endurance builds

modules/flake/nix.nix

@@ -0,0 +1,24 @@
+{inputs, ...}: {
+  systems = [
+    "x86_64-linux"
+    "x86_64-darwin"
+  ];
+
+  perSystem = {system, ...}: {
+    _module.args.pkgs = import inputs.nixpkgs {
+      inherit system;
+
+      config = {
+        allowUnfree = true;
+        permittedInsecurePackages = [
+          "nixos-config"
+          "electron-36.9.5"
+          "dotnet-sdk-6.0.428"
+          "olm-3.2.16"
+        ];
+      };
+
+      overlays = [];
+    };
+  };
+}

modules/generic/default.nix

@@ -1,5 +1,6 @@
 {
   imports = [
+    ./nix.nix
     ./profiles.nix
     ./secrets.nix
   ];

modules/generic/nix.nix

@@ -1,15 +1,13 @@
-{
-  pkgs,
-  config,
-  ...
-}: {
+{pkgs, ...}: {
   nix = {
     package = pkgs.lixPackageSets.stable.lix;
 
-    # Automatic cleanup
-    gc.automatic = true;
-    gc.dates = "weekly";
-    gc.options = "--delete-older-than 21d";
+    # automatic cleanup
+    gc = {
+      automatic = true;
+      dates = "weekly";
+      options = "--delete-older-than 21d";
+    };
 
     settings = {
       # builders-use-substitutes = true;
@@ -33,11 +31,4 @@
       "olm-3.2.16"
     ];
   };
-
-  environment.etc."current-system-packages".text = let
-    packages = builtins.map (p: "${p.name}") config.environment.systemPackages;
-    sortedUnique = builtins.sort builtins.lessThan (pkgs.lib.lists.unique packages);
-    formatted = builtins.concatStringsSep "\n" sortedUnique;
-  in
-    formatted;
 }

modules/generic/secrets.nix

@@ -1,6 +1,6 @@
 {
   config,
-  system,
+  inputs',
   inputs,
   pkgs,
   lib,
@@ -37,7 +37,7 @@ in {
   config = {
     environment.systemPackages = [
       pkgs.age-plugin-yubikey
-      inputs.agenix-rekey.packages.${system}.default
+      inputs'.agenix-rekey.packages.default
     ];
 
     age = {

modules/nixos/profiles/default.nix

@@ -1,4 +1,4 @@
-{...}: {
+{
   imports = [
     ./graphical
   ];

modules/nixos/profiles/graphical/audio.nix

@@ -1,15 +1,16 @@
 {
   inputs,
   lib,
+  config,
   ...
 }: let
-  inherit (lib) mkForce mkDefault;
+  inherit (lib) mkIf mkForce mkDefault;
 in {
   imports = [
     inputs.musnix.nixosModules.default
   ];
 
-  config = {
+  config = mkIf config.bosun.profiles.graphical.enable {
     musnix = {
       enable = mkDefault true;
       rtcqs.enable = true;
@@ -17,7 +18,7 @@ in {
 
     users.users.toph.extraGroups = ["audio"];
 
-    pipewire = {
+    services.pipewire = {
       enable = mkForce true;
       alsa.enable = true;
       jack.enable = true;

modules/nixos/profiles/graphical/default.nix

@@ -1,11 +1,5 @@
 {
-  lib,
-  config,
-  ...
-}: let
-  inherit (lib) mkIf;
-in {
-  imports = mkIf config.bosun.profiles.graphical.enabled [
+  imports = [
     ./wm.nix
     ./audio.nix
   ];

modules/nixos/profiles/graphical/wm.nix

@@ -1,13 +1,17 @@
 {
   inputs,
   pkgs,
+  lib,
+  config,
   ...
-}: {
+}: let
+  inherit (lib) mkIf;
+in {
   imports = [
-    inputs.niri.nixosModules.default
+    inputs.niri.nixosModules.niri
   ];
 
-  config = {
+  config = mkIf config.bosun.profiles.graphical.enable {
     environment.systemPackages = with pkgs; [
       wayland-utils
       wl-clipboard
@@ -32,19 +36,19 @@
           wayland.enable = true;
         };
       };
-
-      xdg.portal = {
-        enable = true;
-        xdgOpenUsePortal = true;
-        config.common.default = "gtk";
-
-        extraPortals = with pkgs; [
-          xdg-desktop-portal-gnome
-          xdg-desktop-portal-gtk
-        ];
-      };
-
-      security.polkit.enable = true;
     };
+
+    xdg.portal = {
+      enable = true;
+      xdgOpenUsePortal = true;
+      config.common.default = "gtk";
+
+      extraPortals = with pkgs; [
+        xdg-desktop-portal-gnome
+        xdg-desktop-portal-gtk
+      ];
+    };
+
+    security.polkit.enable = true;
   };
 }

modules/nixos/users.nix

@@ -26,7 +26,7 @@ in
       users = {
         users.toph = {
           isNormalUser = true;
-          passwordFile = config.age.secrets.tophPassword.path;
+          # hashedPasswordFile = config.age.secrets.tophPassword.path;
           shell = pkgs.fish;
 
           extraGroups = [