use ghidra-bin cause debugger works

comment out gtk config
flake update
2025-02-04 10:11:36 -05:00 · 2025-02-02 16:09:55 -05:00 · 2025-02-02 15:26:01 -05:00 · 2025-02-02 15:25:04 -05:00 · 2025-02-02 10:52:53 -05:00 · 2025-02-01 23:40:16 -05:00
49 changed files with 1906 additions and 502 deletions
--- a/.github/workflows/build-and-cache.yml
+++ b/.github/workflows/build-and-cache.yml
@ -1,106 +0,0 @@
-name: build and cache random stuff
-on:
-  workflow_dispatch:
-  push:
-jobs:
-  build-packages:
-    strategy:
-      matrix:
-        package:
-          - github:cything/nixpkgs#hello
-        os:
-          - ubuntu-latest
-          - macos-latest
-    runs-on: ${{ matrix.os }}
-    continue-on-error: true
-    steps:
-      - uses: DeterminateSystems/nix-installer-action@main
-        with:
-          logger: pretty
-      - uses: DeterminateSystems/magic-nix-cache-action@main
-      - name: Setup Attic cache
-        uses: ryanccn/attic-action@v0
-        with:
-          endpoint: ${{ vars.ATTIC_ENDPOINT }}
-          cache: ${{ vars.ATTIC_CACHE }}
-          token: ${{ secrets.ATTIC_TOKEN }}
-      - run: nix build -L '${{ matrix.package }}'
-  build-machines:
-    strategy:
-      matrix:
-        machine:
-          - chunk
-          - ytnix
-          - titan
-        os:
-          - ubuntu-latest
-          # - macos-latest
-    runs-on: ${{ matrix.os }}
-    continue-on-error: true
-    steps:
-      - name: Maximize build disk space
-        uses: easimon/maximize-build-space@v10
-        with:
-          overprovision-lvm: true
-          swap-size-mb: 1024
-          remove-dotnet: 'true'
-          remove-android: 'true'
-          remove-haskell: 'true'
-          remove-codeql: 'true'
-          remove-docker-images: 'true'
-          build-mount-path: /nix
-          build-mount-path-ownership: 'root:root'
-      - uses: DeterminateSystems/nix-installer-action@main
-        with:
-          logger: pretty
-      - uses: DeterminateSystems/magic-nix-cache-action@main
-      - name: Setup Attic cache
-        uses: ryanccn/attic-action@v0
-        with:
-          endpoint: ${{ vars.ATTIC_ENDPOINT }}
-          cache: ${{ vars.ATTIC_CACHE }}
-          token: ${{ secrets.ATTIC_TOKEN }}
-      - name: Sync repository
-        uses: actions/checkout@v4
-        with:
-          persist-credentials: false
-      - run: nix build -L --accept-flake-config .#nixosConfigurations.${{ matrix.machine }}.config.system.build.toplevel
-  build-homes:
-    strategy:
-      matrix:
-        home:
-          - yt@ytnix
-          - yt@chunk
-        os:
-          - ubuntu-latest
-          # - macos-latest
-    runs-on: ${{ matrix.os }}
-    continue-on-error: true
-    steps:
-      - name: Maximize build disk space
-        uses: easimon/maximize-build-space@v10
-        with:
-          overprovision-lvm: true
-          swap-size-mb: 1024
-          remove-dotnet: 'true'
-          remove-android: 'true'
-          remove-haskell: 'true'
-          remove-codeql: 'true'
-          remove-docker-images: 'true'
-          build-mount-path: /nix
-          build-mount-path-ownership: 'root:root'
-      - uses: DeterminateSystems/nix-installer-action@main
-        with:
-          logger: pretty
-      - uses: DeterminateSystems/magic-nix-cache-action@main
-      - name: Setup Attic cache
-        uses: ryanccn/attic-action@v0
-        with:
-          endpoint: ${{ vars.ATTIC_ENDPOINT }}
-          cache: ${{ vars.ATTIC_CACHE }}
-          token: ${{ secrets.ATTIC_TOKEN }}
-      - name: Sync repository
-        uses: actions/checkout@v4
-        with:
-          persist-credentials: false
-      - run: nix build -L --accept-flake-config .#homeConfigurations."${{ matrix.home }}".activationPackage
--- a/.github/workflows/build-machines-and-homes.yml
+++ b/.github/workflows/build-machines-and-homes.yml
@ -0,0 +1,126 @@
+name: build and cache machines and homes
+on:
+  workflow_dispatch:
+  push:
+  pull_request:
+jobs:
+  build-machines:
+    strategy:
+      matrix:
+        machine:
+          - chunk
+          - ytnix
+          - titan
+        os:
+          - ubuntu-latest
+    runs-on: ${{ matrix.os }}
+    continue-on-error: true
+    steps:
+      - name: Maximize build disk space
+        uses: easimon/maximize-build-space@v10
+        with:
+          overprovision-lvm: true
+          swap-size-mb: 1024
+          remove-dotnet: 'true'
+          remove-android: 'true'
+          remove-haskell: 'true'
+          remove-codeql: 'true'
+          remove-docker-images: 'true'
+          build-mount-path: /nix
+      - name: Install Nix
+        uses: cachix/install-nix-action@v30
+        with:
+          install_url: https://releases.nixos.org/nix/nix-2.25.4/install
+          extra_nix_config: 'accept-flake-config = true'
+      - name: Sync repository
+        uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: cachix/cachix-action@v14
+        with:
+          name: cything
+          authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+          useDaemon: false
+          installCommand: nix profile install nixpkgs#cachix
+      - name: Setup Attic cache
+        uses: ryanccn/attic-action@v0
+        with:
+          endpoint: ${{ vars.ATTIC_ENDPOINT }}
+          cache: ${{ vars.ATTIC_CACHE }}
+          token: ${{ secrets.ATTIC_TOKEN }}
+      - name: Restore and cache Nix store
+        uses: nix-community/cache-nix-action@v5.1.0
+        with:
+          # restore and save a cache using this key
+          primary-key: nix-${{ runner.os }}-${{ matrix.machine }}-${{ hashFiles('**/*.nix', 'flake.lock') }}
+          # if there's no cache hit, restore a cache by this prefix
+          restore-prefixes-first-match: nix-${{ runner.os }}-${{ matrix.machine }}-
+          # do purge caches
+          purge: true
+          # purge all versions of the cache
+          purge-prefixes: nix-${{ runner.os }}-
+          # created more than this number of seconds ago relative to the start of the `Post Restore` phase
+          purge-last-accessed: 86400
+          # except the version with the `primary-key`, if it exists
+          purge-primary-key: never
+          # always save the cache
+          save-always: true
+      - run: nix build -L .#nixosConfigurations.${{ matrix.machine }}.config.system.build.toplevel
+  build-homes:
+    strategy:
+      matrix:
+        home:
+          - yt@ytnix
+          - yt@chunk
+        os:
+          - ubuntu-latest
+          # - macos-latest
+    runs-on: ${{ matrix.os }}
+    continue-on-error: true
+    steps:
+      - name: Maximize build disk space
+        uses: easimon/maximize-build-space@v10
+        with:
+          overprovision-lvm: true
+          swap-size-mb: 1024
+          remove-dotnet: 'true'
+          remove-android: 'true'
+          remove-haskell: 'true'
+          remove-codeql: 'true'
+          remove-docker-images: 'true'
+          build-mount-path: /nix
+      - uses: nixbuild/nix-quick-install-action@master
+      - name: Sync repository
+        uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: cachix/cachix-action@v14
+        with:
+          name: cything
+          authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+          useDaemon: false
+          installCommand: nix profile install nixpkgs#cachix
+      - name: Setup Attic cache
+        uses: ryanccn/attic-action@v0
+        with:
+          endpoint: ${{ vars.ATTIC_ENDPOINT }}
+          cache: ${{ vars.ATTIC_CACHE }}
+          token: ${{ secrets.ATTIC_TOKEN }}
+      - name: Restore and cache Nix store
+        uses: nix-community/cache-nix-action@v5.1.0
+        with:
+          # restore and save a cache using this key
+          primary-key: nix-${{ runner.os }}-${{ matrix.home }}-${{ hashFiles('**/*.nix', 'flake.lock') }}
+          # if there's no cache hit, restore a cache by this prefix
+          restore-prefixes-first-match: nix-${{ runner.os }}-${{ matrix.home }}-
+          # do purge caches
+          purge: true
+          # purge all versions of the cache
+          purge-prefixes: nix-${{ runner.os }}-
+          # created more than this number of seconds ago relative to the start of the `Post Restore` phase
+          purge-last-accessed: 86400
+          # except the version with the `primary-key`, if it exists
+          purge-primary-key: never
+          # always save the cache
+          save-always: true
+      - run: nix build -L .#homeConfigurations."${{ matrix.home }}".activationPackage
--- a/.github/workflows/build-packages.yml
+++ b/.github/workflows/build-packages.yml
@ -0,0 +1,59 @@
+name: build and cache packages
+on:
+  workflow_dispatch:
+    inputs:
+      package:
+        description: "package to build"
+        required: false
+        type: string
+jobs:
+  build-packages:
+    strategy:
+      matrix:
+        package:
+          - github:cything/nixpkgs/928e0c6874ab3e759305e93f806a4cf559645677#alvr
+          - github:cything/nixpkgs/8929e1256ceec677dd57fce405cdaca23176399b#lact
+          - ${{ inputs.package }}
+        os:
+          - ubuntu-latest
+          - macos-latest
+          - ubuntu-24.04-arm
+    runs-on: ${{ matrix.os }}
+    continue-on-error: true
+    steps:
+      - name: Install Nix
+        uses: cachix/install-nix-action@v30
+      - name: Sync repository
+        uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: cachix/cachix-action@v14
+        with:
+          name: cything
+          authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+          useDaemon: false
+          installCommand: nix profile install nixpkgs#cachix
+      - name: Setup Attic cache
+        uses: ryanccn/attic-action@v0
+        with:
+          endpoint: ${{ vars.ATTIC_ENDPOINT }}
+          cache: ${{ vars.ATTIC_CACHE }}
+          token: ${{ secrets.ATTIC_TOKEN }}
+      - name: Restore and cache Nix store
+        uses: nix-community/cache-nix-action@v5.1.0
+        with:
+          # restore and save a cache using this key
+          primary-key: nix-${{ runner.os }}-${{ matrix.package }}-${{ hashFiles('**/*.nix', 'flake.lock') }}
+          # if there's no cache hit, restore a cache by this prefix
+          restore-prefixes-first-match: nix-${{ runner.os }}-${{ matrix.package }}-
+          # do purge caches
+          purge: true
+          # purge all versions of the cache
+          purge-prefixes: nix-${{ runner.os }}-
+          # created more than this number of seconds ago relative to the start of the `Post Restore` phase
+          purge-last-accessed: 86400
+          # except the version with the `primary-key`, if it exists
+          purge-primary-key: never
+          # always save the cache
+          save-always: true
+      - run: nix build -L ${{ matrix.package }}
--- a/.sops.yaml
+++ b/.sops.yaml
@ -103,3 +103,13 @@ creation_rules:
      - age:
          - *chunk
          - *cy
+  - path_regex: secrets/services/tailscale.yaml
+    key_groups:
+      - age:
+          - *chunk
+          - *cy
+  - path_regex: secrets/yt/(.*).yaml$
+    key_groups:
+      - age:
+          - *yt
+          - *cy
--- a/flake.lock
+++ b/flake.lock
--- a/flake.nix
+++ b/flake.nix
@ -22,22 +22,73 @@
    lanzaboote = {
      url = "github:nix-community/lanzaboote/master";
      inputs.nixpkgs.follows = "nixpkgs";
+      inputs.crane.follows = "crane";
+      inputs.flake-compat.follows = "flake-compat";
+      inputs.flake-parts.follows = "flake-parts";
+      inputs.rust-overlay.follows = "rust-overlay";
    };
    nixvim = {
      url = "github:nix-community/nixvim";
      inputs.nixpkgs.follows = "nixpkgs";
+      inputs.flake-parts.follows = "flake-parts";
+      inputs.flake-compat.follows = "flake-compat";
+      inputs.home-manager.follows = "home-manager";
+      inputs.treefmt-nix.follows = "treefmt";
+    };
+    flake-parts = {
+      url = "github:hercules-ci/flake-parts";
+      inputs.nixpkgs-lib.follows = "nixpkgs";
    };
-    flake-parts.url = "github:hercules-ci/flake-parts";
    niri = {
      url = "github:sodiboo/niri-flake";
      inputs.nixpkgs.follows = "nixpkgs";
+      inputs.nixpkgs-stable.follows = "nixpkgs";
    };
    rust-overlay = {
      url = "github:oxalica/rust-overlay";
      inputs.nixpkgs.follows = "nixpkgs";
    };
+    conduwuit = {
+      url = "github:girlbossceo/conduwuit";
+      inputs = {
+        nixpkgs.follows = "nixpkgs";
+        crane.follows = "crane";
+        flake-compat.follows = "flake-compat";
+        flake-utils.follows = "flake-utils";
+      };
+    };
+    lix-module = {
+      url = "git+https://git.lix.systems/lix-project/nixos-module";
+      inputs.nixpkgs.follows = "nixpkgs";
+      inputs.flake-utils.follows = "flake-utils";
+      inputs.lix.follows = "lix";
+    };
+    lix = {
+      url = "git+https://git.lix.systems/lix-project/lix";
+      inputs.nixpkgs.follows = "nixpkgs";
+      inputs.flake-compat.follows = "flake-compat";
+    };
+    nix-ld = {
+      url = "github:nix-community/nix-ld";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+    plasma-manager = {
+      url = "github:nix-community/plasma-manager";
+      inputs.nixpkgs.follows = "nixpkgs";
+      inputs.home-manager.follows = "home-manager";
+    };

    nixpkgs-garage.url = "github:cything/nixpkgs/garage-module"; # unmerged PR
+
+    nvim-github-theme = {
+      url = "github:projekt0n/github-nvim-theme";
+      flake = false;
+    };
+
+    # deduplication
+    flake-utils.url = "github:numtide/flake-utils";
+    crane.url = "github:ipetkov/crane";
+    flake-compat.url = "github:edolstra/flake-compat";
  };

  nixConfig = {
@ -45,11 +96,16 @@
      "https://cache.cything.io/central"
      "https://niri.cachix.org"
      "https://nix-community.cachix.org"
+      "https://cache.garnix.io"
+      "https://cything.cachix.org"
+      "https://aseipp-nix-cache.global.ssl.fastly.net"
    ];
    extra-trusted-public-keys = [
      "central:uWhjva6m6dhC2hqNisjn2hXGvdGBs19vPkA1dPEuwFg="
      "niri.cachix.org-1:Wv0OmO7PsuocRKzfDoJ3mulSl7Z6oezYhGhR+3W2964="
      "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
+      "cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g="
+      "cything.cachix.org-1:xqW1W5NNL+wrM9wfSELb0MLj/harD2ZyB4HbdaMyvPI="
    ];
    builders-use-substitutes = true;
  };
@ -75,18 +131,10 @@
        ];
        perSystem =
          {
-            system,
+            inputs',
            ...
          }:
          {
-            # make pkgs available to `perSystem`
-            _module.args.pkgs = import inputs.nixpkgs {
-              inherit system;
-              config = {
-                allowUnfree = true;
-              };
-            };
-
            treefmt = {
              projectRootFile = "flake.nix";
              programs.nixfmt.enable = true;
@ -97,7 +145,7 @@

              settings.global.excludes = [
                "secrets/*"
-                "**/*.png" # tries to format a png file??
+                "**/*.png" # tries to format a png file
              ];
            };
          };
@ -130,6 +178,8 @@
                    ./modules
                    inputs.lanzaboote.nixosModules.lanzaboote
                    inputs.niri.nixosModules.niri
+                    inputs.lix-module.nixosModules.default
+                    inputs.nix-ld.nixosModules.nix-ld
                  ];
                };
                chunk = lib.nixosSystem {
@ -173,6 +223,7 @@
                    ./home/yt/ytnix.nix
                    inputs.nixvim.homeManagerModules.nixvim
                    inputs.niri.homeModules.config
+                    inputs.plasma-manager.homeManagerModules.plasma-manager
                  ];
                };

--- a/garnix.yaml
+++ b/garnix.yaml
@ -0,0 +1,6 @@
+builds:
+  include:
+    - 'nixosConfigurations.*'
+    - 'homeConfigurations.*'
+    - '*.aarch64-linux.*'
+    - '*.x86_64-linux.*'
--- a/home/foot.nix
+++ b/home/foot.nix
@ -17,40 +17,32 @@
        blink = "yes";
        blink-rate = 500;
        beam-thickness = 1.5;
+        color = "161821 c6c8d1";
      };
      mouse = {
        hide-when-typing = "yes";
      };
      colors = {
-        background = "161821";
        foreground = "c6c8d1";
-
-        selection-background = "1e2132";
-        selection-foreground = "c6c8d1";
-
-        regular0 = "161821";
-        bright0 = "6b7089";
-
+        background = "161821";
+        regular0 = "1e2132";
        regular1 = "e27878";
-        bright1 = "e98989";
-
        regular2 = "b4be82";
-        bright2 = "c0ca8e";
-
        regular3 = "e2a478";
-        bright3 = "e9b189";
-
        regular4 = "84a0c6";
-        bright4 = "91acd1";
-
        regular5 = "a093c7";
-        bright5 = "ada0d3";
-
        regular6 = "89b8c2";
-        bright6 = "95c4ce";
-
        regular7 = "c6c8d1";
+        bright0 = "6b7089";
+        bright1 = "e98989";
+        bright2 = "c0ca8e";
+        bright3 = "e9b189";
+        bright4 = "91acd1";
+        bright5 = "ada0d3";
+        bright6 = "95c4ce";
        bright7 = "d2d4de";
+        selection-foreground = "161821";
+        selection-background = "c6c8d1";
      };

      key-bindings = {
--- a/home/ghostty.nix
+++ b/home/ghostty.nix
@ -0,0 +1,20 @@
+{ ... }:
+{
+  programs.ghostty = {
+    enable = true;
+    enableZshIntegration = true;
+    clearDefaultKeybinds = true;
+    settings = {
+      theme = "iceberg-dark";
+      font-family = "IBM Plex Mono";
+      font-size = "12";
+      window-decoration = false;
+      confirm-close-surface = false;
+      keybind = [
+        "ctrl+q=quit"
+        "ctrl+shift+c=copy_to_clipboard"
+        "ctrl+shift+v=paste_from_clipboard"
+      ];
+    };
+  };
+}
--- a/home/irssi.nix
+++ b/home/irssi.nix
@ -0,0 +1,22 @@
+{ ... }:
+{
+  programs.irssi = {
+    enable = true;
+    networks.liberachat = {
+      nick = "cy7";
+      server = {
+        address = "irc.libera.chat";
+        port = 6697;
+        autoConnect = true;
+      };
+      channels = {
+        nixos.autoJoin = true;
+        linux.autoJoin = true;
+        rust.autoJoin = true;
+      };
+    };
+    extraConfig = ''
+      ignores = ( { level = "JOINS PARTS QUITS MODES NICKS"; } )
+    '';
+  };
+}
--- a/home/kitty.nix
+++ b/home/kitty.nix
@ -0,0 +1,72 @@
+{ pkgs, ... }:
+{
+  programs.kitty = {
+    enable = true;
+    font = {
+      name = "IBM Plex Mono";
+      package = pkgs.ibm-plex;
+      size = 12;
+    };
+    themeFile = "GitHub_Dark";
+    settings = {
+      enable_audio_bell = true;
+      # how many windows should be open before kitty asks
+      # for confirmation
+      confirm_os_window_close = 0;
+      clear_all_shortcuts = true;
+
+      # will probably lower this later but the max allowed is actually 4GB
+      # this is NOT stored in memory and can only be viewed with scrollback_pager
+      "scrollback_pager_history_size" = "1024";
+      # see https://github.com/sharkdp/bat/issues/1077#issuecomment-652785399
+      "scrollback_pager" = "bat --pager='less -FR +G'";
+      "scrollback_lines" = 20000;
+    };
+    keybindings = {
+      # kitty_mod is ctrl+shift by default
+      "kitty_mod+c" = "copy_to_clipboard";
+      "kitty_mod+v" = "paste_from_clipboard";
+      # "ctrl+q" = "quit";
+
+      "kitty_mod+m" = "show_scrollback";
+
+      # windows
+      "kitty_mod+h" = "neighboring_window left";
+      "kitty_mod+alt+h" = "move_window left";
+      "kitty_mod+l" = "neighboring_window right";
+      "kitty_mod+alt+l" = "move_window right";
+      "kitty_mod+j" = "neighboring_window down";
+      "kitty_mod+alt+j" = "move_window down";
+      "kitty_mod+k" = "neighboring_window up";
+      "kitty_mod+alt+k" = "move_window up";
+      "ctrl+f3" = "detach_window new-tab";
+      "ctrl+f4" = "detach_window tab-left";
+      "ctrl+f5" = "load_config_file";
+      "ctrl+alt+l" = "next_layout";
+      "ctrl+alt+t" = "goto_layout tall";
+      "ctrl+alt+s" = "goto_layout stack";
+      "kitty_mod+enter" = "new_window_with_cwd";
+      "kitty_mod+r" = "resize_window";
+
+      # tabs
+      "kitty_mod+n" = "next_tab";
+      "kitty_mod+p" = "previous_tab";
+      "kitty_mod+alt+n" = "move_tab_forward";
+      "kitty_mod+alt+p" = "move_tab_backward";
+      "kitty_mod+w" = "close_tab";
+      "kitty_mod+t" = "new_tab_with_cwd";
+      "ctrl+f2" = "detach_tab";
+
+      # hints
+      # > basically means the preceding key is a prefix (think tmux)
+      "kitty_mod+o>o" = "open_url_with_hints";
+      "kitty_mod+o>p" = "kitten hints --type path --program -";
+      "kitty_mod+o>n" = "kitten hints --type line --program -";
+      "kitty_mod+o>w" = "kitten hints --type word --program -";
+      "kitty_mod+o>h" = "kitten hints --type hash --program -";
+      "kitty_mod+o>l" = "kitten hints --type linenum";
+    };
+  };
+
+  programs.zsh.shellAliases."ssh" = "kitten ssh";
+}
--- a/home/niri/default.nix
+++ b/home/niri/default.nix
@ -6,7 +6,7 @@
 }:
 let
  wallpaper = "${./nixos-c-book.png}";
-  terminal = "foot";
+  terminal = "kitty";
  menu = [
    "fuzzel"
    "-w"
@ -32,6 +32,14 @@ in
        ];
      }
      { command = [ "${lib.getExe pkgs.xwayland-satellite}" ]; }
+      {
+        command = [
+          "wl-paste"
+          "--watch"
+          "cliphist"
+          "store"
+        ];
+      }
    ];
    hotkey-overlay.skip-at-startup = true;

@ -42,20 +50,21 @@ in
        natural-scroll = true;
        click-method = "clickfinger";
      };
-      warp-mouse-to-focus = true;
+      warp-mouse-to-focus = false;
      focus-follows-mouse.enable = false;
    };

    environment = {
      DISPLAY = ":0"; # for xwayland-satellite
+      ANKI_WAYLAND = "1";
    };

    layout = {
-      gaps = 4;
+      gaps = 0;
      focus-ring = {
        width = 4;
-        active.color = "#00000055";
-        inactive.color = "#505050";
+        active.color = "#4c7899";
+        inactive.color = "#333333";
      };
      always-center-single-column = true;
      border.enable = false;
@ -64,17 +73,23 @@ in
    window-rules = [
      {
        matches = [
-          {
-            app-id = "anki";
-            title = "Add";
-          }
          { app-id = "mpv"; }
          { app-id = "Bitwarden"; }
+          {
+            app-id = "ghidra-Ghidra";
+            # pop-up windows
+            title = "^win(.*)";
+          }
        ];
        open-floating = true;
      }
      {
-        matches = [ { app-id = "anki"; } ];
+        matches = [
+          {
+            app-id = "anki";
+            title = "Add";
+          }
+        ];
        default-column-width.proportion = .25;
      }
      {
@ -84,6 +99,10 @@ in
            app-id = "anki";
            title = "^Browse";
          }
+          { app-id = "com.mitchellh.ghostt"; }
+          { app-id = "org.kde.okular"; }
+          { app-id = "kitty"; }
+          { app-id = "VSCodium"; }
        ];
        default-column-width.proportion = .5;
      }
@ -123,13 +142,16 @@ in
      "Mod+Shift+U".action = move-window-to-workspace-up;
      "Mod+Shift+I".action = move-window-to-workspace-down;
      "Mod+W".action = maximize-column;
+      "Mod+E".action = set-column-width "50%";
+      "Mod+R".action = set-column-width "75%";
+      "Mod+Q".action = set-column-width "25%";
      "Mod+C".action = center-column;
      "Mod+Shift+Space".action = toggle-window-floating;
      "Mod+Space".action = switch-focus-between-floating-and-tiling;
      "Print".action = screenshot;
      "Alt+Print".action = screenshot-window;
      "Ctrl+Print".action = screenshot-screen;
-      "Mod+R".action = switch-preset-column-width;
+      # "Mod+R".action = switch-preset-column-width;
      "Mod+Shift+R".action = switch-preset-window-height;
      "Mod+Ctrl+R".action = reset-window-height;
      "Mod+F".action = fullscreen-window;
--- a/home/niri/scripts/remote.sh
+++ b/home/niri/scripts/remote.sh
@ -5,7 +5,7 @@ active_window=$(niri msg --json focused-window |jq -r .app_id)
 if [ "$1" = "btn1" ]; then
  if [ "$active_window" = "anki" ]; then
    wtype " "
-  elif [ "$active_window" = "foot" ]; then
+  elif [ "$active_window" = "kitty" ]; then
    wtype -M ctrl -M shift -k c -m ctrl -m shift
  elif [ "$active_window" = "chromium-browser" ] || [ "$active_window" = "librewolf" ]; then
    wtype -M alt -P right -p right -m alt
@ -15,7 +15,7 @@ if [ "$1" = "btn1" ]; then
 else
  if [ "$active_window" = "anki" ]; then
    wtype "1"
-  elif [ "$active_window" = "foot" ]; then
+  elif [ "$active_window" = "kitty" ]; then
    wtype -M ctrl -M shift -k v -m ctrl
  elif [ "$active_window" = "chromium-browser" ] || [ "$active_window" = "librewolf" ]; then
    wtype -M alt -P left -p left -m alt
--- a/home/nixvim/default.nix
+++ b/home/nixvim/default.nix
@ -1,4 +1,4 @@
-{ pkgs, ... }:
+{ pkgs, inputs, ... }:
 {
  programs.nixvim = {
    enable = true;
@ -15,15 +15,18 @@
      incsearch = true;
      smartcase = true;
    };
-    colorscheme = "iceberg";
-    clipboard.register = "unnamedplus";
+    colorscheme = "github_dark_tritanopia";
+    clipboard.register = "unnamed";

    globals = {
      mapleader = ",";
    };

-    extraPlugins = with pkgs.vimPlugins; [
-      iceberg-vim
+    extraPlugins = [
+      (pkgs.vimUtils.buildVimPlugin {
+        name = "github-theme";
+        src = inputs.nvim-github-theme;
+      })
    ];

    keymaps = [
@ -68,6 +71,41 @@
        key = "<C-e>";
        mode = "i";
      }
+      # quick chat with copilot
+      {
+        key = "<leader>ccq";
+        action.__raw = ''
+          function()
+            local input = vim.fn.input("Quick chat: ")
+            if input ~= "" then
+              require("CopilotChat").ask(input, { selection = require("CopilotChat.select").buffer })
+            end
+          end
+        '';
+        mode = [
+          "n"
+          "v"
+        ];
+      }
+      # ask perplexity a quick question
+      {
+        key = "<leader>ccs";
+        action.__raw = ''
+          function()
+            local input = vim.fn.input("Perplexity: ")
+            if input ~= "" then
+              require("CopilotChat").ask(input, {
+                agent = "perplexityai",
+                selection = false,
+              })
+            end
+          end
+        '';
+        mode = [
+          "n"
+          "v"
+        ];
+      }
    ];

    plugins.cmp = {
@ -112,7 +150,8 @@
              end
            end)
          '';
-          "<Tab>" = ''
+          # plain tab conflicts with i try to indent
+          "<C-Tab>" = ''
            cmp.mapping(function(fallback)
              if require("luasnip").jumpable(1) then
                require("luasnip").jump(1)
@ -167,10 +206,15 @@
    plugins.treesitter = {
      enable = true;
      nixGrammars = true;
-      settings.indent.enable = true;
+      settings = {
+        indent.enable = true;
+        auto_install = true;
+        highlight.enable = true;
+      };
    };
    plugins.fzf-lua = {
      enable = true;
+      profile = "fzf-native";
      keymaps = {
        "<leader>ff" = "files";
        "<leader>fg" = "live_grep";
@ -188,6 +232,13 @@
      settings.current_line_blame = true;
    };

+    plugins.copilot-chat = {
+      enable = true;
+      settings = {
+        model = "claude-3.5-sonnet";
+      };
+    };
+
    plugins.cmp-buffer.enable = true;
    plugins.cmp-emoji.enable = true;
    plugins.cmp-nvim-lsp.enable = true;
--- a/home/plasma.nix
+++ b/home/plasma.nix
@ -0,0 +1,80 @@
+{ ... }:
+{
+  programs.plasma = {
+    enable = true;
+    overrideConfig = true;
+    immutableByDefault = true;
+    workspace = {
+      lookAndFeel = "org.ide.breezedark.desktop";
+      cursor = {
+        theme = "Bibata-Modern-Classic";
+        size = 23;
+      };
+    };
+
+    fonts = {
+      general = {
+        family = "IBM Plex Mono";
+        pointSize = 12;
+      };
+    };
+
+    input.keyboard = {
+      numlockOnStartup = "on";
+      options = [ "ctrl:nocaps" ];
+    };
+
+    # Meta key is actually the Super key in KDE
+
+    hotkeys.commands = {
+      "launch-terminal" = {
+        name = "launch terminal";
+        key = "Meta+Return";
+        command = "kitty";
+      };
+      "launch-browser" = {
+        name = "launch browser";
+        key = "Meta+B";
+        command = "librewolf";
+      };
+    };
+
+    shortcuts = {
+      kwin = {
+        "Switch Window Down" = "Meta+J";
+        "Switch Window Left" = "Meta+H";
+        "Switch Window Right" = "Meta+L";
+        "Switch Window Up" = "Meta+K";
+        "Window Quick Tile Down" = "Meta+Shift+J";
+        "Window Quick Tile Left" = "Meta+Shift+H";
+        "Window Quick Tile Right" = "Meta+Shift+L";
+        "Window Quick Tile Up" = "Meta+Shift+K";
+        "Window Close" = "Meta+Ctrl+Q";
+        "Window Maximize" = "Meta+W";
+        "Window Minimize" = "Meta+Shift+-";
+        "Window Fullscreen" = "Meta+F";
+        "Window Shrink Horizontal" = "Meta+-";
+      };
+
+      ksmserver = {
+        "Lock Session" = [
+          "Screensaver"
+          "Meta+Ctrl+L"
+        ];
+      };
+    };
+
+    configFile = {
+      # save RAM
+      baloofilerc."Basic Settings"."Indexing-Enabled" = false;
+    };
+
+    # looks like KDE overrides services.logind settings
+    powerdevil.AC = {
+      whenLaptopLidClosed = "hibernate";
+    };
+    powerdevil.battery = {
+      whenLaptopLidClosed = "hibernate";
+    };
+  };
+}
--- a/home/vscode.nix
+++ b/home/vscode.nix
@ -8,11 +8,33 @@
    mutableExtensionsDir = false;
    extensions = with pkgs.vscode-extensions; [
      vscodevim.vim
-      jnoortheen.nix-ide # nix language support
-      editorconfig.editorconfig # editorconfig
-      dracula-theme.theme-dracula # color scheme
-      tomoki1207.pdf # pdf viewer
-      yzhang.markdown-all-in-one # markdown tools
+      jnoortheen.nix-ide
+      editorconfig.editorconfig
+      github.github-vscode-theme
+      github.copilot
+      rust-lang.rust-analyzer
    ];
+    userSettings = {
+      "workbench.colorTheme" = "GitHub Dark Default";
+      "files.autoSave" = "afterDelay";
+      "nix.enableLanguageServer" = true;
+      "nix.serverPath" = "nixd";
+      "editor.fontFamily" = "IBM Plex Mono";
+      "editor.fontSize" = 16;
+      "editor.wordWrap" = "on";
+
+      # vim mode settings
+      "vim.handleKeys" = {
+        "<C-b>" = false; # file tree toggle
+      };
+      "vim.normalModeKeyBindings" = [
+        {
+          "before" = [ ";" ];
+          "after" = [ ":" ];
+          "silent" = true;
+        }
+      ];
+      "workbench.startupEditor" = "none";
+    };
  };
 }
--- a/home/yt/chunk.nix
+++ b/home/yt/chunk.nix
@ -16,7 +16,6 @@
  systemd.user.startServices = "sd-switch";

  home.packages = with pkgs; [
-    foot.terminfo
    attic-server
  ];
 }
--- a/home/yt/common.nix
+++ b/home/yt/common.nix
@ -44,7 +44,11 @@
        rebase = true;
        autostash = true;
      };
-      merge.tool = "vimdiff";
+      merge = {
+        tool = "vimdiff";
+        keepBackup = false;
+        prompt = false;
+      };
      rebase = {
        stat = true;
        autoStash = true;
@ -52,12 +56,10 @@
        updateRefs = true;
      };
      help.autocorrect = 1;
-      mergetool = {
-        prompt = false;
-        path = "nvim-open";
-      };
+      "mergetool \"vimdiff\"".cmd = "nvim -d $LOCAL $REMOTE $MERGED -c '$wincmd w' -c 'wincmd J'";
    };
  };
  programs.ripgrep.enable = true;
  programs.man.generateCaches = true;
+  programs.fd.enable = true;
 }
--- a/home/yt/ytnix.nix
+++ b/home/yt/ytnix.nix
@ -1,5 +1,6 @@
 {
  pkgs,
+  lib,
  ...
 }:
 {
@ -7,6 +8,10 @@
    ./common.nix
    ../foot.nix
    ../niri
+    ../irssi.nix
+    ../kitty.nix
+    ../vscode.nix
+    ../plasma.nix
  ];
  home = {
    username = "yt";
@ -17,32 +22,34 @@

  systemd.user.startServices = "sd-switch";

-  qt = {
-    enable = true;
-    platformTheme.name = "gtk";
-    style.name = "adwaita-dark";
-    style.package = pkgs.adwaita-qt;
-  };
+  # keep this commented when using plasma
+  # otherwise "system settings" in KDE will not function
+  # qt = {
+  #   enable = true;
+  #   platformTheme.name = "kde";
+  #   style.name = "breeze-dark";
+  #   style.package = pkgs.kdePackages.breeze;
+  # };

-  gtk = {
-    enable = true;
-    cursorTheme = {
-      package = pkgs.bibata-cursors;
-      name = "Bibata-Modern";
-    };
-    theme = {
-      package = pkgs.adw-gtk3;
-      name = "adw-gtk3-dark";
-    };
-    iconTheme = {
-      package = pkgs.adwaita-icon-theme;
-      name = "Adwaita";
-    };
-  };
+  # this one too
+  # gtk = {
+  #   enable = true;
+  #   theme = {
+  #     package = pkgs.adw-gtk3;
+  #     name = "adw-gtk3-dark";
+  #   };
+  #   iconTheme = {
+  #     package = pkgs.adwaita-icon-theme;
+  #     name = "Adwaita";
+  #   };
+  # };

-  home.sessionVariables = {
-    ANKI_WAYLAND = "1";
-    DISPLAY = ":0";
+  home.pointerCursor = {
+    package = pkgs.bibata-cursors;
+    name = "Bibata-Modern-Classic";
+    size = 23;
+    gtk.enable = true;
+    x11.enable = true;
  };

  home.packages = with pkgs; [
@ -52,7 +59,6 @@
    bitwarden-desktop
    bitwarden-cli
    fastfetch
-    discord
    nwg-look
    kdePackages.gwenview
    kdePackages.okular
@ -102,6 +108,22 @@
    seahorse
    github-cli
    fuzzel
+    nixpkgs-review
+    just
+    hugo
+    ghidra-bin
+    sequoia
+    sccache
+    awscli2
+    lldb
+    (cutter.withPlugins (p: with p; [
+      rz-ghidra
+      jsdec
+      sigdb
+    ]))
+    ida-free
+    patchelf
+    radare2
  ];

  programs.waybar.enable = true;
@ -139,10 +161,36 @@
    '';
  };

-  services.gnome-keyring.enable = true;
-
  programs.direnv = {
    enable = true;
    nix-direnv.enable = true;
  };
+
+  programs.git.extraConfig = {
+    user = {
+      signingKey = "~/.ssh/id.key";
+    };
+    gpg.format = "ssh";
+    commit.gpgsign = true;
+    core.sshCommand = "ssh -i ~/.ssh/id.key";
+  };
+
+  home.sessionVariables = {
+    # to make ghidra work on xwayland
+    _JAVA_AWT_WM_NONREPARENTING = 1;
+
+    # sccache stuff
+    RUSTC_WRAPPER = "${lib.getExe pkgs.sccache}";
+    SCCACHE_BUCKET = "sccache";
+    SCCACHE_REGION = "earth";
+    SCCACHE_ENDPOINT = "https://sccache.s3.cy7.sh";
+    SCCACHE_ALLOW_CORE_DUMPS = "true";
+    SCCACHE_S3_USE_SSL = "true";
+    SCCACHE_CACHE_MULTIARCH = "true";
+    SCCACHE_LOG_LEVEL = "warn";
+    AWS_DEFAULT_REGION = "earth";
+    AWS_ENDPOINT_URL = "https://s3.cy7.sh";
+    AWS_ACCESS_KEY_ID = "$(cat /run/secrets/aws/key_id)";
+    AWS_SECRET_ACCESS_KEY = "$(cat /run/secrets/aws/key_secret)";
+  };
 }
--- a/home/zsh/default.nix
+++ b/home/zsh/default.nix
@ -39,11 +39,6 @@
    initExtra = ''
      # disable control+s to pause terminal
      unsetopt FLOW_CONTROL
-      # manually integrate fzf cause we need to make sure zsh-vi-mode
-      # won't override C-r
-      function zvm_after_init() {
-        eval "$(${pkgs.fzf}/bin/fzf --zsh)"
-      }

      # useful emacs mode bindings
      bindkey -M viins "^E" end-of-line
--- a/hosts/chunk/Caddyfile
+++ b/hosts/chunk/Caddyfile
@ -1,89 +0,0 @@
-{
-  acme_ca https://acme.zerossl.com/v2/DV90
-  acme_eab {
-    key_id {$EAB_KEY_ID}
-    mac_key {$EAB_MAC_KEY}
-  }
-}
-
-(common) {
-  encode zstd gzip
-  header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"
-}
-
-git.cything.io {
-  import common
-
-  # wrap in route so things are evaluated in the order written
-  route {
-    # rewrite gitlab URIs to make it work with forgejo
-    uri path_regexp /-/ /
-    uri replace /blob/ /src/
-    redir https://git.cy7.sh{uri} permanent
-  }
-}
-
-git.cy7.sh {
-  import common
-  reverse_proxy localhost:3000
-}
-
-rss.cy7.sh {
-  import common
-  reverse_proxy localhost:8080
-}
-
-photos.cy7.sh {
-  import common
-  reverse_proxy localhost:2283
-}
-
-chat.cything.io {
-  import common
-  reverse_proxy localhost:8448
-}
-
-pass.cy7.sh {
-  import common
-  reverse_proxy localhost:8081
-}
-
-dns.cything.io {
-  import common
-  reverse_proxy localhost:8082
-}
-
-pad.cything.io {
-  import common
-  reverse_proxy localhost:8085
-}
-
-red.cything.io {
-  import common
-  reverse_proxy localhost:8087
-}
-
-grafana.cything.io {
-  import common
-  reverse_proxy localhost:8088
-}
-
-element.cything.io {
-  import common
-  reverse_proxy localhost:8089
-}
-
-cache.cything.io {
-  import common
-  reverse_proxy localhost:8090
-}
-
-s3.cy7.sh {
-  import common
-  reverse_proxy localhost:3900
-}
-
-admin.s3.cy7.sh {
-  import common
-  reverse_proxy localhost:3903
-}
--- a/hosts/chunk/adguard.nix
+++ b/hosts/chunk/adguard.nix
@ -21,4 +21,9 @@
      ];
    };
  };
+
+  services.caddy.virtualHosts."dns.cything.io".extraConfig = ''
+    import common
+    reverse_proxy localhost:8082
+  '';
 }
--- a/hosts/chunk/attic.nix
+++ b/hosts/chunk/attic.nix
@ -31,4 +31,9 @@
      };
    };
  };
+
+  services.caddy.virtualHosts."cache.cything.io".extraConfig = ''
+    import common
+    reverse_proxy localhost:8090
+  '';
 }
--- a/hosts/chunk/conduwuit.nix
+++ b/hosts/chunk/conduwuit.nix
@ -1,11 +1,18 @@
-{ ... }:
+{ inputs, ... }:
 {
  services.conduwuit = {
    enable = true;
+    package =
+      inputs.conduwuit.packages.x86_64-linux.static-x86_64-linux-musl-all-features-x86_64-haswell-optimised;
    settings.global = {
      port = [ 8448 ];
      server_name = "cything.io";
      allow_check_for_updates = true;
    };
  };
+
+  services.caddy.virtualHosts."chat.cything.io".extraConfig = ''
+    import common
+    reverse_proxy localhost:8448
+  '';
 }
--- a/hosts/chunk/default.nix
+++ b/hosts/chunk/default.nix
@ -1,6 +1,4 @@
 {
-  config,
-  lib,
  pkgs,
  ...
 }:
@ -26,6 +24,7 @@
    ./attic.nix
    ./forgejo.nix
    ./garage.nix
+    ./tailscale.nix
  ];

  sops.age.keyFile = "/root/.config/sops/age/keys.txt";
@ -66,14 +65,19 @@
    "attic/env" = {
      sopsFile = ../../secrets/services/attic.yaml;
    };
-
    "garage/env" = {
      sopsFile = ../../secrets/services/garage.yaml;
    };
+    "tailscale/auth" = {
+      sopsFile = ../../secrets/services/tailscale.yaml;
+    };
  };

-  boot.loader.grub.enable = true;
-  boot.loader.grub.device = "/dev/vda";
+  boot = {
+    loader.grub.enable = true;
+    loader.grub.device = "/dev/vda";
+    kernelPackages = pkgs.linuxPackages_latest;
+  };

  system.stateVersion = "24.05";

@ -177,11 +181,13 @@
  programs.gnupg.agent.enable = true;
  programs.git.enable = true;

-  services.caddy = {
-    enable = true;
-    configFile = ./Caddyfile;
-    environmentFile = config.sops.secrets."caddy/env".path;
-    logFormat = lib.mkForce "level INFO";
+  my.caddy.enable = true;
+  services.caddy.virtualHosts."cy7.sh" = {
+    serverAliases = [ "www.cy7.sh" ];
+    extraConfig = ''
+      import common
+      redir https://cything.io temporary
+    '';
  };

  # container stuff
@ -197,4 +203,5 @@
    };
  };
  virtualisation.oci-containers.backend = "podman";
+  environment.enableAllTerminfo = true;
 }
--- a/hosts/chunk/deluge.nix
+++ b/hosts/chunk/deluge.nix
@ -7,4 +7,9 @@
      port = 8112;
    };
  };
+
+  services.caddy.virtualHosts."t.cy7.sh".extraConfig = ''
+    import common
+    reverse_proxy localhost:8112
+  '';
 }
--- a/hosts/chunk/element.nix
+++ b/hosts/chunk/element.nix
@ -7,9 +7,12 @@
  virtualisation.oci-containers.containers.element = {
    image = "vectorim/element-web";
    autoStart = true;
-    ports = [ "127.0.0.1:8089:80" ];
+    ports = [ "127.0.0.1:8089:8089" ];
    pull = "newer";
    networks = [ "element-net" ];
+    environment = {
+      ELEMENT_WEB_PORT = "8089";
+    };
  };

  systemd.services.create-element-net = {
@ -22,4 +25,9 @@
      ${pkgs.podman}/bin/podman network create element-net
    '';
  };
+
+  services.caddy.virtualHosts."element.cy7.sh".extraConfig = ''
+    import common
+    reverse_proxy localhost:8089
+  '';
 }
--- a/hosts/chunk/forgejo.nix
+++ b/hosts/chunk/forgejo.nix
@ -1,7 +1,8 @@
-{ ... }:
+{ pkgs, ... }:
 {
  services.forgejo = {
    enable = true;
+    package = pkgs.forgejo; # uses forgejo-lts by default
    user = "git";
    group = "git";
    settings = {
@ -16,7 +17,7 @@
      service.DISABLE_REGISTRATION = true;
      ui = {
        AMBIGUOUS_UNICODE_DETECTION = false;
-        DEFAULT_THEME = "gitea-dark";
+        DEFAULT_THEME = "forgejo-dark";
      };
      actions.ENABLED = false;
      repository.ENABLE_PUSH_CREATE_USER = true;
@ -29,4 +30,24 @@
      name = "git";
    };
  };
+
+  services.caddy.virtualHosts."git.cy7.sh".extraConfig = ''
+    import common
+
+    # renamed repo
+    uri replace /cy/infra /cy/nixos-config
+
+    reverse_proxy localhost:3000
+  '';
+  services.caddy.virtualHosts."git.cything.io".extraConfig = ''
+    import common
+
+    # wrap in route so things are evaluated in the order written
+    route {
+      # rewrite gitlab URIs to make it work with forgejo
+      uri path_regexp /-/ /
+      uri replace /blob/ /src/
+      redir https://git.cy7.sh{uri} permanent
+    }
+  '';
 }
--- a/hosts/chunk/garage.nix
+++ b/hosts/chunk/garage.nix
@ -8,6 +8,12 @@
      s3_api = {
        s3_region = "earth";
        api_bind_addr = "[::]:3900";
+        root_domain = ".s3.cy7.sh";
+      };
+      s3_web = {
+        bind_addr = "[::]:3902";
+        root_domain = ".web.s3.cy7.sh";
+        index = "index.html";
      };
      admin.api_bind_addr = "[::]:3903";
      rpc_bind_addr = "[::]:3901";
@ -16,4 +22,22 @@
    };
    environmentFile = config.sops.secrets."garage/env".path;
  };
+
+  services.caddy.virtualHosts = {
+    "s3.cy7.sh" = {
+      serverAliases = [ "*.s3.cy7.sh" ];
+      extraConfig = ''
+        import common
+        reverse_proxy localhost:3900
+      '';
+    };
+    "*.web.s3.cy7.sh".extraConfig = ''
+      import common
+      reverse_proxy localhost:3902
+    '';
+    "admin.s3.cy7.sh".extraConfig = ''
+      import common
+      reverse_proxy localhost:3903
+    '';
+  };
 }
--- a/hosts/chunk/grafana.nix
+++ b/hosts/chunk/grafana.nix
@ -31,4 +31,9 @@
      }
    ];
  };
+
+  services.caddy.virtualHosts."grafana.cy7.sh".extraConfig = ''
+    import common
+    reverse_proxy localhost:8088
+  '';
 }
--- a/hosts/chunk/hedgedoc.nix
+++ b/hosts/chunk/hedgedoc.nix
@ -16,4 +16,9 @@
      protocolUseSSL = true;
    };
  };
+
+  services.caddy.virtualHosts."pad.cy7.sh".extraConfig = ''
+    import common
+    reverse_proxy localhost:8085
+  '';
 }
--- a/hosts/chunk/immich.nix
+++ b/hosts/chunk/immich.nix
@ -95,4 +95,9 @@ in
      ${pkgs.podman}/bin/podman network create immich-net
    '';
  };
+
+  services.caddy.virtualHosts."photos.cy7.sh".extraConfig = ''
+    import common
+    reverse_proxy localhost:2283
+  '';
 }
--- a/hosts/chunk/miniflux.nix
+++ b/hosts/chunk/miniflux.nix
@ -9,4 +9,9 @@
      FORCE_REFRESH_INTERVAL = 0; # don't rate limit me
    };
  };
+
+  services.caddy.virtualHosts."rss.cy7.sh".extraConfig = ''
+    import common
+    reverse_proxy localhost:8080
+  '';
 }
--- a/hosts/chunk/redlib.nix
+++ b/hosts/chunk/redlib.nix
@ -10,4 +10,9 @@
      REDLIB_ROBOTS_DISABLE_INDEXING = "on";
    };
  };
+
+  services.caddy.virtualHosts."red.cy7.sh".extraConfig = ''
+    import common
+    reverse_proxy localhost:8087
+  '';
 }
--- a/hosts/chunk/tailscale.nix
+++ b/hosts/chunk/tailscale.nix
@ -0,0 +1,13 @@
+{ config, ... }:
+{
+  services.tailscale = {
+    enable = true;
+    authKeyFile = config.sops.secrets."tailscale/auth".path;
+    extraUpFlags = [
+      "--advertise-exit-node"
+      "--accept-dns=false"
+    ];
+    useRoutingFeatures = "server";
+    openFirewall = true;
+  };
+}
--- a/hosts/chunk/vaultwarden.nix
+++ b/hosts/chunk/vaultwarden.nix
@ -10,4 +10,9 @@
      DATABASE_URL = "postgresql://vaultwarden:vaultwarden@127.0.0.1:5432/vaultwarden";
    };
  };
+
+  services.caddy.virtualHosts."pass.cy7.sh".extraConfig = ''
+    import common
+    reverse_proxy localhost:8081
+  '';
 }
--- a/hosts/common.nix
+++ b/hosts/common.nix
@ -1,4 +1,4 @@
-{ ... }:
+{ inputs, ... }:
 {
  nix = {
    settings = {
@ -9,8 +9,21 @@
        "root"
        "@wheel"
      ];
-      trusted-public-keys = [ "central:uWhjva6m6dhC2hqNisjn2hXGvdGBs19vPkA1dPEuwFg=" ];
-      substituters = [ "https://cache.cything.io/central" ];
+      trusted-public-keys = [
+        "central:uWhjva6m6dhC2hqNisjn2hXGvdGBs19vPkA1dPEuwFg="
+        "niri.cachix.org-1:Wv0OmO7PsuocRKzfDoJ3mulSl7Z6oezYhGhR+3W2964="
+        "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
+        "cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g="
+        "cything.cachix.org-1:xqW1W5NNL+wrM9wfSELb0MLj/harD2ZyB4HbdaMyvPI="
+      ];
+      substituters = [
+        "https://aseipp-nix-cache.global.ssl.fastly.net"
+        "https://cache.cything.io/central"
+        "https://niri.cachix.org"
+        "https://nix-community.cachix.org"
+        "https://cache.garnix.io"
+        "https://cything.cachix.org"
+      ];
    };
    channel.enable = false;
    optimise = {
@ -24,8 +37,9 @@
      options = "--delete-older-than 14d";
    };
    extraOptions = ''
-      	    builders-use-substitutes = true
-      	  '';
+      builders-use-substitutes = true
+    '';
+    registry.nixpkgs.flake = inputs.nixpkgs;
  };
  time.timeZone = "America/Toronto";
  networking.firewall.logRefusedConnections = false;
--- a/hosts/titan/Caddyfile
+++ b/hosts/titan/Caddyfile
@ -13,14 +13,16 @@

 cything.io {
  import common
-  reverse_proxy localhost:8084

  header /.well-known/matrix/* Content-Type application/json
  header /.well-known/matrix/* Access-Control-Allow-Origin *
  header /.well-known/matrix/* Access-Control-Allow-Methods GET,POST,PUT,DELETE,OPTIONS,PATCH,HEAD
  header /.well-known/matrix/* Access-Control-Allow-Headers X-Requested-With,Content-Type,Authorization,Origin,Accept
-  respond /.well-known/matrix/server {"m.server":"chat.cything.io:443"}
-  respond /.well-known/matrix/client {"m.server":{"base_url":"https://chat.cything.io"},"m.homeserver":{"base_url":"https://chat.cything.io"},"org.matrix.msc3575.proxy":{"url":"https://chat.cything.io"}}
+  route {
+    respond /.well-known/matrix/server {"m.server":"chat.cything.io:443"}
+    respond /.well-known/matrix/client {"m.server":{"base_url":"https://chat.cything.io"},"m.homeserver":{"base_url":"https://chat.cything.io"},"org.matrix.msc3575.proxy":{"url":"https://chat.cything.io"}}
+    redir https://cy7.sh/posts{uri} permanent
+  }
 }

 www.cything.io {
--- a/hosts/ytnix/default.nix
+++ b/hosts/ytnix/default.nix
@ -9,6 +9,7 @@
    ./hardware-configuration.nix
    ../common.nix
    ../zsh.nix
+    ./tailscale.nix
  ];

  sops.age.keyFile = "/root/.config/sops/age/keys.txt";
@ -32,6 +33,17 @@
      sopsFile = ../../secrets/newsboat.yaml;
      owner = "yt";
    };
+    "tailscale/auth" = {
+      sopsFile = ../../secrets/services/tailscale.yaml;
+    };
+    "aws/key_id" = {
+      sopsFile = ../../secrets/yt/aws.yaml;
+      owner = "yt";
+    };
+    "aws/key_secret" = {
+      sopsFile = ../../secrets/yt/aws.yaml;
+      owner = "yt";
+    };
  };

  boot = {
@ -41,7 +53,7 @@
      efi.canTouchEfiVariables = false; # toggle when installing
    };
    tmp.cleanOnBoot = true;
-    kernelPackages = pkgs.linuxPackages_latest;
+    kernelPackages = pkgs.linuxKernel.packages.linux_zen;
    extraModulePackages = with config.boot.kernelPackages; [
      rtl8821ce
    ];
@ -58,6 +70,7 @@
      pkiBundle = "/var/lib/sbctl";
    };
    kernel.sysctl."kernel.sysrq" = 1;
+    binfmt.emulatedSystems = [ "aarch64-linux" ];
  };

  networking = {
@ -128,6 +141,7 @@
    "wheel"
    "libvirtd"
    "docker"
+    "disk"
  ];

  environment.systemPackages = with pkgs; [
@ -160,6 +174,8 @@
    haskell-language-server
    ghc
    sbctl # secure boot
+    wine-wayland
+    wine64
  ];

  environment.sessionVariables = {
@ -173,6 +189,12 @@
  services.displayManager = {
    enable = true;
    autoLogin.user = "yt";
+    defaultSession = "plasma";
+    sddm = {
+      enable = true;
+      wayland.enable = true;
+      autoNumlock = true;
+    };
  };

  fonts.packages = with pkgs; [
@ -262,12 +284,56 @@
  programs.virt-manager.enable = true;

  services.usbmuxd.enable = true;
-  programs.nix-ld.enable = true;
+  programs.nix-ld.dev = {
+    enable = true;
+    # nix run github:thiagokokada/nix-alien#nix-alien-find-libs ./<binary>
+    libraries = with pkgs; [
+      mesa
+      extest
+      stdenv.cc.cc
+      libGL
+      fontconfig
+      libxkbcommon
+      zlib
+      libxml2
+      dbus
+      freetype
+      egl-wayland
+      waylandpp
+      cairo
+      xcb-util-cursor
+      libplist
+      p11-kit
+      kdePackages.qtwayland
+      qt6.qtwayland
+      libsForQt5.qt5.qtwayland
+      xorg.libX11
+      xorg.libxcb
+      xorg.xcbutilwm
+      xorg.xcbutilimage
+      xorg.xcbutilkeysyms
+      xorg.xcbutilrenderutil
+      xorg.libXScrnSaver
+      xorg.libXcomposite
+      xorg.libXcursor
+      xorg.libXdamage
+      xorg.libXext
+      xorg.libXfixes
+      xorg.libXi
+      xorg.libXrandr
+      xorg.libXrender
+      xorg.libXtst
+      xorg.libxkbfile
+      xorg.libxshmfence
+    ];
+  };
  programs.evolution.enable = true;

  xdg.portal = {
    enable = true;
    wlr.enable = true;
+    xdgOpenUsePortal = true;
+    extraPortals = with pkgs; [ xdg-desktop-portal-gtk xdg-desktop-portal-gnome ];
  };

  programs.obs-studio = {
@ -311,8 +377,22 @@

  services.trezord.enable = true;

-  my.niri = {
+  programs.niri.enable = true;
+  programs.niri.package = pkgs.niri-unstable;
+  programs.xwayland.enable = true;
+
+  services.udev.extraHwdb = ''
+    SUBSYSTEM=="usb", SYSFS{idVendor}=="090c", SYSFS{idProduct}=="1000", ACTION=="add", GROUP="users", MODE="0664"
+  '';
+
+  programs.ssh = {
+    askPassword = "${pkgs.seahorse}/libexec/seahorse/ssh-askpass";
+    startAgent = true;
+    enableAskPassword = true;
+  };
+
+  services.desktopManager.plasma6 = {
    enable = true;
-    package = pkgs.niri-unstable;
+    enableQt5Integration = true;
  };
 }
--- a/hosts/ytnix/tailscale.nix
+++ b/hosts/ytnix/tailscale.nix
@ -0,0 +1,13 @@
+{ config, ... }:
+{
+  services.tailscale = {
+    enable = true;
+    authKeyFile = config.sops.secrets."tailscale/auth".path;
+    openFirewall = true;
+    useRoutingFeatures = "client";
+    extraUpFlags = [
+      "--exit-node=100.122.132.30"
+      "--accept-dns=false"
+    ];
+  };
+}
--- a/18
+++ b/18
@ -0,0 +1,18 @@
+update:
+    git branch -D update || true
+    git switch -c update
+    nix flake update
+    git add flake.lock
+    git commit -s -m "flake update"
+    git push -f
+    git switch main
+
+upgrade:
+    git switch update
+    sudo nixos-rebuild switch -L --flake . --use-substitutes
+    nixos-rebuild switch -L --flake .#chunk --target-host root@2a0f:85c1:840:2bfb::1 --use-substitutes
+    nixos-rebuild switch -L --flake .#titan --target-host root@www.cything.io --use-substitutes
+    home-manager -L switch --flake .
+    git switch main
+    git merge update
+    git branch -d update
--- a/modules/caddy.nix
+++ b/modules/caddy.nix
@ -0,0 +1,40 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+let
+  cfg = config.my.caddy;
+in
+{
+  options.my.caddy = {
+    enable = lib.mkEnableOption "caddy reverse proxy";
+  };
+
+  config = lib.mkIf cfg.enable {
+    services.caddy = {
+      enable = true;
+      package = pkgs.caddy.withPlugins {
+        plugins = [
+          # error message will tell you the correct version tag to use
+          # (still need the @ to pass nix config check)
+          "github.com/caddy-dns/cloudflare@v0.0.0-20240703190432-89f16b99c18e"
+        ];
+        hash = "sha256-jCcSzenewQiW897GFHF9WAcVkGaS/oUu63crJu7AyyQ=";
+      };
+      logFormat = lib.mkForce "level INFO";
+      acmeCA = "https://acme-v02.api.letsencrypt.org/directory";
+      extraConfig = ''
+        (common) {
+          encode zstd gzip
+          header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"
+        }
+      '';
+      globalConfig = ''
+        acme_dns cloudflare {$CLOUDFLARE_KEY}
+      '';
+      environmentFile = config.sops.secrets."caddy/env".path;
+    };
+  };
+}
--- a/modules/default.nix
+++ b/modules/default.nix
@ -2,6 +2,6 @@
 {
  imports = [
    ./backup.nix
-    ./niri.nix
+    ./caddy.nix
  ];
 }
--- a/modules/niri.nix
+++ b/modules/niri.nix
@ -1,21 +0,0 @@
-{
-  pkgs,
-  config,
-  lib,
-  ...
-}:
-let
-  cfg = config.my.niri;
-in
-{
-  options.my.niri = {
-    enable = lib.mkEnableOption "niri";
-    package = lib.mkPackageOption pkgs "niri" { };
-  };
-
-  config = lib.mkIf cfg.enable {
-    programs.niri.package = cfg.package;
-    programs.niri.enable = true;
-    programs.xwayland.enable = true;
-  };
-}
--- a/overlay/default.nix
+++ b/overlay/default.nix
@ -2,6 +2,7 @@ let
  overlays = [
    ./conduwuit
    ./attic
+    ./vscode.nix
  ];
  importedOverlays = map (m: import m) overlays;
 in
--- a/overlay/vscode.nix
+++ b/overlay/vscode.nix
@ -0,0 +1,14 @@
+final: prev: {
+  vscode-extensions = prev.vscode-extensions // {
+    github = prev.vscode-extensions.github // {
+      codespaces = prev.vscode-utils.buildVscodeMarketplaceExtension {
+        mktplcRef = {
+          publisher = "github";
+          name = "codespaces";
+          version = "1.17.3";
+          hash = "sha256-idJFYHJ4yeqpFZBX55Y0v1yfzgqyhS0MrC4yIto7i7w=";
+        };
+      };
+    };
+  };
+}
--- a/secrets/services/caddy.yaml
+++ b/secrets/services/caddy.yaml
@ -1,5 +1,5 @@
 caddy:
-    env: ENC[AES256_GCM,data:uVCkVky5MRRhN+g4f634nBjvpcI5Ldy+eOKXg7eGu9foswTHA1SXDs67+Wuvo/jaPw7Zg67xKZRHnoTon1udQzyfu0T6pmVKfsUPewITYCd+qLTanFz6uVRUHzpUVwjCZNqB8gxNr/BiZ70NG4vQXRjgd3zKFrQYQBr4zSaP2vK1pRdbuQ==,iv:dQBfX4X8huUp2dqY3tEGW+BPZ/XADT10ptt85R7X+AY=,tag:cvMbFjkRHoxxnNfz8dGv5g==,type:str]
+    env: ENC[AES256_GCM,data:XyxcCVT+rwlS7A3xzUgGqpMoLwhfUJo2++zPTgoPt3q6Edt14bYQJsoSJXnKx/lGg/0ilNfEEg8AEnru/Mzx0bWedSdWuZ380l8wlLiucqQThhEBhEJlyd94BMNzhxFdj82w0ejp4oWb5By/WjkFNesvAyxPIo/Ir4S+fTgGpA1iO2Ms8Pdjp00qeXYsK1CfjaXOYlEP+8BxntN2JKLYb8Cgs7dLmHfUwP6gTFKlTukUTtQZYUw336q3TtGy,iv:Ab/E0ljUBxzWlXfAC2BXCYxlgo0ErvKFaubgVjFR3OU=,tag:Yr24/DofYS2lM6f2/1LQ3Q==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -33,8 +33,8 @@ sops:
            Q2hBZE1FOHJ3aW5rVmoyK045eG11cmsKFOmP5iWONREZvxu0rM+fKMPQKgnYq5LH
            AKMZFsP7nnUxjdCXEA18sDg4Rf0qp8i3uQK3D6P7417j9ye/YZA4BQ==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-12-17T03:25:37Z"
-    mac: ENC[AES256_GCM,data:bhFBLkT2q6HGtTPtHLVZkKZn00Lbm11/u3qSR19lU2E1SsQ7mpukvCqcTxNWtJ+HHth6yJJfgM6XABKq/9/598L2MgGuF3C/GGS3xpjwHh5RyV8t1lV8cqDaZGjGOMGx35lFQ6DoXOreQrtP/f7MKzf+nVNFr1NbTR8YhqR1xDU=,iv:+fjYlbyIyM9nLagrvE+PUhC2pT7QTsTSQX7ELZ7Wuhs=,tag:GWQv6VmIsWwFzb4bUr5CLg==,type:str]
+    lastmodified: "2025-01-30T17:26:39Z"
+    mac: ENC[AES256_GCM,data:saoalvnwHsv0CTw/cRZqibnH9oGoZTNwGUT7RePKRa8OwNzbUEzQt+Z1WrmmWoqR+omQXLE+lpOPv6uNYxvAWnIelzCGeBBCMSBxtjlTUsjts7oFo7d9C5SdTIOkzotDxryvjRupb0P7hAmEqcSUKRZipJy5MVR7VXR1XZ4fIPM=,iv:VaP05zj8L2pygi1/M4BnOV3Inf0ssaWMu+aTBkdDMys=,tag:nuZT8GMB4F0T5dHnTvHOhA==,type:str]
    pgp: []
    unencrypted_suffix: _unencrypted
-    version: 3.9.2
+    version: 3.9.4
--- a/secrets/services/tailscale.yaml
+++ b/secrets/services/tailscale.yaml
@ -0,0 +1,31 @@
+tailscale:
+    auth: ENC[AES256_GCM,data:7gGiUBRUK25Tp5y/5DDZKOTxKPFFfN1UUeBOdMLLQqobq643MKdJ9imxkKmKFg/FwgLYft/uzdxQGGlE7Q==,iv:HRmd+T1QuTYP8VrX/bZt8dWSwm5rcUvpEMqCMPfxjE4=,tag:PRZn2Pm6yydfEULrYGM6yg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1eg6sxflw6l44fp20sl068sampwd95fm0mnh4ssegrhtktgm50ptqcuspyn
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2Z1JZZmZMaDQ3UHYvbXYr
+            c05RaEMxUGJXSGczUDBkL1UxT0hjQ0VNNkJNClFUNmJ5d3gyaHFwMTdNVW9GQ2ly
+            V3haMkx5Z1B5dmJ0SE4wY0UzMWswQ0EKLS0tIGNpZVo3UmtHcjFZVE5FMmdpOGMx
+            UFZGb3I1L3FJYVE2VjJ5aTVoZlo4bFUKwH2sPBwuLQXrHmiKYSu4Eut/H2j/2tUW
+            1y8Eph7l6w3kfhZRRbo6cZ8gcbZNHPSPeAvWf/TpYumiTt1WBt8SMw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age10h6pg5qdpc4t0rpmksfv788a57f04n83zgqaezkjjn65nkhv547s0vxfdn
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSVXBMTEMrY1NGa1NBSjZP
+            R04wYUsrdGlVa3FnL1NYVG4xdUdqeHNnM0ZJCmhMSzFoRVFSOFBrQlU3VUtwaU0r
+            TEtad1B5NGh3OW1oajNvckhJcExrU0kKLS0tIFc5K3JOVTUvSFU1dmQxMUFRZ1o3
+            em5IemlsM29zVy9GK3RmTlgzVnRpMDAKRatmFgCdoXcypQ+1EDedCuVctl0SFMf4
+            kjtHrTSpept/y9bpTUy656aPRQ1LvqvfPs7Co1ssC/YWFroDsLgv4w==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-01-24T05:26:20Z"
+    mac: ENC[AES256_GCM,data:GbQrLESUR/x+eLzukOR1FaJsd8zxlrz9dc/2kDBKUYAgI8L4QwLmwRuzpaIJgNLv2PdLTW83oSC8ekxR8fmsap40DpiygcrmPdPUeVFbEPaz7SSvU+DCgB0UX+qNQ9aOQ0BIbeKKOIj3r9enGv2o6DKY8I85n7VXjnGZAmCf1C8=,iv:UrtVqRGwvOpXOH3X3qF6ZF+VwqO0VGt+hFG7r6oUqCg=,tag:TD4mG3t5ORYgAS0GBmA7Eg==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.3
--- a/secrets/yt/aws.yaml
+++ b/secrets/yt/aws.yaml
@ -0,0 +1,32 @@
+aws:
+    key_id: ENC[AES256_GCM,data:vxa8IS5zVOStsQaQNoPy36MeCw2KD2Th5tg=,iv:TrPukr/bpkGysf1YigBlXwaCu0H1FM6ivCVQEgnst6A=,tag:yrlcsDkLkH7U2i3JgjDaBA==,type:str]
+    key_secret: ENC[AES256_GCM,data:R9hFgtylEW1RphrP7/9Hi7HIb7gcQX1WDEVfnUTTzh+/0LM2Rb9CdkaleO8wNlcyYVE/jUKtqdqqrospAJ7+Zw==,iv:3+yCVqH441+oXFLI5usaQdhnE3GFhbJjMsYeRvk8xEw=,tag:STxA32cSdwPBikXyVEP5+Q==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1sy0at69err83qyml2vqu8xvwjccfws447aaadfvacj2qluw3p45s2mtrw8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKaUZKbTVjZ1NEWlE5RzZT
+            T1dKdkRQajEva0tpRXhxYUlYWmw1b3MwSFZvCmhteVJ2VGhVNnZTZkJlem1OT3dL
+            dGlQTWdOUlo3TXNOS0wvNlpqVWpZSFEKLS0tIC9DNjY3OW1zWUlRQ1ZEOGlBRk9R
+            azQxMGhQejQ5M0N1YjFtSW5uVnRCQ3MKtt26G2PxIry/lppOT/NUX8jebEb5NgqO
+            HuHj7WT51Gtotfgb22VfGeOCaw9+pPYSjdk9WV4z57r7Z/lylALKRw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age10h6pg5qdpc4t0rpmksfv788a57f04n83zgqaezkjjn65nkhv547s0vxfdn
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPaVIwbExDUjJiVFpHOFJu
+            dk1SUHc5UDRFUENsbkg2RmQvazdEZ1NKeEhvCjVCNzdwRFN0aUZJL0pVSTI1RUxv
+            Ymhhc0tsSENVa1VUKzRBZk5IcjEvNFUKLS0tIFpPNlRXOVYyVnpyUmtLMTFqNlZ0
+            UlYrTExEUVc0dURLR1czN3BnYzZ2VGMKCbAgM50jvs9VciA1Pb/VY+2I4x62LBGe
+            j7eHkfTFc8Gnk/rZA9/ZJDLFr/FUPMQWK/NVoz6oLjO6oVFXqN6OqA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-01-30T17:45:09Z"
+    mac: ENC[AES256_GCM,data:uXnJ8DCs1ZZ72PFAmSQpqvVH2UYvRX8AeUC00A6WsgNL9sz6H0b7PwXBn4SucHACwLwilMVKYpFGE1pPMsIgpHxU5coNhvTfth/ChY1KS73LAwrJUAyUoFI3mumPkklj7b/u1CbBfhuhA2QoZVl+d9BGQn5CQu3+BySUmcT+P9k=,iv:H/hUTBDNcsGBP5TA/7U1QMZogZvuoPuEAg/tBCpbf9w=,tag:W7rH84Na/tHPuJlA9tRXEQ==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.4
Author	SHA1	Message	Date
cy	df2f9668f1	use ghidra-bin cause debugger works	2025-02-04 10:11:36 -05:00
cy	0029f8f822	comment out gtk config	2025-02-02 16:09:55 -05:00
cy	78f94a6429	flake update Signed-off-by: cy <cy@cy7.sh>	2025-02-02 15:26:01 -05:00
cy	11fb3de60c	some more plasma config	2025-02-02 15:25:04 -05:00
cy	c9d700390c	manually redirect renamed repo	2025-02-02 10:52:53 -05:00
cy	b131f134bc	add kwin bindings and fix stuff	2025-02-01 23:40:16 -05:00
cy	81e06a0513	install plasma and use plasma-manager to configure	2025-02-01 22:36:56 -05:00
cy	258cce19fb	flake update Signed-off-by: cy <cy@cy7.sh>	2025-02-01 12:10:21 -05:00
cy	3510da9657	install ida-free	2025-02-01 12:08:57 -05:00
cy	95ff04af25	nix-ld to make binaryninja work	2025-01-31 23:44:15 -05:00
cy	a31dbdaf0f	don't overlay cutter Signed-off-by: cy <cy@cy7.sh>	2025-01-31 21:59:30 -05:00
cy	1c449848e2	overlay cutter Signed-off-by: cy <cy@cy7.sh>	2025-01-31 14:30:29 -05:00
cy	30c82dcb4f	add sccache, some vscode changes, use kitten ssh	2025-01-30 12:48:48 -05:00
cy	d0ba9ca90b	make garage better Signed-off-by: cy <cy@cy7.sh>	2025-01-30 12:35:19 -05:00
cy	4e0c1fbbb4	caddy: use acme_dns for wildcard TLS to work use cloudflare dns plugin to update zone	2025-01-30 12:33:03 -05:00
cy	4f015ecb45	vscode: overlay github codespaces extension Signed-off-by: cy <cy@cy7.sh>	2025-01-29 21:48:31 -05:00
cy	67048909a9	flake update Signed-off-by: cy <cy@cy7.sh>	2025-01-29 16:49:19 -05:00
cy	b07c255869	nix fmt and some cleanup Signed-off-by: cy <cy@cy7.sh>	2025-01-29 16:48:28 -05:00
cy	069a65d4c7	nixvim: add copilot stuff	2025-01-29 16:23:33 -05:00
cy	b2a6740256	vscode goodies Signed-off-by: cy <cy@cy7.sh>	2025-01-29 15:24:42 -05:00
cy	d79a34328a	flake update Signed-off-by: cy <cy@cy7.sh>	2025-01-28 22:40:30 -05:00
cy	0506c6c92f	install ghidra and disable mouse warp Signed-off-by: cy <cy@cy7.sh>	2025-01-28 22:38:40 -05:00
cy	1e55f3901c	fix matrix Signed-off-by: cy <cy@cy7.sh>	2025-01-28 22:38:24 -05:00
cy	f9837b7cab	make treesitter nicer Signed-off-by: cy <cy@cy7.sh>	2025-01-28 00:39:23 -05:00
cy	443ea96d1f	make justfile better and cleanup zsh Signed-off-by: cy <cy@cy7.sh>	2025-01-27 20:26:16 -05:00
cy	da557a7b7e	titan: redirect to new website Signed-off-by: cy <cy@cy7.sh>	2025-01-27 20:07:41 -05:00
cy	cad577b193	migrate chunk to caddy module Signed-off-by: cy <cy@cy7.sh>	2025-01-27 05:50:25 -05:00
cy	a9a3ee8413	init Signed-off-by: cy <cy@cy7.sh>	2025-01-27 04:02:11 -05:00
cy	61b1399131	enable ssh agent Signed-off-by: cy <cy@cy7.sh>	2025-01-27 02:28:39 -05:00
cy	7367b2d1a5	flake update Signed-off-by: cy <cy@cy7.sh>	2025-01-26 22:35:43 -05:00
cy	b1a1955786	make mouse cursor better again Signed-off-by: cy <cy@cy7.sh>	2025-01-26 17:43:18 -05:00
cy	80da2cfc70	git: specify the ssh key for push to work Signed-off-by: cy <cy@cy7.sh>	2025-01-26 17:23:35 -05:00
cy	84c2b18dfa	re-enable lix Signed-off-by: cy <cy@cy7.sh>	2025-01-26 01:32:41 -05:00
cy	7b48435796	git sign with ssh Signed-off-by: cy <cy@cy7.sh>	2025-01-25 23:55:24 -05:00
cy	6ae187f7c6	forgejo: use forgejo package and forgejo-dark theme Signed-off-by: cy <cy@cy7.sh>	2025-01-25 19:47:39 -05:00
cy	5fc61d955b	flake update Signed-off-by: cy <cy@cy7.sh>	2025-01-25 17:24:02 -05:00
cy	c6f24e39c1	Merge branch 'update'	2025-01-25 10:34:52 -05:00
cy	ca047c1885	add beta nix cache Signed-off-by: cy <cy@cy7.sh>	2025-01-25 09:47:52 -05:00
cy	42e66561b7	flake update Signed-off-by: cy <cy@cy7.sh>	2025-01-25 09:13:58 -05:00
cy	750b202a42	flake update Signed-off-by: cy <cy@cy7.sh>	2025-01-24 22:41:26 -05:00
cy	5e3715f8f7	make justfile work	2025-01-24 15:33:52 -05:00
cy	c1cb989017	flake update Signed-off-by: cy <cy@cy7.sh>	2025-01-24 13:34:49 -05:00
cy	4fa0aed92e	git enable signoff and change mergetool Signed-off-by: cy <cy@cy7.sh>	2025-01-24 05:58:02 -05:00
cy	947249cc79	configure tailscale and stuff	2025-01-24 01:14:26 -05:00
cy	76b0dd1a4e	init none-ls and justfile	2025-01-23 22:16:34 -05:00
cy	caa3b8d081	lix broke	2025-01-23 21:18:36 -05:00
cy	dd15bcb9ab	flake update	2025-01-23 20:24:26 -05:00
cy	9de0b072cd	make kitty TERM work on other computers	2025-01-23 01:32:22 -05:00
cy	6da74e745e	define flake registry	2025-01-22 18:53:05 -05:00
cy	a29326adf1	nvim: fix fzf	2025-01-22 18:52:53 -05:00
cy	e51f883626	niri stuff; remove hosts module	2025-01-22 18:52:34 -05:00
cy	9b0c02deb9	ugprade lix to patch cache 404 bug	2025-01-22 16:28:33 -05:00
cy	0ca62b620a	flake update	2025-01-22 15:46:01 -05:00
cy	62e29061db	add lix input	2025-01-22 14:51:00 -05:00
cy	df3469c708	apparently that option doesn't exist anymore	2025-01-22 13:37:38 -05:00
cy	f9cc197be2	deduplicate flake inputs	2025-01-22 04:33:51 -05:00
cy	7cf2d318c6	nix fmt	2025-01-22 03:08:18 -05:00
cy	67fd47275d	cachix donesnt accept-flake-config by default	2025-01-22 03:06:58 -05:00
cy	7bd2af2396	use cachix action to install latest nix	2025-01-22 02:45:29 -05:00
cy	f9806ac636	try lix	2025-01-22 02:07:37 -05:00
cy	b8dcdac94b	remove ghostty input and flake update	2025-01-22 00:51:17 -05:00
cy	e9e20c15a6	kitty: scrollback pager stuff	2025-01-21 23:27:33 -05:00
cy	412e22c424	Merge branch 'conduwuit-flake'	2025-01-21 23:04:19 -05:00
cy	2622119933	just making then nicer	2025-01-21 21:59:59 -05:00
cy	0f913101a9	use conduwuit from flake	2025-01-21 21:56:26 -05:00
cy	cfa298fb63	fix kde apps looking weird	2025-01-21 16:47:47 -05:00
cy	0d8ec05ba6	how about kitty now	2025-01-21 16:24:33 -05:00
cy	03e1a832ff	some irssi config	2025-01-21 15:36:19 -05:00
cy	455b197b7f	try to fix cursor issue	2025-01-21 13:35:44 -05:00
cy	aca309a9c0	ghostty: init	2025-01-21 13:16:03 -05:00
cy	6a2269f591	add irssi	2025-01-21 12:07:49 -05:00
cy	bbcc1433de	nix fmt	2025-01-21 04:25:30 -05:00
cy	ae71a8a779	add garnix and cachix cache	2025-01-21 04:22:58 -05:00
cy	4ceb7f7830	add garnix.yaml	2025-01-21 04:05:32 -05:00
cy	0c6b96bc8e	Merge branch 'zen'	2025-01-21 04:04:36 -05:00
cy	2c2d5a4103	niri doesnt start if DISPLAY is set before	2025-01-21 04:04:32 -05:00
cy	38b90fd28e	overlay zen	2025-01-21 04:04:08 -05:00
cy	40addb8f90	try zen kernel	2025-01-21 01:39:52 -05:00
cy	3a415ccce9	downgrade kernel to 6.12	2025-01-20 23:36:54 -05:00
cy	21fdf27b6c	use input to build packages	2025-01-20 21:01:20 -05:00
cy	222fc45918	flake update	2025-01-20 20:51:57 -05:00
cy	0cc8d4195f	some niri changes	2025-01-20 20:50:51 -05:00
cy	d29d23c3e8	unbreak element	2025-01-20 20:50:13 -05:00
cy	240d8b2820	add lact package	2025-01-20 20:12:33 -05:00
cy	b2582a051d	also run workflow on PR	2025-01-20 13:37:18 -05:00
cy	e78bda179e	move packages to a separate workflow	2025-01-20 13:37:18 -05:00
cy	1d7b20d51d	use more specific primary-key and prefix-match	2025-01-20 13:37:18 -05:00
cy	3a621723d1	revamp workflow (cy/infra#4 ) Reviewed-on: cy/infra#4 Co-authored-by: cy <cy@cy7.sh> Co-committed-by: cy <cy@cy7.sh>	2025-01-20 02:59:35 -05:00