Print, exec, grim -g "$(hyprctl activewindow -j | jq -r '"\(.at[0]),\(.at[1]) \(.size[0])x\(.size[1])"')" ~/Pictures/screenshot-$(date +'%Y%m%d-%H%M%S').png''
+
+          "$mod, D, exec, $menu"
+          "$mod&SHIFT, D, exec, rofi -modi emoji -show emoji"
+        ] ++ ( builtins.concatLists (builtins.genList (
+        x: let
+          ws = let
+            c = (x + 1) / 10;
+            in
+              builtins.toString (x + 1 - (c * 10));
+        in
+        [
+          "$mod, ${ws}, workspace, ${toString (x + 1)}"
+          "$mod SHIFT, ${ws}, movetoworkspace, ${toString (x + 1)}"
+        ])
+          10)
+        );
+
+        bindm = [
+          "$mod, mouse:272, movewindow"
+        ];
+
+        windowrulev2 = [
+          "float, title:(Android Emulator)"
+          "float, title: Extension: (PassFF)"
+          "float, size 400 600, stayfocused, class:sys-specs"
+        ];
+
+        general = {
+          layout = "master";
+          border_size = 0;
+        };
+
+        decoration = {
+          rounding = 10;
+        };
+
+        master = {
+          drop_at_cursor = false;
+          #new_is_master = false;
+        };
+
+        input = {
+          kb_layout = "us";
+          follow_mouse = 1;
+          accel_profile = "flat";
+          sensitivity = 0.35;
+        };
+
+        cursor = {
+          inactive_timeout = 0;
+          no_hardware_cursors = true;
+          hide_on_touch = false;
+          use_cpu_buffer = 0;
+          enable_hyprcursor = false;
+        };
+
+        env = [
+          "HYPRCURSOR_THEME,Vanilla-DMZ"
+          "HYPRCURSOR_SIZE,24"
+          "GTK_THEME,Juno"
+
+          "LIBVA_DRIVER_NAME,nvidia"
+          "XDG_SESSION_TYPE,wayland"
+          "GBM_BACKEND,nvidia-drm"
+          "__GLX_VENDOR_LIBRARY_NAME,nvidia"
+        ];
+      };
+    };
+
+    programs.rofi = {
+      enable = true;
+      package = pkgs.rofi;
+      location = "center";
+      terminal = "alacritty";
+      plugins = with pkgs; [
+        rofi-emoji
+      ];
+    };
+
+    home = {
+      file = {
+        ".config/rofi" = {
+          source = ./config/rofi/config;
+          recursive = true;
+        };
+        ".config/waybar" = {
+          source = ./config/waybar;
+          recursive = true;
+        };
+      };
+
+      packages = with pkgs; [
+        pulsemixer
+        xdg-utils
+        wl-clipboard
+        cliphist
+
+        dconf
+
+        grim
+        jq
+        slurp
+
+        ranger
+        highlight
+
+        noto-fonts
+        noto-fonts-cjk-sans
+        noto-fonts-color-emoji
+      ];
+
+      sessionVariables = {
+        NIXOS_OZONE_WL = 1;
+      };
+    };
+
+    programs.waybar = {
+      enable = true;
+    };
+
+    services.hyprpaper = {
+      enable = true;
+      settings = {
+        ipc = "on";
+        splash = false;
+        splash_offset = 2.0;
+
+        preload =
+          [ "${wallpaper}" ];
+
+        wallpaper = [
+          ",${wallpaper}"
+        ];
+      };
+    };
+
+    gtk = {
+      enable = true;
+      theme = {
+        name = "Juno";
+        package = pkgs.juno-theme;
+      };
+      iconTheme = {
+        name = "Qogir";
+        package = pkgs.qogir-icon-theme;
+      };
+      cursorTheme = {
+        package = pkgs.vanilla-dmz;
+        name = "Vanilla-DMZ";
+      };
+      gtk3.extraConfig = {
+        gtk-application-prefer-dark-theme = 1;
+      };
+      gtk4.extraConfig = {
+        gtk-application-prefer-dark-theme = 1;
+      };
+    };
+
+    qt = {
+      enable = true;
+      style = {
+        name = "juno";
+        package = pkgs.juno-theme;
+      };
+      platformTheme.name = "gtk";
+    };
+
+    xdg.portal = {
+      enable = true;
+      extraPortals = with pkgs; [
+        xdg-desktop-portal-hyprland
+      ];
+      config.common.default = "*";
+    };
+
+    programs = {
+      imv.enable = true;
+      mpv.enable = true;
+      zathura.enable = true;
+    };
+
+    fonts.fontconfig.enable = true;
+
+    # Auto-start Hyprland on tty1
+    programs.bash.profileExtra = ''
+      if [ -z "$DISPLAY" ] && [ "$(tty)" = "/dev/tty1" ]; then
+        exec Hyprland
+      fi
+    '';
+  };
+}
--- a/user/modules/gui/wm/sway/config/rofi/config/config.rasi
+++ b/user/modules/gui/wm/sway/config/rofi/config/config.rasi
@ -0,0 +1,7 @@
+configuration {
+  font: "SF Pro Rounded 10";
+  show-icons: true;
+  kb-cancel: "Escape,Alt+F1";
+}
+
+@theme "~/.config/rofi/material-ocean.rasi"
--- a/user/modules/gui/wm/sway/config/rofi/config/material-ocean.rasi
+++ b/user/modules/gui/wm/sway/config/rofi/config/material-ocean.rasi
@ -0,0 +1,95 @@
+* {
+  background: #0f111a;
+  foreground: #f1f1f1;
+  selected: #ff4151;
+}
+
+window {
+  transparency: "real";
+  background-color: @background;
+  text-color: @foreground;
+}
+
+prompt {
+  enabled: true;
+  padding: 4px 4px 6px 6px;
+  background-color: @background;
+  text-color: @foreground;
+}
+
+textbox-prompt-colon {
+  expand: false;
+  background-color: @background;
+  padding: 4px 0px 0px 6px;
+}
+
+inputbar {
+  children: [ textbox-prompt-colon, entry ];
+  background-color: @background;
+  text-color: @foreground;
+  expand: false;
+  border: 0px 0px 0px 0px;
+  border-radius: 0px;
+  border-color: @selected;
+  margin: 0px 0px 0px 0px;
+  padding: 0px 0px 4px 0px;
+  position: center;
+}
+
+entry {
+  background-color: @background;
+  text-color: @foreground;
+  placeholder-color: @foreground;
+  expand: true;
+  horizontal-align: 0;
+  blink: true;
+  padding: 4px 0px 0px 4px;
+}
+
+case-indicator {
+  background-color: @background;
+  text-color: @foreground;
+  spacing: 0;
+}
+
+listview {
+  background-color: @background;
+  columns: 1;
+  spacing: 5px;
+  cycle: true;
+  dynamic: true;
+  layout: vertical;
+}
+
+mainbox {
+  background-color: @background;
+  children: [ inputbar, listview ];
+  spacing: 5px;
+  padding: 5px 5px 5px 5px;
+}
+
+element {
+  background-color: @background;
+  text-color: @foreground;
+  orientation: horizontal;
+  border-radius: 4px;
+  padding: 6px 6px 6px 6px;
+}
+
+element-text, element-icon {
+    background-color: inherit;
+    text-color: inherit;
+}
+
+element-icon {
+  size: 18px;
+  border: 4px;
+}
+
+element selected {
+  background-color: @selected;
+  text-color: @background;
+  border: 0px;
+  border-radius: 0px;
+  border-color: @selected;
+}
--- a/user/modules/gui/wm/sway/config/rofi/default.nix
+++ b/user/modules/gui/wm/sway/config/rofi/default.nix
@ -0,0 +1,183 @@
+{ pkgs, config, ... }:
+let
+  inherit (config.lib.formats.rasi) mkLiteral;
+
+in
+{
+  enable = true;
+  package = pkgs.rofi;
+  location = "center";
+  terminal = "\${pkgs.alacritty}/bin/alacritty";
+  plugins = with pkgs; [
+    rofi-emoji
+  ];
+
+  #theme = {
+  #  "*" = {
+  #    nord0 = mkLiteral "#2e3440";
+  #    nord1 = mkLiteral "#3b4252";
+  #    nord2 = mkLiteral "#434c5e";
+  #    nord3 = mkLiteral "#4c566a";
+  #    nord4 = mkLiteral "#d8dee9";
+  #    nord5 = mkLiteral "#e5e9f0";
+  #    nord6 = mkLiteral "#eceff4";
+  #    nord7 = mkLiteral "#8fbcbb";
+  #    nord8 = mkLiteral "#88c0d0";
+  #    nord9 = mkLiteral "#81a1c1";
+  #    nord10 = mkLiteral "#5e81ac";
+  #    nord11 = mkLiteral "#bf616a";
+  #    nord12 = mkLiteral "#d08770";
+  #    nord13 = mkLiteral "#ebcb8b";
+  #    nord14 = mkLiteral "#a3be8c";
+  #    nord15 = mkLiteral "#b48ead";
+  #    spacing = 2;
+  #    background-color = mkLiteral "var(nord1)";
+  #    background = mkLiteral "var(nord1)";
+  #    foreground = mkLiteral "var(nord4)";
+  #    normal-background = mkLiteral "var(background)";
+  #    normal-foreground = mkLiteral "var(foreground)";
+  #    alternate-normal-background = mkLiteral "var(background)";
+  #    alternate-normal-foreground = mkLiteral "var(foreground)";
+  #    selected-normal-background = mkLiteral "var(nord8)";
+  #    selected-normal-foreground = mkLiteral "var(background)";
+  #    active-background = mkLiteral "var(background)";
+  #    active-foreground = mkLiteral "var(nord10)";
+  #    alternate-active-background = mkLiteral "var(background)";
+  #    alternate-active-foreground = mkLiteral "var(nord10)";
+  #    selected-active-background = mkLiteral "var(nord10)";
+  #    selected-active-foreground = mkLiteral "var(background)";
+  #    urgent-background = mkLiteral "var(background)";
+  #    urgent-foreground = mkLiteral "var(nord11)";
+  #    alternate-urgent-background = mkLiteral "var(background)";
+  #    alternate-urgent-foreground = mkLiteral "var(nord11)";
+  #    selected-urgent-background = mkLiteral "var(nord11)";
+  #    selected-urgent-foreground = mkLiteral "var(background)";
+  #  };
+  #  
+  #  element = {
+  #    padding = mkLiteral "0px 0px 0px 7px";
+  #    spacing = mkLiteral "5px";
+  #    border = 0;
+  #    cursor = mkLiteral "pointer";
+  #  };
+
+  #  "element normal.normal" = {
+  #    background-color = mkLiteral "var(normal-background)";
+  #    text-color = mkLiteral "var(normal-foreground)";
+  #  };
+
+  #  "element normal.urgent" = {
+  #    background-color = mkLiteral "var(urgent-background)";
+  #    text-color = mkLiteral "var(urgent-foreground)";
+  #  };
+
+  #  "element normal.active" = {
+  #    background-color = mkLiteral "var(active-background)";
+  #    text-color = mkLiteral "var(active-foreground)";
+  #  };
+
+  #  "element selected.normal" = {
+  #    background-color = mkLiteral "var(selected-normal-background)";
+  #    text-color = mkLiteral "var(selected-normal-foreground)";
+  #  };
+
+  #  "element selected.urgent" = {
+  #    background-color = mkLiteral "var(selected-urgent-background)";
+  #    text-color = mkLiteral "var(selected-urgent-foreground)";
+  #  };
+
+  #  "element selected.active" = {
+  #    background-color = mkLiteral "var(selected-active-background)";
+  #    text-color = mkLiteral "var(selected-active-foreground)";
+  #  };
+
+  #  "element alternate.normal" = {
+  #    background-color = mkLiteral "var(alternate-normal-background)";
+  #    text-color = mkLiteral "var(alternate-normal-foreground)";
+  #  };
+
+  #  "element alternate.urgent" = {
+  #    background-color = mkLiteral "var(alternate-urgent-background)";
+  #    text-color = mkLiteral "var(alternate-urgent-foreground)";
+  #  };
+
+  #  "element alternate.active" = {
+  #    background-color = mkLiteral "var(alternate-active-background)";
+  #    text-color = mkLiteral "var(alternate-active-foreground)";
+  #  };
+
+  #  "element-text" = {
+  #    background-color = mkLiteral "rgba(0, 0, 0, 0%)";
+  #    text-color = mkLiteral "inherit";
+  #    highlight = mkLiteral "inherit";
+  #    cursor = mkLiteral "inherit";
+  #  };
+
+  #  "element-icon" = {
+  #    background-color = mkLiteral "rgba(0, 0, 0, 0%)";
+  #    size = mkLiteral "1.0000em";
+  #    text-color = mkLiteral "inherit";
+  #    cursor = mkLiteral "inherit";
+  #  };
+
+  #  window = {
+  #    padding = 0;
+  #    border = 0;
+  #    background-color = mkLiteral "var(background)";
+  #  };
+
+  #  mainbox = {
+  #    padding = 0;
+  #    border = 0;
+  #  };
+
+  #  message = {
+  #    margin = mkLiteral "0px 7px";
+  #  };
+
+  #  textbox = {
+  #    text-color = mkLiteral "var(foreground)";
+  #  };
+
+  #  listview = {
+  #    margin = mkLiteral "0px 0px 5px";
+  #    scrollbar = true;
+  #    spacing = mkLiteral "2px";
+  #    fixed-height = 0;
+  #  };
+
+  #  scrollbar = {
+  #    padding = 0;
+  #    handle-width = mkLiteral "14px";
+  #    border = 0;
+  #    handle-color = mkLiteral "var(nord3)";
+  #  };
+
+  #  button = {
+  #    spacing = 0;
+  #    text-color = mkLiteral "var(normal-foreground)";
+  #    cursor = mkLiteral "pointer";
+  #  };
+
+  #  "button selected" = {
+  #    background-color = mkLiteral "var(selected-normal-background)";
+  #    text-color = mkLiteral "var(selected-normal-foreground)";
+  #  };
+
+  #  inputbar = {
+  #    padding = mkLiteral "7px";
+  #    margin = mkLiteral "7px";
+  #    spacing = 0;
+  #    text-color = mkLiteral "var(normal-foreground)";
+  #    background-color = mkLiteral "var(nord3)";
+  #    children = [ "entry" ];
+  #  };
+
+  #  entry = {
+  #    spacing = 0;
+  #    cursor = mkLiteral "text";
+  #    text-color = mkLiteral "var(normal-foreground)";
+  #    background-color = mkLiteral "var(nord3)";
+  #  };
+  #};
+}
--- a/user/modules/gui/wm/sway/default.nix
+++ b/user/modules/gui/wm/sway/default.nix
@ -0,0 +1,184 @@
+{ pkgs, lib, config, monitors ? [], ... }:
+
+with lib;
+let
+  cfg = config.modules.user.gui.wm.sway;
+  modifier = config.wayland.windowManager.sway.config.modifier;
+
+  wallpaper = builtins.fetchurl {
+    url = "https://images6.alphacoders.com/117/1174033.png";
+    sha256 = "1ph5m9s57076jx6042iipqx2ifzadmd5z4lf5l49wgq4jb92mp16";
+  };
+
+  barStatus = pkgs.writeShellScript "status.sh" ''
+    #!/usr/bin/env bash
+    while :; do
+      echo "$(ip -4 addr show eno1 | awk '/inet / {print $2}' | cut -d'/' -f1) | $(free -h | awk '/^Mem/ {print $3}') | $(date +'%I:%M:%S %p') | $(date +'%m-%d-%Y')"; sleep 1;
+    done
+  '';
+
+  toSwayOutput = m: {
+    "${m.name}" = {
+      resolution = "${toString m.width}x${toString m.height}@${toString m.refreshRate}Hz";
+      position = "${toString m.x} ${toString m.y}";
+      scale = toString m.scale;
+      bg = "${wallpaper} fill";
+    };
+  };
+
+  outputConfig = if monitors != []
+    then lib.mkMerge (map toSwayOutput monitors)
+    else {
+      "*" = { bg = "${wallpaper} fill"; };
+    };
+
+in
+{ options.modules.user.gui.wm.sway = { enable = mkEnableOption "Enable Sway WM"; };
+  config = mkIf cfg.enable {
+    wayland.windowManager.sway = {
+      enable = true;
+      xwayland = true;
+      wrapperFeatures.gtk = true;
+
+      extraSessionCommands = ''
+        export _JAVA_AWT_WM_NONREPARENTING=1
+        export GTK_THEME=Adwaita-Dark
+      '';
+
+      config = {
+        defaultWorkspace = "workspace number 1";
+
+        fonts = {
+          names = [ "Terminus" ];
+        };
+
+        output = outputConfig;
+        modifier = "Mod1";
+        menu = "rofi -show drun -show-icons -drun-icon-theme Qogir -font 'Noto Sans 14'";
+        terminal = "${pkgs.alacritty}/bin/alacritty";
+
+        input = {
+          keyboard = {
+            xkb_numlock = "enabled";
+            xkb_layout = "us";
+          };
+          pointer = {
+            accel_profile = "flat";
+            pointer_accel = "0.65";
+          };
+        };
+
+        bars = [
+          {
+            position = "top";
+            statusCommand = "${barStatus}";
+            fonts = {
+              names = [ "Terminus" ];
+              size = 12.0;
+            };
+            colors = {
+              background = "#0A0E14";
+              statusline = "#FFFFFF";
+            };
+          }
+        ];
+
+        gaps = {
+          smartGaps = false;
+          inner = 10;
+        };
+
+        floating = {
+          titlebar = false;
+          border = 0;
+          criteria = [
+            {
+              title = "Android Emulator";
+            }
+          ];
+        };
+
+        window = {
+          titlebar = false;
+          border= 0;
+        };
+
+        keybindings = lib.mkOptionDefault {
+          "${modifier}+q" = "kill";
+          "Print" = "exec grim ~/Pictures/screenshot-$(date +'%Y%m%d-%H%M%S').png";
+          "${modifier}+Shift+Print" = "exec grim -g \"$(slurp)\" ~/Pictures/screenshot-$(date +'%Y%m%d-%H%M%S').png";
+          "${modifier}+Print" = ''exec sh -c 'grim -g "$(swaymsg -t get_tree | jq -j '"'"'.. | select(.type?) | select(.focused).rect | "\(.x),\(.y) \(.width)x\(.height)"'"'"')" ~/Pictures/screenshot-$(date +'%Y%m%d-%H%M%S').png' '';
+          "${modifier}+Shift+f" = "exec alacritty -e sh -c 'EDITOR=nvim ranger'";
+          "${modifier}+Shift+d" = "exec rofi -modi emoji -show emoji";
+        };
+      };
+
+      extraConfig = ''
+        exec_always ${pkgs.autotiling}/bin/autotiling -sr "1.61"
+      '';
+    };
+
+    programs.rofi = import ./config/rofi { inherit pkgs config lib; };
+
+    home.file.".config/rofi" = {
+      source = ./config/rofi/config;
+      recursive = true;
+    };
+    
+    xdg = {
+      portal = {
+        enable = true;
+        extraPortals = with pkgs; [
+          xdg-desktop-portal-wlr
+        ];
+        config.common.default = "*";
+      };
+    };
+
+    #gtk = {
+    #  enable = true;
+    #  theme.package = pkgs.juno-theme;
+    #  theme.name = "Juno-ocean";
+    #  iconTheme.package = pkgs.qogir-icon-theme;
+    #  iconTheme.name = "Qogir";
+    #};
+
+    qt = {
+      enable = true;
+      style.package = pkgs.juno-theme;
+      platformTheme.name = "gtk";
+    };
+
+    home.packages = with pkgs; [
+      pavucontrol
+      xdg-utils
+      wl-clipboard
+      autotiling
+
+      grim
+      jq
+      slurp
+
+      ranger
+      highlight
+
+      nerd-fonts.terminess-ttf
+      noto-fonts
+      noto-fonts-cjk-sans
+      noto-fonts-color-emoji
+    ];
+
+    programs = {
+      imv.enable = true;
+    };
+
+    fonts.fontconfig.enable = true;
+
+    # Auto-start sway on tty1
+    programs.bash.profileExtra = ''
+      if [ -z "$DISPLAY" ] && [ "$(tty)" = "/dev/tty1" ]; then
+        exec sway
+      fi
+    '';
+  };
+}
--- a/user/modules/neovim/.luarc.json
+++ b/user/modules/neovim/.luarc.json
@ -0,0 +1,5 @@
+{
+    "diagnostics.disable": [
+        "missing-fields"
+    ]
+}
--- a/user/modules/neovim/default.nix
+++ b/user/modules/neovim/default.nix
@ -0,0 +1,23 @@
+{ pkgs, lib, config, ... }:
+
+with lib;
+let
+  cfg = config.modules.user.neovim;
+
+in
+{ options.modules.user.neovim = { enable = mkEnableOption "user.neovim"; };
+  config = mkIf cfg.enable {
+    programs.neovim = {
+      enable = true;
+      defaultEditor = true;
+      vimAlias = true;
+      vimdiffAlias = true;
+      extraPackages = import ./pkgs.nix { inherit pkgs; };
+    };
+
+    home.file.".config/nvim" = {
+      source = ./nvim;
+      recursive = true;
+    };
+  };
+}
--- a/user/modules/neovim/nvim
+++ b/user/modules/neovim/nvim
@ -0,0 +1 @@
+Subproject commit c341ac8840e8a19ab98bcc5084f51157ddaf8730
--- a/user/modules/neovim/pkgs.nix
+++ b/user/modules/neovim/pkgs.nix
@ -0,0 +1,24 @@
+{ pkgs, ... }:
+
+let
+  # Essential LSPs for config files (project-specific LSPs go in devShells)
+  lsp = with pkgs; [
+    nixd
+    lua-language-server
+    marksman
+    taplo
+  ];
+
+  lsp' = with pkgs.nodePackages; [
+    vscode-langservers-extracted  # jsonls, html, cssls
+    bash-language-server
+    yaml-language-server
+  ];
+
+  extraPackages = with pkgs; [
+    lazygit
+    gcc
+  ];
+
+in
+  extraPackages ++ lsp ++ lsp'
--- a/user/modules/security/gpg/default.nix
+++ b/user/modules/security/gpg/default.nix
@ -0,0 +1,50 @@
+{ pkgs, lib, config, osConfig, ... }:
+
+with lib;
+let
+  cfg = config.modules.user.security.gpg;
+  wm = config.modules.user.gui.wm;
+  gui = {
+    enable = builtins.any (mod: mod.enable or false) (builtins.attrValues wm);
+  };
+
+in
+{ options.modules.user.security.gpg = { enable = mkEnableOption "Enable GPG module"; };
+  config = mkIf cfg.enable {
+    programs.gpg = {
+      enable = true;
+      # Use pcscd instead of direct CCID access (avoids conflicts with age-plugin-yubikey)
+      scdaemonSettings = mkIf osConfig.services.pcscd.enable {
+        disable-ccid = true;
+      };
+      publicKeys = [
+        {
+          text = "${config.user.keys.pgp.yubikey}";
+          trust = 5;
+        }
+      ] ++ optionals (osConfig.networking.hostName == "workstation") [
+        {
+          text = "${config.user.keys.pgp.work}";
+          trust = 5;
+        }
+        {
+          text = "${config.user.keys.pgp.ccur}";
+          trust = 5;
+        }
+      ];
+    };
+
+    services.gpg-agent = {
+      enable = true;
+      enableSshSupport = true;
+      enableBashIntegration = true;
+      enableScDaemon = true;
+
+      pinentry.package =
+      if gui.enable then
+        pkgs.pinentry-gnome3
+      else
+        pkgs.pinentry-tty;
+    };
+  };
+}
--- a/user/modules/security/yubikey/default.nix
+++ b/user/modules/security/yubikey/default.nix
@ -0,0 +1,16 @@
+{ pkgs, lib, config, ... }:
+
+with lib;
+let
+  cfg = config.modules.user.security.yubikey;
+
+in
+{ options.modules.user.security.yubikey = { enable = mkEnableOption "Enable Yubikey support"; };
+  config = mkIf cfg.enable {
+    home.packages = with pkgs; [
+      yubikey-manager
+      age-plugin-yubikey
+      yubico-piv-tool
+    ];
+  };
+}
--- a/user/modules/tmux/config/tmux.nix
+++ b/user/modules/tmux/config/tmux.nix
@ -0,0 +1,44 @@
+''
+bind -n M-C source-file ~/.config/tmux/tmux.conf
+
+# Navigation (matches hyprland Alt+hjkl)
+bind-key -n M-h select-pane -L
+bind-key -n M-j select-pane -D
+bind-key -n M-k select-pane -U
+bind-key -n M-l select-pane -R
+
+# Move/swap pane (matches hyprland Alt+Shift+hjkl)
+bind-key -n M-H swap-pane -s '{left-of}'
+bind-key -n M-J swap-pane -s '{down-of}'
+bind-key -n M-K swap-pane -s '{up-of}'
+bind-key -n M-L swap-pane -s '{right-of}'
+
+# Actions
+bind-key -n M-q kill-pane
+bind-key -n M-Return split-window -c "#{pane_current_path}"
+bind-key -n M-f resize-pane -Z
+
+# Windows (like workspaces)
+bind-key -n M-1 select-window -t 1
+bind-key -n M-2 select-window -t 2
+bind-key -n M-3 select-window -t 3
+bind-key -n M-4 select-window -t 4
+bind-key -n M-5 select-window -t 5
+bind-key -n M-6 select-window -t 6
+bind-key -n M-7 select-window -t 7
+bind-key -n M-8 select-window -t 8
+bind-key -n M-9 select-window -t 9
+bind-key -n M-0 select-window -t 10
+
+# Move pane to window (like move to workspace)
+bind-key -n M-! join-pane -t :1
+bind-key -n M-@ join-pane -t :2
+bind-key -n M-'#' join-pane -t :3
+bind-key -n M-'$' join-pane -t :4
+bind-key -n M-% join-pane -t :5
+bind-key -n M-^ join-pane -t :6
+bind-key -n M-& join-pane -t :7
+bind-key -n M-* join-pane -t :8
+bind-key -n M-( join-pane -t :9
+bind-key -n M-) join-pane -t :10
+''
--- a/user/modules/tmux/default.nix
+++ b/user/modules/tmux/default.nix
@ -0,0 +1,44 @@
+{ pkgs, lib, config, ... }:
+
+with lib;
+let
+  cfg = config.modules.user.tmux;
+  gui = config.modules.user.gui.wm;
+
+  wm = {
+    enable = builtins.any (mod: mod.enable or false) (builtins.attrValues gui);
+  };
+
+in
+{ options.modules.user.tmux = { enable = mkEnableOption "Enable tmux module"; };
+  config = mkIf cfg.enable {
+    programs.tmux = {
+      enable = true;
+      newSession = true;
+      disableConfirmationPrompt = true;
+      keyMode = "vi";
+      mouse = if wm.enable then true else false;
+
+      prefix = "M";
+      #shell = "\${pkgs.bash}/bin/bash";
+
+      plugins = with pkgs.tmuxPlugins; [
+        {
+          plugin = tilish;
+          extraConfig = ''
+            set -g @tilish-default 'tiled'
+          '';
+        }
+      ];
+
+      extraConfig = import ./config/tmux.nix;
+    };
+
+    # Auto-start tmux only on local TTY (not SSH, not in tmux already)
+    programs.bash.profileExtra = mkIf (!wm.enable) ''
+      if [ -t 0 ] && [[ $- == *i* ]] && [ -z "$DISPLAY" ] && [ -z "$TMUX" ] && [ -z "$SSH_TTY" ] && [ -z "$SSH_CONNECTION" ]; then
+        exec tmux
+      fi
+    '';
+  };
+}
--- a/user/modules/utils/dev/default.nix
+++ b/user/modules/utils/dev/default.nix
@ -0,0 +1,56 @@
+{ pkgs, lib, config, osConfig, ... }:
+
+with lib;
+let
+  cfg = config.modules.user.utils.dev;
+
+in
+{ options.modules.user.utils.dev = { enable = mkEnableOption "user.utils.dev"; };
+  config = mkIf cfg.enable {
+    home.packages = with pkgs; [
+      claude-code
+
+      nix-init
+      nix-prefetch-git
+      nurl
+
+      pkg-config
+      qrencode
+
+      docker
+
+      # Network/system tools
+      fping
+      wireguard-tools
+      pciutils
+      lshw
+    ] ++ optionals (osConfig.virtualisation.libvirtd.enable) [
+      virt-manager
+    ];
+
+    programs = {
+      #bash = {
+      #  initExtra = import ./config/penpot.nix;
+      #};
+      direnv = {
+        enable = true;
+        enableBashIntegration = true;
+        nix-direnv.enable = true;
+      };
+    };
+
+    home = {
+      sessionVariables = {
+        DIRENV_LOG_FORMAT = "";
+      };
+
+      # Workaround for direnv_log bug 
+      # https://github.com/direnv/direnv/issues/1418#issuecomment-2820125413
+      file.".config/direnv/direnv.toml" = {
+        enable = true;
+        force = true;
+        text = "";
+      };
+    };
+  };
+}
--- a/user/modules/utils/email/config/aerc.conf
+++ b/user/modules/utils/email/config/aerc.conf
@ -0,0 +1,561 @@
+#
+# aerc main configuration
+
+[general]
+#
+# Used as a default path for save operations if no other path is specified.
+# ~ is expanded to the current user home dir.
+#
+#default-save-path=
+
+# If set to "gpg", aerc will use system gpg binary and keystore for all crypto
+# operations. If set to "internal", the internal openpgp keyring will be used.
+# If set to "auto", the system gpg will be preferred unless the internal
+# keyring already exists, in which case the latter will be used.
+#
+# Default: auto
+pgp-provider=auto
+
+# By default, the file permissions of accounts.conf must be restrictive and
+# only allow reading by the file owner (0600). Set this option to true to
+# ignore this permission check. Use this with care as it may expose your
+# credentials.
+#
+# Default: false
+#unsafe-accounts-conf=false
+
+# Output log messages to specified file. A path starting with ~/ is expanded to
+# the user home dir. When redirecting aerc's output to a file using > shell
+# redirection, this setting is ignored and log messages are printed to stdout.
+#
+#log-file=
+
+# Only log messages above the specified level to log-file. Supported levels
+# are: trace, debug, info, warn and error. When redirecting aerc's output to
+# a file using > shell redirection, this setting is ignored and the log level
+# is forced to trace.
+#
+# Default: info
+#log-level=info
+
+# Set the $TERM environment variable used for the embedded terminal.
+#
+# Default: xterm-256color
+term=xterm-256color
+
+# Display OSC8 strings in the embedded terminal
+#
+# Default: false
+#enable-osc8=false
+
+[ui]
+#
+# Describes the format for each row in a mailbox view. This is a comma
+# separated list of column names with an optional align and width suffix. After
+# the column name, one of the '<' (left), ':' (center) or '>' (right) alignment
+# characters can be added (by default, left) followed by an optional width
+# specifier. The width is either an integer representing a fixed number of
+# characters, or a percentage between 1% and 99% representing a fraction of the
+# terminal width. It can also be one of the '*' (auto) or '=' (fit) special
+# width specifiers. Auto width columns will be equally attributed the remaining
+# terminal width. Fit width columns take the width of their contents. If no
+# width specifier is set, '*' is used by default.
+#
+# Default: date<20,name<17,flags>4,subject<*
+#index-columns=date<20,name<17,flags>4,subject<*
+
+#
+# Each name in index-columns must have a corresponding column-$name setting.
+# All column-$name settings accept golang text/template syntax. See
+# aerc-templates(7) for available template attributes and functions.
+#
+# Default settings
+#column-date={{.DateAutoFormat .Date.Local}}
+#column-name={{index (.From | names) 0}}
+#column-flags={{.Flags | join ""}}
+#column-subject={{.ThreadPrefix}}{{.Subject}}
+
+#
+# String separator inserted between columns. When the column width specifier is
+# an exact number of characters, the separator is added to it (i.e. the exact
+# width will be fully available for the column contents).
+#
+# Default: "  "
+#column-separator="  "
+
+#
+# See time.Time#Format at https://godoc.org/time#Time.Format
+#
+# Default: 2006-01-02 03:04 PM (ISO 8601 + 12 hour time)
+#timestamp-format=2006-01-02 03:04 PM
+
+#
+# Index-only time format for messages that were received/sent today.
+# If this is not specified, timestamp-format is used instead.
+#
+#this-day-time-format=
+
+#
+# Index-only time format for messages that were received/sent within the last
+# 7 days. If this is not specified, timestamp-format is used instead.
+#
+#this-week-time-format=
+
+#
+# Index-only time format for messages that were received/sent this year.
+# If this is not specified, timestamp-format is used instead.
+#
+#this-year-time-format=
+
+#
+# Width of the sidebar, including the border.
+#
+# Default: 20
+#sidebar-width=20
+
+#
+# Message to display when viewing an empty folder.
+#
+# Default: (no messages)
+#empty-message=(no messages)
+
+# Message to display when no folders exists or are all filtered
+#
+# Default: (no folders)
+#empty-dirlist=(no folders)
+
+# Enable mouse events in the ui, e.g. clicking and scrolling with the mousewheel
+#
+# Default: false
+#mouse-enabled=false
+
+#
+# Ring the bell when new messages are received
+#
+# Default: true
+#new-message-bell=true
+
+#
+# Template to use for Account tab titles
+#
+# Default: {{.Account}}
+#tab-title-account={{.Account}}
+
+# Marker to show before a pinned tab's name.
+#
+# Default: `
+#pinned-tab-marker='`'
+
+# Template for the left side of the directory list.
+# See aerc-templates(7) for all available fields and functions.
+#
+# Default: {{.Folder}}
+#dirlist-left={{.Folder}}
+
+# Template for the right side of the directory list.
+# See aerc-templates(7) for all available fields and functions.
+#
+# Default: {{if .Unread}}{{humanReadable .Unread}}/{{end}}{{if .Exists}}{{humanReadable .Exists}}{{end}}
+#dirlist-right={{if .Unread}}{{humanReadable .Unread}}/{{end}}{{if .Exists}}{{humanReadable .Exists}}{{end}}
+
+# Delay after which the messages are actually listed when entering a directory.
+# This avoids loading messages when skipping over folders and makes the UI more
+# responsive. If you do not want that, set it to 0s.
+#
+# Default: 200ms
+#dirlist-delay=200ms
+
+# Display the directory list as a foldable tree that allows to collapse and
+# expand the folders.
+#
+# Default: false
+#dirlist-tree=false
+
+# If dirlist-tree is enabled, set level at which folders are collapsed by
+# default. Set to 0 to disable.
+#
+# Default: 0
+#dirlist-collapse=0
+
+# List of space-separated criteria to sort the messages by, see *sort*
+# command in *aerc*(1) for reference. Prefixing a criterion with "-r "
+# reverses that criterion.
+#
+# Example: "from -r date"
+#
+#sort=
+
+# Moves to next message when the current message is deleted
+#
+# Default: true
+#next-message-on-delete=true
+
+# Automatically set the "seen" flag when a message is opened in the message
+# viewer.
+#
+# Default: true
+#auto-mark-read=true
+
+# The directories where the stylesets are stored. It takes a colon-separated
+# list of directories. If this is unset or if a styleset cannot be found, the
+# following paths will be used as a fallback in that order:
+#
+#   ${XDG_CONFIG_HOME:-~/.config}/aerc/stylesets
+#   ${XDG_DATA_HOME:-~/.local/share}/aerc/stylesets
+#   /nix/store/jzlsc52f1zsczi5rmjrbff45i7ng3cph-aerc-0.15.2/share/aerc/stylesets
+#
+#stylesets-dirs=
+
+# Uncomment to use box-drawing characters for vertical and horizontal borders.
+#
+# Default: " "
+#border-char-vertical=" "
+#border-char-horizontal=" "
+
+# Sets the styleset to use for the aerc ui elements.
+#
+# Default: default
+#styleset-name=default
+
+# Activates fuzzy search in commands and their arguments: the typed string is
+# searched in the command or option in any position, and need not be
+# consecutive characters in the command or option.
+#
+# Default: false
+#fuzzy-complete=false
+
+# How long to wait after the last input before auto-completion is triggered.
+#
+# Default: 250ms
+#completion-delay=250ms
+
+# The minimum required characters to allow auto-completion to be triggered after
+# completion-delay.
+#
+# Default: 1
+#completion-min-chars=1
+
+#
+# Global switch for completion popovers
+#
+# Default: true
+#completion-popovers=true
+
+# Uncomment to use UTF-8 symbols to indicate PGP status of messages
+#
+# Default: ASCII
+#icon-unencrypted=
+#icon-encrypted=✔
+#icon-signed=✔
+#icon-signed-encrypted=✔
+#icon-unknown=✘
+#icon-invalid=⚠
+
+# Reverses the order of the message list. By default, the message list is
+# ordered with the newest (highest UID) message on top. Reversing the order
+# will put the oldest (lowest UID) message on top. This can be useful in cases
+# where the backend does not support sorting.
+#
+# Default: false
+#reverse-msglist-order = false
+
+# Reverse display of the mesage threads. Default order is the the intial
+# message is on the top with all the replies being displayed below. The
+# reverse option will put the initial message at the bottom with the
+# replies on top.
+#
+# Default: false
+#reverse-thread-order=false
+
+# Sort the thread siblings according to the sort criteria for the messages. If
+# sort-thread-siblings is false, the thread siblings will be sorted based on
+# the message UID in ascending order. This option is only applicable for
+# client-side threading with a backend that enables sorting. Note that there's
+# a performance impact when sorting is activated.
+#
+# Default: false
+#sort-thread-siblings=false
+
+#[ui:account=foo]
+#
+# Enable a threaded view of messages. If this is not supported by the backend
+# (IMAP server or notmuch), threads will be built by the client.
+#
+# Default: false
+#threading-enabled=false
+
+# Force client-side thread building
+#
+# Default: false
+#force-client-threads=false
+
+# Debounce client-side thread building
+#
+# Default: 50ms
+#client-threads-delay=50ms
+
+[statusline]
+#
+# Describes the format for the status line. This is a comma separated list of
+# column names with an optional align and width suffix. See [ui].index-columns
+# for more details. To completely mute the status line except for push
+# notifications, explicitly set status-columns to an empty string.
+#
+# Default: left<*,center:=,right>*
+#status-columns=left<*,center:=,right>*
+
+#
+# Each name in status-columns must have a corresponding column-$name setting.
+# All column-$name settings accept golang text/template syntax. See
+# aerc-templates(7) for available template attributes and functions.
+#
+# Default settings
+#column-left=[{{.Account}}] {{.StatusInfo}}
+#column-center={{.PendingKeys}}
+#column-right={{.TrayInfo}}
+
+#
+# String separator inserted between columns.
+# See [ui].column-separator for more details.
+#
+#column-separator=" "
+
+# Specifies the separator between grouped statusline elements.
+#
+# Default: " | "
+#separator=" | "
+
+# Defines the mode for displaying the status elements.
+# Options: text, icon
+#
+# Default: text
+#display-mode=text
+
+[viewer]
+#
+# Specifies the pager to use when displaying emails. Note that some filters
+# may add ANSI codes to add color to rendered emails, so you may want to use a
+# pager which supports ANSI codes.
+#
+# Default: less -R
+#pager=less -R
+
+#
+# If an email offers several versions (multipart), you can configure which
+# mimetype to prefer. For example, this can be used to prefer plaintext over
+# html emails.
+#
+# Default: text/plain,text/html
+#alternatives=text/plain,text/html
+
+#
+# Default setting to determine whether to show full headers or only parsed
+# ones in message viewer.
+#
+# Default: false
+#show-headers=false
+
+#
+# Layout of headers when viewing a message. To display multiple headers in the
+# same row, separate them with a pipe, e.g. "From|To". Rows will be hidden if
+# none of their specified headers are present in the message.
+#
+# Default: From|To,Cc|Bcc,Date,Subject
+#header-layout=From|To,Cc|Bcc,Date,Subject
+
+# Whether to always show the mimetype of an email, even when it is just a single part
+#
+# Default: false
+#always-show-mime=false
+
+# Parses and extracts http links when viewing a message. Links can then be
+# accessed with the open-link command.
+#
+# Default: true
+#parse-http-links=true
+
+[compose]
+#
+# Specifies the command to run the editor with. It will be shown in an embedded
+# terminal, though it may also launch a graphical window if the environment
+# supports it. Defaults to $EDITOR, or vi.
+#editor=
+
+#
+# Default header fields to display when composing a message. To display
+# multiple headers in the same row, separate them with a pipe, e.g. "To|From".
+#
+# Default: To|From,Subject
+#header-layout=To|From,Subject
+
+#
+# Specifies the command to be used to tab-complete email addresses. Any
+# occurrence of "%s" in the address-book-cmd will be replaced with what the
+# user has typed so far.
+#
+# The command must output the completions to standard output, one completion
+# per line. Each line must be tab-delimited, with an email address occurring as
+# the first field. Only the email address field is required. The second field,
+# if present, will be treated as the contact name. Additional fields are
+# ignored.
+#
+# This parameter can also be set per account in accounts.conf.
+#address-book-cmd=
+
+# Specifies the command to be used to select attachments. Any occurence of '%s'
+# in the file-picker-cmd will be replaced the argument <arg> to :attach -m
+# <arg>.
+#
+# The command must output the selected files to standard output, one file per
+# line.
+#file-picker-cmd=
+
+#
+# Allow to address yourself when replying
+#
+# Default: true
+#reply-to-self=true
+
+#
+# Warn before sending an email that matches the specified regexp but does not
+# have any attachments. Leave empty to disable this feature.
+#
+# Uses Go's regexp syntax, documented at https://golang.org/s/re2syntax. The
+# "(?im)" flags are set by default (case-insensitive and multi-line).
+#
+# Example:
+# no-attachment-warning=^[^>]*attach(ed|ment)
+#
+#no-attachment-warning=
+
+#
+# When set, aerc will generate "format=flowed" bodies with a content type of
+# "text/plain; format=flowed" as described in RFC3676. This format is easier to
+# handle for some mailing software, and generally just looks like ordinary
+# text. To actually make use of this format's features, you'll need support in
+# your editor.
+#
+#format-flowed=false
+
+[multipart-converters]
+#
+# Converters allow to generate multipart/alternative messages by converting the
+# main text/plain part into any other MIME type. Only exact MIME types are
+# accepted. The commands are invoked with sh -c and are expected to output
+# valid UTF-8 text.
+#
+# Example (obviously, this requires that you write your main text/plain body
+# using the markdown syntax):
+#text/html=pandoc -f markdown -t html --standalone
+
+[filters]
+#
+# Filters allow you to pipe an email body through a shell command to render
+# certain emails differently, e.g. highlighting them with ANSI escape codes.
+#
+# The commands are invoked with sh -c. The following folders are appended to
+# the system $PATH to allow referencing filters from their name only:
+#
+#   ${XDG_CONFIG_HOME:-~/.config}/aerc/filters
+#   ${XDG_DATA_HOME:-~/.local/share}/aerc/filters
+#   $PREFIX/share/aerc/filters
+#   /usr/share/aerc/filters
+#
+# The following variables are defined in the filter command environment:
+#
+#   AERC_MIME_TYPE      the part MIME type/subtype
+#   AERC_FORMAT         the part content type format= parameter
+#   AERC_FILENAME       the attachment filename (if any)
+#   AERC_SUBJECT        the message Subject header value
+#   AERC_FROM           the message From header value
+#
+# The first filter which matches the email's mimetype will be used, so order
+# them from most to least specific.
+#
+# You can also match on non-mimetypes, by prefixing with the header to match
+# against (non-case-sensitive) and a comma, e.g. subject,text will match a
+# subject which contains "text". Use header,~regex to match against a regex.
+#
+text/plain=colorize
+text/calendar=calendar
+message/delivery-status=colorize
+message/rfc822=colorize
+#text/html=pandoc -f html -t plain | colorize
+#text/html=html | colorize
+#text/*=bat -fP --file-name="$AERC_FILENAME"
+#application/x-sh=bat -fP -l sh
+#image/*=catimg -w $(tput cols) -
+#subject,~Git(hub|lab)=lolcat -f
+#from,thatguywhodoesnothardwraphismessages=wrap -w 100 | colorize
+
+# This special filter is only used to post-process email headers when
+# [viewer].show-headers=true
+# By default, headers are piped directly into the pager.
+#
+.headers=colorize
+
+[openers]
+#
+# Openers allow you to specify the command to use for the :open and :open-link
+# actions on a per-MIME-type basis. The :open-link URL scheme is used to
+# determine the MIME type as follows: x-scheme-handler/<scheme>.
+#
+# {} is expanded as the temporary filename to be opened. If it is not
+# encountered in the command, the temporary filename will be appened to the end
+# of the command.
+#
+# Like [filters], openers support basic shell globbing. The first opener which
+# matches the part's MIME type (or URL scheme handler MIME type) will be used,
+# so order them from most to least specific.
+#
+# Examples:
+# x-scheme-handler/irc=hexchat
+# x-scheme-handler/http*=firefox
+# text/html=surf -dfgms
+# text/plain=gvim {} +125
+# message/rfc822=thunderbird
+
+[hooks]
+#
+# Hooks are triggered whenever the associated event occurs.
+
+#
+# Executed when a new email arrives in the selected folder
+#mail-received=notify-send "New mail from $AERC_FROM_NAME" "$AERC_SUBJECT"
+
+#
+# Executed when aerc starts
+#aerc-startup=aerc :terminal calcurse && aerc :next-tab
+
+#
+# Executed when aerc shuts down.
+#aerc-shutdown=
+
+[templates]
+# Templates are used to populate email bodies automatically.
+#
+
+# The directories where the templates are stored. It takes a colon-separated
+# list of directories. If this is unset or if a template cannot be found, the
+# following paths will be used as a fallback in that order:
+#
+#   ${XDG_CONFIG_HOME:-~/.config}/aerc/templates
+#   ${XDG_DATA_HOME:-~/.local/share}/aerc/templates
+#   /nix/store/jzlsc52f1zsczi5rmjrbff45i7ng3cph-aerc-0.15.2/share/aerc/templates
+#
+#template-dirs=
+
+# The default template to be used for new messages.
+#
+# default: new_message
+#new-message=new_message
+
+# The default template to be used for quoted replies.
+#
+# default: quoted_reply
+#quoted-reply=quoted_reply
+
+# The default template to be used for forward as body.
+#
+# default: forward_as_body
+#forwards=forward_as_body
--- a/user/modules/utils/email/config/binds.conf
+++ b/user/modules/utils/email/config/binds.conf
@ -0,0 +1,129 @@
+# Binds are of the form <key sequence> = <command to run>
+# To use '=' in a key sequence, substitute it with "Eq": "<Ctrl+Eq>"
+# If you wish to bind #, you can wrap the key sequence in quotes: "#" = quit
+<C-p> = :prev-tab<Enter>
+<C-n> = :next-tab<Enter>
+<C-t> = :term<Enter>
+? = :help keys<Enter>
+
+[messages]
+q = :quit<Enter>
+
+j = :next<Enter>
+<Down> = :next<Enter>
+<C-d> = :next 50%<Enter>
+<C-f> = :next 100%<Enter>
+<PgDn> = :next 100%<Enter>
+
+k = :prev<Enter>
+<Up> = :prev<Enter>
+<C-u> = :prev 50%<Enter>
+<C-b> = :prev 100%<Enter>
+<PgUp> = :prev 100%<Enter>
+g = :select 0<Enter>
+G = :select -1<Enter>
+
+J = :next-folder<Enter>
+K = :prev-folder<Enter>
+H = :collapse-folder<Enter>
+L = :expand-folder<Enter>
+
+v = :mark -t<Enter>
+V = :mark -v<Enter>
+
+T = :toggle-threads<Enter>
+
+<Enter> = :view<Enter>
+d = :prompt 'Really delete this message?' 'delete-message'<Enter>
+D = :delete<Enter>
+A = :archive flat<Enter>
+
+C = :compose<Enter>
+
+rr = :reply -a<Enter>
+rq = :reply -aq<Enter>
+Rr = :reply<Enter>
+Rq = :reply -q<Enter>
+
+c = :cf<space>
+$ = :term<space>
+! = :term<space>
+| = :pipe<space>
+
+/ = :search<space>
+\ = :filter<space>
+n = :next-result<Enter>
+N = :prev-result<Enter>
+<Esc> = :clear<Enter>
+
+[messages:folder=Drafts]
+<Enter> = :recall<Enter>
+
+[view]
+/ = :toggle-key-passthrough<Enter>/
+q = :close<Enter>
+O = :open<Enter>
+S = :save<space>
+| = :pipe<space>
+D = :delete<Enter>
+A = :archive flat<Enter>
+
+<C-l> = :open-link <space>
+
+f = :forward<Enter>
+rr = :reply -a<Enter>
+rq = :reply -aq<Enter>
+Rr = :reply<Enter>
+Rq = :reply -q<Enter>
+
+H = :toggle-headers<Enter>
+<C-k> = :prev-part<Enter>
+<C-j> = :next-part<Enter>
+J = :next<Enter>
+K = :prev<Enter>
+
+[view::passthrough]
+$noinherit = true
+$ex = <C-x>
+<Esc> = :toggle-key-passthrough<Enter>
+
+[compose]
+# Keybindings used when the embedded terminal is not selected in the compose
+# view
+$noinherit = true
+$ex = <C-x>
+<C-k> = :prev-field<Enter>
+<C-j> = :next-field<Enter>
+<A-p> = :switch-account -p<Enter>
+<A-n> = :switch-account -n<Enter>
+<tab> = :next-field<Enter>
+<backtab> = :prev-field<Enter>
+<C-p> = :prev-tab<Enter>
+<C-n> = :next-tab<Enter>
+
+[compose::editor]
+# Keybindings used when the embedded terminal is selected in the compose view
+$noinherit = true
+$ex = <C-x>
+<C-k> = :prev-field<Enter>
+<C-j> = :next-field<Enter>
+<C-p> = :prev-tab<Enter>
+<C-n> = :next-tab<Enter>
+
+[compose::review]
+# Keybindings used when reviewing a message to be sent
+y = :send<Enter>
+n = :abort<Enter>
+v = :preview<Enter>
+p = :postpone<Enter>
+q = :choose -o d discard abort -o p postpone postpone<Enter>
+e = :edit<Enter>
+a = :attach<space>
+d = :detach<space>
+
+[terminal]
+$noinherit = true
+$ex = <C-x>
+
+<C-p> = :prev-tab<Enter>
+<C-n> = :next-tab<Enter>
--- a/user/modules/utils/email/default.nix
+++ b/user/modules/utils/email/default.nix
@ -0,0 +1,19 @@
+{ lib, config, ... }:
+
+with lib;
+let
+  cfg = config.modules.user.utils.email;
+
+in
+{ options.modules.user.utils.email = { enable = mkEnableOption "user.utils.email"; };
+  config = mkIf cfg.enable {
+    programs.aerc = {
+      enable = true;
+    };
+
+    home.file.".config/aerc" = {
+      source = ./config;
+      recursive = true;
+    };
+  };
+}
--- a/user/modules/utils/irc/default.nix
+++ b/user/modules/utils/irc/default.nix
@ -0,0 +1,17 @@
+{ pkgs, lib, config, ... }:
+
+with lib;
+let
+  cfg = config.modules.user.utils.irc;
+
+in
+{ options.modules.user.utils.irc = { enable = mkEnableOption "user.utils.irc"; };
+  config = mkIf cfg.enable {
+    home.packages = with pkgs; [
+      weechat
+    ];
+    programs.bash.shellAliases = {
+      chat = "weechat";
+    };
+  };
+}
--- a/user/modules/utils/writing/default.nix
+++ b/user/modules/utils/writing/default.nix
@ -0,0 +1,16 @@
+{ pkgs, lib, config, ... }:
+
+with lib;
+let
+  cfg = config.modules.user.utils.writing;
+
+in
+{ options.modules.user.utils.writing = { enable = mkEnableOption "Enable writing tools"; };
+  config = mkIf cfg.enable {
+    home.packages = with pkgs; [
+      mdbook
+      pandoc
+      asciidoctor
+    ];
+  };
+}
--- a/user/modules/vim/default.nix
+++ b/user/modules/vim/default.nix
@ -0,0 +1,24 @@
+{ pkgs, lib, config, ... }:
+
+with lib;
+let
+  cfg = config.modules.user.vim;
+
+in
+{ options.modules.user.vim = { enable = mkEnableOption "user.vim"; };
+  config = mkIf cfg.enable {
+    programs.bash.shellAliases = {
+      vi = "${pkgs.vim}/bin/vim";
+    };
+
+    home = {
+      packages = with pkgs; [
+        vim
+       ];
+      file.".vim" = {
+        source = ./vim;
+        recursive = true;
+      };
+    };
+  };
+}
--- a/user/modules/vim/vim
+++ b/user/modules/vim/vim
@ -0,0 +1 @@
+Subproject commit e5ff26b6f6ec9b8e9f8737dc5418d6a64a68ec4b
				`@ -0,0 +1 @@`
				`age1yubikey1qfapxqnnkh92zkgayzzm9n0gtpkwaqcvrzy4d4xa4rxnjua8vjhy72hh9r9`
				`@ -0,0 +1 @@`
				`ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBJM1HutPcWXdeTaAXY7ha8SlgeZFtLJGwNa3Kd/DL/R38fq5+fkh3iCoHgv+iiKcordtVTMhbOsHhz3H+Jm274c=`
				`@ -0,0 +1 @@`
				ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDXYU5c7AUD5tQQdpzQ73yy3ti3R7dArZ+f/wETN7L2Z2Hw6zo6hDid9/Q4yxdgM/FlTj/Ok2DHBWqxJsEe3S4shwsT9l2qJatjdcUK6zH3/0nFPxGYIaByj87aZ+5dwMoWNGlioPWciUdKeovvau1PwvdBxPabHHap6nwC9yPaSIVbZi4GgYv/zEvOB4LVYLuxLqr0pPdMNz1ddjmjsQCq5alC33jSZWkABERw3GlF02dNHbUq6cZlFq9BudbNWBQ8zFgj/C8amK4DHUSeU8w+ckTmO5PjDjINOnFr8kytDap+/5AQ6kr618evJ2JCwnBj6txb3SVGhcvn3/DJjf2H7flVhZEWIMEMu7452SXfz9mxp3Vu3UMJkjHUj6Lxl302M318k9j+w1fa8EHO7OQHQZajNKrEP5/UK2CDfpP2KIybX5HnEqBcEqoSKhRt7ytNX6VGzURk3/mmk9L+An5z7ve+zqlgNOA8uaIoebB4476+n5pGiNIedO3FRjPofEidYjf5NTZ9YDpqFc5KbfbhduuP63G/kqmgTxXMuTsWINY2xKEc0BPnlEGfezMN+eQpwWINOUxW1ZEk3OYMvC91EndbVwxVbm3aze9894T3+wVTipJ88xARCQeQpu1eaWDSaNduD+8LAouQiTA4whM+jBEeQoWZe6Wf6W4tBeCZ6Q==
				`@ -0,0 +1 @@`
				ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDl4895aB9P5p/lp8Hq5rHun4clvhyTSHFi3U2d6OOBoW5Fm+VcQnW/xbjmCBsXk5BdiowsBxQhwnzdfz/KJL7J5RobomUEaVRwb9UwT88eJveLp14BG8j2J3SjfyhrCX+4jkPx0bPQk1HGcuYY+tPEXf1q/ps88Dhu0CARBIzYQOTYY6b1qWzxpDoFZGHjKG8g5iY6FIu65yKKvvVy1f8IgZ3l3IpwBWVamxgkTcYY0QYSrmzo1n7TXxwrWbvenAqBsQ0cBPs+gVa3uIr+1TJl0Az5SElBVGu3LvUdlk58trtPUj6TQR3YUkg7Vjll7WHOdqhux5ZQNhjkOsHerf0Tw86e6cEzgeTuIbQHIb0LcsUunwKcuh2+au7RO599cvHn0+xZE5MZBxloDDaJ3JsiliM8kyPP/U3ERj03cWLW7BqbT+sfjAOl21RCzk0iQxk1wt/8VmtCr9Adv7IyrtaYvf/bwRP+g+9ldmzKGt8Mdb605uVzZ70H/LLm17f40Te+QHaex5by/6p6cuwEEZtgIg53Wpglu0rA6UxrBfQEHKl/Jt3FLeE0mnEyYkkR2MnHNtyWRIXtuqYZMAm2Ub1pFHH7jQV1gGiDVTw6a2eIwK21a/hXtRjFUpFd1nB1n+KNfJBE4zT3wm3Ud7mKw/6rWnoRyhYZvGXkFdp+iEs49Q==
				`@ -0,0 +1 @@`
				`Subproject commit a90d89277c4bbd363d6929f434eef633bea439f5`
				`@ -0,0 +1 @@`
				`Subproject commit d394ee0594e8b1162f05547c3f7da817b6fcb62a`
				`@ -0,0 +1 @@`
				`Subproject commit c341ac8840e8a19ab98bcc5084f51157ddaf8730`
				`@ -0,0 +1 @@`
				`Subproject commit e5ff26b6f6ec9b8e9f8737dc5418d6a64a68ec4b`