init

user/home.nix

@@ -0,0 +1,40 @@
+{ lib, pkgs, config, ... }:
+
+let
+  pass = pkgs.pass.withExtensions (exts: with exts; [
+    pass-audit
+    pass-otp
+    pass-update
+    pass-tomb
+  ]);
+
+in
+{
+  programs.home-manager.enable = true;
+
+  home.username = config.user.name;
+  home.homeDirectory = "/home/${config.user.name}";
+
+  # Essential packages for all users
+  home.packages = with pkgs; [
+    pass
+    wget curl fastfetch fd
+    unzip zip rsync
+    calc calcurse
+    age
+    sops
+  ];
+
+  programs.bash.shellAliases = {
+    cal = "${pkgs.calcurse}/bin/calcurse";
+    calendar = "${pkgs.calcurse}/bin/calcurse";
+  };
+
+  # Default modules for all users (machines can override with mkForce false)
+  modules.user = {
+    bash.enable = lib.mkDefault true;
+    git.enable = lib.mkDefault true;
+    neovim.enable = lib.mkDefault true;
+    security.gpg.enable = lib.mkDefault true;
+  };
+}