[desktop] Add steam sleep inhibitor

Adds sleep inhibitor based on whether or not Steam is actively streaming a remote session
[kodi] Add kdeconnect
2025-07-19 15:11:33 -07:00 · 2025-07-19 14:55:35 -07:00 · 2025-07-16 22:38:19 -07:00 · 2025-07-16 18:52:51 -07:00 · 2025-07-13 12:07:01 -07:00 · 2025-07-13 12:06:55 -07:00
34 changed files with 589 additions and 586 deletions
--- a/.goosehints
+++ b/.goosehints
@@ -0,0 +1,21 @@
+NixOS Configurations Repository
+================================
+
+Overview:
+---------
+This repository hosts modular and reproducible NixOS configurations managed via Nix flakes. It is structured to separate concerns across machine-specific setups, common roles, and custom packages.
+
+Directory Structure:
+----------------------
+• packages/      - Custom Nix packages leveraged across various configurations.
+• roles/         - Role-based configurations (e.g., kodi, bluetooth) each with its own module (default.nix) for inclusion in machine setups.
+• machines/      - Machine-specific configurations (e.g., nix-book, z790prors, boxy, wixos) including configuration.nix and hardware-configuration.nix tailored for each hardware.
+• home/          - Home-manager configurations for personal environments and application settings (e.g., home-nix-book.nix, home-z790prors.nix).
+
+Design Principles:
+------------------
+• Modularity: Clear separation between roles, machines, and packages allows for flexible and reusable configurations.
+• Declarative & Reproducible: Using Nix flakes guarantees a fully declarative setup that can be effortlessly reproduced across systems.
+• Scalability: The structure is designed to accommodate adding new roles or machines with minimal disruption to existing configurations.
+
+This file serves as a concise guide for navigating and understanding the repository from an advanced Nix perspective. Further documentation can be found within the respective directories or individual README files where applicable.
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -1,11 +0,0 @@
-keys:
-  - &admin_johno age1ls6a033d4p4u8h4rwazjwt8w4c4xg73wq0mdnm64jajxzcz4k9asvjnks3
-  - &host_z790prors age12l5u7sw59u5pkwp83qm8t3ff7uv0ld2c9k3zh5j4ame9k2szcynqu7ftqe
-  - &host_nixbook age1fa3zqavfmqk4ssa22yne9td90gyqv9q5a8y0s8jp3xak8q7p3yjqyn7rkg
-creation_rules:
-  - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
-    key_groups:
-      - age:
-          - *admin_johno
-          - *host_z790prors
-          - *host_nixbook
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -0,0 +1,110 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Repository Overview
+
+This is a NixOS configuration repository using flakes, managing multiple machines and home-manager configurations. The repository follows a modular architecture with reusable "roles" that can be composed for different machines.
+
+## Architecture
+
+### Flake Structure
+- **flake.nix**: Main entry point defining inputs (nixpkgs, home-manager, plasma-manager, etc.) and outputs for multiple NixOS configurations
+- **Machines**: `nix-book`, `boxy`, `wixos` (WSL configuration)
+- **Home configurations**: Standalone home-manager configuration for user `johno`
+
+### Directory Structure
+- `machines/`: Machine-specific configurations with hardware-configuration.nix
+- `roles/`: Modular system configurations (audio, bluetooth, desktop, users, etc.)
+- `home/`: Home Manager configurations and user-specific modules
+- `home/modules/`: User environment modules (emacs, i3+sway, plasma-manager, tmux)
+- `packages/`: Custom package definitions
+
+### Role-Based Configuration System
+The repository uses a custom "roles" system where each role is a NixOS module with enable options:
+- `roles.desktop`: Desktop environment with sub-options for X11, Wayland, KDE, gaming, SDDM
+- `roles.audio`: Audio configuration
+- `roles.bluetooth`: Bluetooth support
+- `roles.users`: User account management
+- `roles.virtualisation`: Virtualization setup
+- `roles.kodi`: Kodi media center
+
+Example role usage in machine configuration:
+```nix
+roles = {
+  audio.enable = true;
+  desktop = {
+    enable = true;
+    gaming = true;
+    kde = true;
+    wayland = true;
+  };
+  users.enable = true;
+};
+```
+
+## Common Commands
+
+### Building and Switching Configurations
+```bash
+# Build and switch to a specific machine configuration
+sudo nixos-rebuild switch --flake .#<hostname>
+
+# Build without switching
+nixos-rebuild build --flake .#<hostname>
+
+# Build home-manager configuration only
+home-manager switch --flake .#johno
+```
+
+### Available Machine Configurations
+- `nix-book`: Uses `home/home-nix-book.nix`
+- `boxy`: Gaming desktop with AMD GPU, uses `home/home.nix`
+- `wixos`: WSL configuration, uses `home/home.nix`
+
+### Flake Operations
+```bash
+# Update flake inputs
+nix flake update
+
+# Check flake
+nix flake check
+
+# Show flake info
+nix flake show
+```
+
+### Bootstrap New Machine
+Use the provided bootstrap script:
+```bash
+sudo ./bootstrap.sh <hostname>
+```
+This script pulls from the remote git repository and applies the configuration.
+
+## Development Workflow
+
+### Adding New Machines
+1. Create new directory in `machines/<hostname>/`
+2. Add `configuration.nix` with role assignments
+3. Include hardware-configuration.nix (generated by nixos-generate-config)
+4. Add nixosConfiguration to flake.nix outputs
+
+### Adding New Roles
+1. Create directory in `roles/<role-name>/`
+2. Create `default.nix` with module definition using mkEnableOption
+3. Add role import to `roles/default.nix`
+4. Configure role options in machine configurations
+
+### Home Manager Modules
+- Located in `home/modules/`
+- Each module has its own `default.nix`
+- Imported in main home configuration files
+
+## Key Configuration Details
+
+- **Experimental features**: nix-command and flakes are enabled
+- **User**: Primary user is `johno` with trusted-user privileges
+- **Locale**: en_US.UTF-8, America/Los_Angeles timezone
+- **SSH**: OpenSSH enabled on all configurations
+- **Garbage collection**: Automatic, deletes older than 10 days
+- **Unfree packages**: Allowed globally
--- a/bootstrap.sh
+++ b/bootstrap.sh
@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+# bootstrap.sh
+# Usage: sudo ./bootstrap.sh <hostname>
+set -euo pipefail
+
+NEW_HOSTNAME="${1:?missing hostname}"
+FLAKE_URI="git+https://git.johnogle.info/johno/nixos-configs.git#${NEW_HOSTNAME}"
+
+export NIX_CONFIG="experimental-features = nix-command flakes"
+nixos-rebuild switch --flake "$FLAKE_URI"
+
--- a/flake.lock
+++ b/flake.lock
@@ -1,52 +1,13 @@
 {
  "nodes": {
-    "doomemacs": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1733434763,
-        "narHash": "sha256-sebujw5VvBWMS+wXyjiGF81iyjPM/QQDnw5l7tDJCvk=",
-        "owner": "doomemacs",
-        "repo": "doomemacs",
-        "rev": "ba1dca322f9a07bc2b7bec6a98f2c3c55c0bbd77",
-        "type": "github"
-      },
-      "original": {
-        "owner": "doomemacs",
-        "repo": "doomemacs",
-        "type": "github"
-      }
-    },
-    "emacs-overlay": {
-      "inputs": {
-        "nixpkgs": [
-          "nix-doom-emacs-unstraightened"
-        ],
-        "nixpkgs-stable": [
-          "nix-doom-emacs-unstraightened"
-        ]
-      },
-      "locked": {
-        "lastModified": 1735870044,
-        "narHash": "sha256-3t/AdIIniLZHetkG5An08oeB/z/gOAhC4iViw4Aig+Q=",
-        "owner": "nix-community",
-        "repo": "emacs-overlay",
-        "rev": "57ad4a6cfaf4666c9ce71b81bd7243e4ed2d8b01",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-community",
-        "repo": "emacs-overlay",
-        "type": "github"
-      }
-    },
    "flake-compat": {
      "flake": false,
      "locked": {
-        "lastModified": 1733328505,
-        "narHash": "sha256-NeCCThCEP3eCl2l/+27kNNK7QrwZB1IJCrXfrbv5oqU=",
+        "lastModified": 1747046372,
+        "narHash": "sha256-CIVLLkVgvHYbgI2UpXvIIBJ12HWgX+fjA8Xf8PUmqCY=",
        "owner": "edolstra",
        "repo": "flake-compat",
-        "rev": "ff81ac966bb2cae68946d5ed5fc4994f96d0ffec",
+        "rev": "9100a0f413b0c601e0533d1d94ffd501ce2e7885",
        "type": "github"
      },
      "original": {
@@ -55,6 +16,26 @@
        "type": "github"
      }
    },
+    "google-cookie-retrieval": {
+      "inputs": {
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1752428473,
+        "narHash": "sha256-IsE7fdAYbRlZuc0H5FtPfhhuHvlxnDGoAxdlnjpVNCU=",
+        "ref": "refs/heads/main",
+        "rev": "1fad66b55144ab6beaecd900172a21ac3c34dc52",
+        "revCount": 10,
+        "type": "git",
+        "url": "https://git.johnogle.info/johno/google-cookie-retrieval.git"
+      },
+      "original": {
+        "type": "git",
+        "url": "https://git.johnogle.info/johno/google-cookie-retrieval.git"
+      }
+    },
    "home-manager": {
      "inputs": {
        "nixpkgs": [
@@ -62,11 +43,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1735925111,
-        "narHash": "sha256-/NptDI4njO5hH0ZVQ2yzbvTXmBOabZaGYkjhnMJ37TY=",
+        "lastModified": 1752402455,
+        "narHash": "sha256-mCHfZhQKdTj2JhCFcqfOfa3uKZbwUkPQbd0/zPnhOE8=",
        "owner": "nix-community",
        "repo": "home-manager",
-        "rev": "ef64efdbaca99f9960f75efab991e4c49e79a5f1",
+        "rev": "bf893ad4cbf46610dd1b620c974f824e266cd1df",
        "type": "github"
      },
      "original": {
@@ -75,40 +56,17 @@
        "type": "github"
      }
    },
-    "nix-doom-emacs-unstraightened": {
-      "inputs": {
-        "doomemacs": "doomemacs",
-        "emacs-overlay": "emacs-overlay",
-        "nixpkgs": [
-          "nixpkgs"
-        ],
-        "systems": "systems"
-      },
-      "locked": {
-        "lastModified": 1735893424,
-        "narHash": "sha256-/FAzolzHPQiyba5AhzSQcLGDZtBVsMgs87rHMrWMHNk=",
-        "owner": "marienz",
-        "repo": "nix-doom-emacs-unstraightened",
-        "rev": "f90d619eb3d423e6cd3024879a073680ba2f9eba",
-        "type": "github"
-      },
-      "original": {
-        "owner": "marienz",
-        "repo": "nix-doom-emacs-unstraightened",
-        "type": "github"
-      }
-    },
    "nixos-wsl": {
      "inputs": {
        "flake-compat": "flake-compat",
        "nixpkgs": "nixpkgs"
      },
      "locked": {
-        "lastModified": 1736095716,
-        "narHash": "sha256-csysw/Szu98QDiA2lhWk9seYOyCebeVEWL89zh1cduM=",
+        "lastModified": 1752199438,
+        "narHash": "sha256-xSBMmGtq8K4Qv80TMqREmESCAsRLJRHAbFH2T/2Bf1Y=",
        "owner": "nix-community",
        "repo": "NixOS-WSL",
-        "rev": "63c3b4ed1712a3a0621002cd59bfdc80875ecbb0",
+        "rev": "d34d9412556d3a896e294534ccd25f53b6822e80",
        "type": "github"
      },
      "original": {
@@ -120,27 +78,27 @@
    },
    "nixpkgs": {
      "locked": {
-        "lastModified": 1733384649,
-        "narHash": "sha256-K5DJ2LpPqht7K76bsxetI+YHhGGRyVteTPRQaIIKJpw=",
+        "lastModified": 1751792365,
+        "narHash": "sha256-J1kI6oAj25IG4EdVlg2hQz8NZTBNYvIS0l4wpr9KcUo=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "190c31a89e5eec80dd6604d7f9e5af3802a58a13",
+        "rev": "1fd8bada0b6117e6c7eb54aad5813023eed37ccb",
        "type": "github"
      },
      "original": {
        "owner": "NixOS",
-        "ref": "nixos-24.05",
+        "ref": "nixos-unstable",
        "repo": "nixpkgs",
        "type": "github"
      }
    },
    "nixpkgs_2": {
      "locked": {
-        "lastModified": 1735834308,
-        "narHash": "sha256-dklw3AXr3OGO4/XT1Tu3Xz9n/we8GctZZ75ZWVqAVhk=",
+        "lastModified": 1751984180,
+        "narHash": "sha256-LwWRsENAZJKUdD3SpLluwDmdXY9F45ZEgCb0X+xgOL0=",
        "owner": "nixos",
        "repo": "nixpkgs",
-        "rev": "6df24922a1400241dae323af55f30e4318a6ca65",
+        "rev": "9807714d6944a957c2e036f84b0ff8caf9930bc0",
        "type": "github"
      },
      "original": {
@@ -160,11 +118,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1735049224,
-        "narHash": "sha256-fWUd9kyXdepphJ7cCzOsuSo7l0kbFCkUqfgKqZyFZzE=",
+        "lastModified": 1748196248,
+        "narHash": "sha256-1iHjsH6/5UOerJEoZKE+Gx1BgAoge/YcnUsOA4wQ/BU=",
        "owner": "nix-community",
        "repo": "plasma-manager",
-        "rev": "d16bbded0ae452bc088489e7dca3ef58d8d1830b",
+        "rev": "b7697abe89967839b273a863a3805345ea54ab56",
        "type": "github"
      },
      "original": {
@@ -175,47 +133,11 @@
    },
    "root": {
      "inputs": {
+        "google-cookie-retrieval": "google-cookie-retrieval",
        "home-manager": "home-manager",
-        "nix-doom-emacs-unstraightened": "nix-doom-emacs-unstraightened",
        "nixos-wsl": "nixos-wsl",
        "nixpkgs": "nixpkgs_2",
-        "plasma-manager": "plasma-manager",
-        "sops-nix": "sops-nix"
-      }
-    },
-    "sops-nix": {
-      "inputs": {
-        "nixpkgs": [
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1735844895,
-        "narHash": "sha256-CIRlqX9tBK2awJkmVu2cKuap/0QziDXStQZ/u/+e8Z4=",
-        "owner": "Mic92",
-        "repo": "sops-nix",
-        "rev": "24d89184adf76d7ccc99e659dc5f3838efb5ee32",
-        "type": "github"
-      },
-      "original": {
-        "owner": "Mic92",
-        "repo": "sops-nix",
-        "type": "github"
-      }
-    },
-    "systems": {
-      "locked": {
-        "lastModified": 1681028828,
-        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
-        "owner": "nix-systems",
-        "repo": "default",
-        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-systems",
-        "repo": "default",
-        "type": "github"
+        "plasma-manager": "plasma-manager"
      }
    }
  },
--- a/flake.nix
+++ b/flake.nix
@@ -5,11 +5,6 @@
    nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
    nixos-wsl.url = "github:nix-community/NixOS-WSL/main";

-    sops-nix = {
-      url = "github:Mic92/sops-nix";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
-
    home-manager = {
      url = "github:nix-community/home-manager";
      inputs.nixpkgs.follows = "nixpkgs";
@@ -21,8 +16,8 @@
      inputs.home-manager.follows = "home-manager";
    };

-    nix-doom-emacs-unstraightened = {
-      url = "github:marienz/nix-doom-emacs-unstraightened";
+    google-cookie-retrieval = {
+      url = "git+https://git.johnogle.info/johno/google-cookie-retrieval.git";
      inputs.nixpkgs.follows = "nixpkgs";
    };
  };
@@ -30,35 +25,26 @@
  outputs = { self, nixpkgs, nixos-wsl, ... } @ inputs: let
    baseModules = [
      ./roles
-      inputs.sops-nix.nixosModules.sops
      inputs.home-manager.nixosModules.home-manager
      {
        home-manager.useGlobalPkgs = true;
        home-manager.useUserPackages = true;
        home-manager.sharedModules = [
          inputs.plasma-manager.homeManagerModules.plasma-manager
-          inputs.nix-doom-emacs-unstraightened.hmModule
        ];
+        home-manager.extraSpecialArgs = {
+          globalInputs = inputs;
+        };
      }
    ];
  in {
-    nixosConfigurations.z790prors-nix = nixpkgs.lib.nixosSystem rec {
-      system = "x86_64-linux";
-      specialArgs = { inherit inputs; };
-      modules = baseModules ++ [
-        ./machines/z790prors/configuration.nix
-        {
-          home-manager.users.johno = import ./home/home-z790prors.nix;
-        }
-      ];
-    };
-
    nixosConfigurations.nix-book = nixpkgs.lib.nixosSystem rec {
      system = "x86_64-linux";
      modules = baseModules ++ [
        ./machines/nix-book/configuration.nix
        {
          home-manager.users.johno = import ./home/home-nix-book.nix;
+          home-manager.extraSpecialArgs = { inherit system; };
        }
      ];
    };
@@ -69,7 +55,8 @@
        ./machines/boxy/configuration.nix
        inputs.home-manager.nixosModules.home-manager
        {
-          home-manager.users.johno = import ./home/home-default.nix;
+          home-manager.users.johno = import ./home/home.nix;
+          home-manager.extraSpecialArgs = { inherit system; };
        }
      ];
    };
@@ -81,9 +68,22 @@
        ./machines/wixos/configuration.nix
        inputs.home-manager.nixosModules.home-manager
        {
-          home-manager.users.johno = import ./home/home-default.nix;
+          home-manager.users.johno = import ./home/home.nix;
+          home-manager.extraSpecialArgs = { inherit system; };
        }
      ];
    };
+
+    homeConfigurations."johno" = inputs.home-manager.lib.homeManagerConfiguration {
+      pkgs = inputs.nixpkgs.legacyPackages."x86_64-linux";
+      modules = [
+        inputs.plasma-manager.homeManagerModules.plasma-manager
+        ./home/home.nix
+      ];
+      extraSpecialArgs = {
+        system = "x86_64-linux";
+        globalInputs = inputs;
+      };
+    };
  };
 }
--- a/home/home-nix-book.nix
+++ b/home/home-nix-book.nix
@@ -2,7 +2,7 @@

 {
  imports = [
-    ./home-default.nix
+    ./home.nix
  ];

  home.i3_sway.extraSwayConfig = {
--- a/home/home-z790prors.nix
+++ b/home/home-z790prors.nix
@@ -1,7 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-{
-  imports = [
-    ./home-default.nix
-  ];
-}
--- a/home/home-default.nix
+++ b/home/home-default.nix
@@ -1,4 +1,4 @@
-{ pkgs, customPkgs, ... }:
+{ pkgs, customPkgs, globalInputs, system, ... }:

 let
  customPkgs = pkgs.callPackage ../packages {};
@@ -39,10 +39,13 @@ in
    # '')

    pkgs.bitwarden
+    pkgs.claude-code
+    pkgs.codex
    pkgs.dunst
    pkgs.element-desktop
    pkgs.fd
    #pkgs.fluffychat # security vulnerability in current version
+    pkgs.goose-cli
    pkgs.gzip
    pkgs.htop
    pkgs.jellyfin-media-player
@@ -53,15 +56,23 @@ in
    pkgs.moonlight-qt
    pkgs.ncdu
    pkgs.nextcloud-talk-desktop
+    pkgs.openscad-unstable
    pkgs.pandoc
-    pkgs.pinentry-qt
+    #pkgs.pinentry-qt
    #pkgs.pytest
    pkgs.shellcheck
    pkgs.solaar # Logitech management software
+    (pkgs.snapcast.override { pulseaudioSupport = true; })
    pkgs.tmux
    pkgs.waybar
    pkgs.wofi
    pkgs.vlc
+
+    ## Kubernetes cluster management
+    pkgs.kubectl
+    pkgs.kubernetes-helm
+
+    globalInputs.google-cookie-retrieval.packages.${system}.default
  ];

  # Home Manager is pretty good at managing dotfiles. The primary way to manage
@@ -77,9 +88,10 @@ in
    #   org.gradle.console=verbose
    #   org.gradle.daemon.idletimeout=3600000
    # '';
-
  };

+  targets.genericLinux.enable = true;
+
  # Home Manager can also manage your environment variables through
  # 'home.sessionVariables'. These will be explicitly sourced when using a
  # shell provided by Home Manager. If you don't want to manage your shell
@@ -97,28 +109,27 @@ in
  #  /etc/profiles/per-user/johno/etc/profile.d/hm-session-vars.sh
  #
  home.sessionVariables = {
-    ENABLE_GAMESCOPE_WSI = "1";
  };

  home.sessionPath = [
  ];

-  nixpkgs.config.allowUnfree = true;
-
  imports = [
    ./modules/emacs
    ./modules/i3+sway
-    ./modules/lutris
    ./modules/plasma-manager
    ./modules/tmux
  ];

-  programs.bash.enable = true;
-
-  nix = {
-    gc = {
-      automatic = true;
-    };
+  programs.bash = {
+    enable = true;
+    initExtra = ''
+      codex() {
+        local key
+        key="$(rbw get openai-api-key-codex)"
+        OPENAI_API_KEY="$key" command codex "$@"
+      }
+    '';
  };

  # Let Home Manager install and manage itself.
@@ -139,15 +150,6 @@ in
    };
  };

-  programs.gpg.enable = true;
-
-  services.gpg-agent = {
-    enable = true;
-    enableSshSupport = true;
-    defaultCacheTtl = 1800;
-    pinentryPackage = pkgs.pinentry-qt;
-  };
-
  programs.jq.enable = true;

  programs.k9s.enable = true;
@@ -180,17 +182,16 @@ in
    };
  };

-  services.home-manager.autoUpgrade = {
-    enable = true;
-    frequency = "weekly";
-  };
-
  services.kdeconnect = {
    enable = true;
    indicator = true;
    package = pkgs.kdePackages.kdeconnect-kde;
  };

+  services.gnome-keyring = {
+    enable = true;
+  };
+
  services.syncthing = {
    enable = true;
    tray = {
--- a/home/modules/emacs/default.nix
+++ b/home/modules/emacs/default.nix
@@ -2,10 +2,21 @@

 with lib;

+let
+  doomEmacs = pkgs.fetchFromGitHub {
+    owner = "doomemacs";
+    repo = "doomemacs";
+    rev = "8406c1ff22b95bd0f816de4a0223fa3ce3c82568";
+    sha256 = "sha256-rOkgOdmLESVAbOeEM9nJTzxyI+akdk48Ed2VlktOy3Q=";
+  };
+in
 {
  config = {
    home.packages = [
+      pkgs.emacs
+
      pkgs.emacs-all-the-icons-fonts
+      pkgs.fira-code
      pkgs.fontconfig
      pkgs.graphviz
      pkgs.isort
@@ -19,15 +30,18 @@ with lib;
      pkgs.python3
    ];

-    programs.doom-emacs = {
-      enable = true;
-      doomDir = ./doom;
-    };
-
    fonts.fontconfig.enable = true;

+    home.file."${config.xdg.configHome}/emacs".source = doomEmacs;
+    home.sessionPath = [
+      "${config.xdg.configHome}/emacs/bin"
+    ];
+
    home.sessionVariables = {
-      EDITOR = "emacs -nw";
+      DOOMDIR = "${config.xdg.configHome}/doom";
+      DOOMLOCALDIR = "${config.xdg.dataHome}/doom";
    };
+
+    home.file."${config.xdg.configHome}/doom".source = ./doom;
  };
 }
--- a/home/modules/emacs/doom/config.el
+++ b/home/modules/emacs/doom/config.el
@@ -72,6 +72,16 @@
 ;;         org-caldav-files nil
 ;;         org-caldav-sync-direction 'cal->org))

+(defun my/get-rbw-password (alias)
+  "Return the password for ALIAS via rbw, unlocking the vault only if needed."
+  (let* ((cmd     (format "rbw get %s 2>&1" alias))
+         (output  (shell-command-to-string cmd)))
+    (string-trim output)))
+
+(use-package! gptel
+  :defer t
+  :config
+  (setq! gptel-api-key (my/get-rbw-password "openai-api-key-chatgpt-el")))

 ;; Whenever you reconfigure a package, make sure to wrap your config in an
 ;; `after!' block, otherwise Doom's defaults may override your settings. E.g.
--- a/home/modules/emacs/doom/init.el
+++ b/home/modules/emacs/doom/init.el
@@ -108,7 +108,7 @@

       :os
       (:if (featurep :system 'macos) macos)  ; improve compatibility with macOS
-       ;;tty               ; improve the terminal Emacs experience
+       tty               ; improve the terminal Emacs experience

       :lang
       ;;agda              ; types of types of types of types...
--- a/home/modules/emacs/doom/packages.el
+++ b/home/modules/emacs/doom/packages.el
@@ -50,3 +50,5 @@
 ;; (unpin! t)

 ;; (package! org-caldav)
+
+(package! gptel :recipe (:nonrecursive t))
--- a/home/modules/lutris/default.nix
+++ b/home/modules/lutris/default.nix
@@ -1,9 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-{
-  home.packages = [
-    pkgs.gamescope
-    pkgs.lutris
-    pkgs.mangohud
-  ];
-}
--- a/machines/boxy/configuration.nix
+++ b/machines/boxy/configuration.nix
@@ -2,7 +2,7 @@
 # your system. Help is available in the configuration.nix(5) man page, on
 # https://search.nixos.org/options and in the NixOS manual (`nixos-help`).

-{ lib, ... }:
+{ lib, pkgs, ... }:

 with lib;

@@ -14,9 +14,17 @@ with lib;

  roles = {
    audio.enable = true;
+    bluetooth.enable = true;
+    desktop = {
+      enable = true;
+      gaming = true;
+      kde = true;
+      sddm = true;
+      wayland = true;
+    };
    kodi = {
      enable = true;
-      autologin = true;
+      autologin = false;
      wayland = true;
    };
    users.enable = true;
@@ -28,9 +36,15 @@ with lib;

  networking.hostName = "boxy"; # Define your hostname.

+  services.xserver.videoDrivers = [ "amdgpu" ];
  hardware.graphics.enable = true;
-
-  services.displayManager.enable = mkForce false;
+  hardware.graphics.enable32Bit = true;
+  hardware.graphics.extraPackages = with pkgs; [
+    amdvlk
+  ];
+  hardware.graphics.extraPackages32 = with pkgs; [
+    driversi686Linux.amdvlk
+  ];

  # This option defines the first version of NixOS you have installed on this particular machine,
  # and is used to maintain compatibility with application data (e.g. databases) created on older NixOS versions.
--- a/machines/boxy/hardware-configuration.nix
+++ b/machines/boxy/hardware-configuration.nix
@@ -9,7 +9,7 @@
    ];

  boot.initrd.availableKernelModules = [ "xhci_pci" "nvme" "thunderbolt" "usb_storage" "usbhid" "sd_mod" ];
-  boot.initrd.kernelModules = [ ];
+  boot.initrd.kernelModules = [ "amdgpu" ];
  boot.kernelModules = [ "kvm-amd" ];
  boot.extraModulePackages = [ ];

--- a/machines/nix-book/configuration.nix
+++ b/machines/nix-book/configuration.nix
@@ -14,7 +14,10 @@
    bluetooth.enable = true;
    desktop = {
      enable = true;
-      waylandOnly = true;
+      wayland = true;
+      gaming = false;
+      kde = true;
+      sddm = true;
    };
    nfs-mounts.enable = true;
    printing.enable = true;
--- a/machines/wixos/configuration.nix
+++ b/machines/wixos/configuration.nix
@@ -11,6 +11,15 @@
  imports = [
  ];

+  roles = {
+    audio.enable = true;
+    desktop = {
+      enable = true;
+      wayland = true;
+    };
+    users.enable = true;
+  };
+
  networking.hostName = "wixos";

  wsl.enable = true;
@@ -20,6 +29,29 @@
  wsl.wslConf.network.hostname = "wixos";
  wsl.wslConf.user.default = "johno";

+  services.xserver.videoDrivers = [ "nvidia" ];
+  hardware.graphics = { 
+    enable = true;
+
+    extraPackages = with pkgs; [
+      mesa
+      libvdpau-va-gl
+      vaapiVdpau
+    ];
+  };
+  environment.sessionVariables = {
+    LD_LIBRARY_PATH = [
+      "/usr/lib/wsl/lib"
+      "/run/opengl-driver/lib"
+    ];
+  };
+  hardware.nvidia = {
+    modesetting.enable = true;
+    nvidiaSettings = true;
+    open = true;
+    package = config.boot.kernelPackages.nvidiaPackages.latest;
+  };
+
  # This value determines the NixOS release from which the default
  # settings for stateful data, like file locations and database versions
  # on your system were taken. It's perfectly fine and recommended to leave
--- a/machines/z790prors/configuration.nix
+++ b/machines/z790prors/configuration.nix
@@ -1,70 +0,0 @@
-# Edit this configuration file to define what should be installed on
-# your system.  Help is available in the configuration.nix(5) man page
-# and in the NixOS manual (accessible by running ‘nixos-help’).
-
-{ ... }:
-
-{
-  imports =
-    [ # Include the results of the hardware scan.
-      ./hardware-configuration.nix
-    ];
-
-  roles = {
-    audio.enable = true;
-    desktop = {
-      enable = true;
-      x11Only = true;
-    };
-    kodi.enable = true;
-    nfs-mounts.enable = true;
-    printing.enable = true;
-    spotifyd.enable = true;
-    users = {
-      enable = true;
-      extraGroups = [ "input" "libvirtd" ];
-    };
-    virtualisation.enable = true;
-  };
-
-  # Use the systemd-boot EFI boot loader.
-  #boot.loader.systemd-boot.enable = true;
-  boot.loader.efi.canTouchEfiVariables = true;
-  boot.loader.efi.efiSysMountPoint = "/boot";
-  boot.loader.grub = {
-    enable = true;
-    useOSProber = true;
-    devices = [ "nodev" ];
-  };
-
-  networking = {
-    hostName = "z790prors-nix"; # Define your hostname.
-    domain = "oglehome";
-    defaultGateway = "10.0.0.1";
-    nameservers = [ "10.0.0.1" ];
-
-    # The global useDHCP flag is deprecated, therefore explicitly set to false here.
-    # Per-interface useDHCP will be mandatory in the future, so this generated config
-    # replicates the default behaviour.
-    useDHCP = false;
-    
-    interfaces.enp3s0.ipv4.addresses = [{
-      address = "10.0.0.37";
-      prefixLength = 24;
-    }];
-  };
-
-  time.timeZone = "America/Los_Angeles";
-  time.hardwareClockInLocalTime = true;
-
-  # TODO: Figure out something with this
-  nix.settings.secret-key-files = /root/cache-priv-key.pem;
-
-  # This value determines the NixOS release from which the default
-  # settings for stateful data, like file locations and database versions
-  # on your system were taken. It‘s perfectly fine and recommended to leave
-  # this value at the release version of the first install of this system.
-  # Before changing this value read the documentation for this option
-  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
-  system.stateVersion = "21.11"; # Did you read the comment?
-}
--- a/machines/z790prors/hardware-configuration.nix
+++ b/machines/z790prors/hardware-configuration.nix
@@ -1,85 +0,0 @@
-# Do not modify this file!  It was generated by ‘nixos-generate-config’
-# and may be overwritten by future invocations.  Please make changes
-# to /etc/nixos/configuration.nix instead.
-{ config, lib, modulesPath, pkgs, ... }:
-
-{
-  imports =
-    [ (modulesPath + "/installer/scan/not-detected.nix")
-    ];
-
-  boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" ];
-  boot.initrd.kernelModules = [
-    "nvidia"
-    "nvidia_modeset"
-    "nvidia_uvm"
-    "nvidia_drm"
-  ];
-  boot.kernelPackages = pkgs.linuxPackages_latest;
-  boot.kernelParams = [
-    "nvidia_drm.fbdev=1"
-    "nvidia_drm.modeset=1"
-  ];
-  boot.kernelModules = [ "kvm-intel" ];
-  boot.extraModulePackages = [ ];
-
-  hardware.graphics.enable = true;
-  services.xserver.videoDrivers = ["nvidia"];
-  services.xserver.screenSection = ''Option "metamodes" "3440x1440_165 +0+0"'';
-  services.xserver.enableTearFree = true;
-  hardware.nvidia = {
-    modesetting.enable = true;
-    powerManagement.enable = false;
-    powerManagement.finegrained = false;
-    open = false;
-    nvidiaSettings = true;
-    package = config.boot.kernelPackages.nvidiaPackages.latest;
-    #package = config.boot.kernelPackages.nvidiaPackages.mkDriver {
-      #version = "555.58";
-
-      #sha256_64bit = "sha256-bXvcXkg2kQZuCNKRZM5QoTaTjF4l2TtrsKUvyicj5ew=";
-      #sha256_aarch64 = lib.fakeSha256;
-      #openSha256 = lib.fakeSha256;
-      #settingsSha256 = "sha256-vWnrXlBCb3K5uVkDFmJDVq51wrCoqgPF03lSjZOuU8M=";
-      #persistencedSha256 = lib.fakeSha256;
-    #};
-  };
-  environment.sessionVariables = {
-    KWIN_DRM_ALLOW_NVIDIA_COLORSPACE = "1";
-  };
-
-  fileSystems."/" =
-    { device = "/dev/disk/by-uuid/8d996d13-6d55-4524-83a2-6f6fb47a09ea";
-      fsType = "btrfs";
-    };
-
-  fileSystems."/boot" =
-    { device = "/dev/disk/by-uuid/7445-C336";
-      fsType = "vfat";
-    };
-
-  fileSystems."/steam" =
-    { device = "/dev/disk/by-uuid/E494DA9A94DA6E94";
-      fsType = "ntfs";
-      options = [
-        "nofail"
-        "rw"
-        "user"
-        "exec" # This needs to go after "user". See https://askubuntu.com/questions/30243/why-does-ubuntu-refuse-to-execute-files-from-an-ntfs-partition
-        "umask=000"
-      ];
-    };
-
-  swapDevices = [ ];
-
-  services.beesd.filesystems = {
-    root = {
-      spec = "LABEL=nixos";
-      hashTableSizeMB = 4096;
-      verbosity = "crit";
-    };
-  };
-
-  powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";
-  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
-}
--- a/roles/audio/default.nix
+++ b/roles/audio/default.nix
@@ -22,6 +22,7 @@ in
        enable = true;
        pulse.enable = true;
      };
+
      services.pulseaudio = {
        package = pkgs.pulseaudioFull;
        extraConfig = ''
@@ -29,6 +30,11 @@ in
          load-module module-switch-on-connect
        '';
      };
+
+      services.squeezelite = {
+        #enable = true;
+        pulseAudio = true;
+      };
    };

 }
--- a/roles/default.nix
+++ b/roles/default.nix
@@ -10,7 +10,6 @@ with lib;
    ./kodi
    ./nfs-mounts
    ./printing
-    ./secrets
    ./spotifyd
    ./users
    ./virtualisation
@@ -31,6 +30,12 @@ with lib;
    };
    time.timeZone = "America/Los_Angeles";

+    services.xserver.xkb = {
+      layout = "us";
+      variant = "";
+      options = "caps:escape";
+    };
+
    # Don't go to emergency mode if we aren't able to mount filesystems.
    # This is silly if you have multiple hard drives or partitions
    # configured on a machine and then one goes away intentionally or
@@ -43,6 +48,7 @@ with lib;

    environment.systemPackages = with pkgs; [
      git
+      glances
      pciutils
      tree
      usbutils
--- a/roles/desktop/default.nix
+++ b/roles/desktop/default.nix
@@ -2,145 +2,24 @@

 with lib;

-let
-  cfg = config.roles.desktop;
-
-  customPackages = pkgs.callPackage ../../packages {};
-
-  basePackages = with pkgs; [
-    bambu-studio
-    blender
-    brightnessctl
-    ghostty
-    mangohud # Should probably get refactored with steam/gamescope out to a gaming role
-    protonup-qt
-
-    #customPackages.vulkanHDRLayer
-  ];
-
-  x11BasePackages = with pkgs; [
-  ];
-
-  x11OnlyPackages = with pkgs; [
-    emacs
-  ];
-
-  waylandBasePackages = with pkgs; [
-    grim
-    slurp
-    wl-clipboard
-    mako
-  ];
-
-  waylandOnlyPackages = with pkgs; [
-    emacs-gtk
-  ];
-in
 {
  options.roles.desktop = {
-    enable = mkEnableOption "Enable the desktop role";
-    x11Only = mkOption {
-      type = types.bool;
-      default = false;
-    };
-    waylandOnly = mkOption {
-      type = types.bool;
-      default = false;
-    };
+    enable = mkEnableOption "Enable the desktop role.";
+
+    x11 = mkOption { type = types.bool; default = false; description = "Enable X11 support."; };
+    wayland = mkOption { type = types.bool; default = false; description = "Enable Wayland support."; };
+    kde = mkOption { type = types.bool; default = false; description = "Enable KDE."; };
+    gaming = mkOption { type = types.bool; default = false; description = "Enable gaming support."; };
+    sddm = mkOption { type = types.bool; default = false; description = "Enable SDDM greeter."; };
  };

-  config = mkIf cfg.enable
-    {
-      services.xserver.xkb = {
-        layout = "us";
-        variant = "";
-        options = "caps:escape";
-      };
-      services.xserver.enable = true;
-
-      services.displayManager.sddm = {
-        enable = true;
-        wayland.enable = !cfg.x11Only;
-      };
-      services.desktopManager.plasma6.enable = true;
-
-      services.xserver.windowManager.i3 = {
-        enable = true;
-        extraPackages = with pkgs; [
-          dmenu
-          i3status
-          i3lock
-        ];
-      };
-      programs.dconf.enable = true;
-      services.gnome.gnome-keyring.enable = true;
-
-      programs.sway = mkIf (!cfg.x11Only) {
-        enable = true;
-        wrapperFeatures.gtk = true;
-      };
-      programs.light.enable = mkIf (!cfg.x11Only) true;
-
-      programs.kdeconnect.enable = true;
-      programs.java.enable = true;
-      programs.gamemode = {
-        enable = true;
-
-      };
-      programs.gamescope = {
-        enable = true;
-        #capSysNice = true;
-        args = [
-          #"--adaptive-sync"
-          #"--nested-refresh 165"
-          #"--backend wayland"
-          "--hdr-enabled"
-          "--hdr-itm-enable"
-          "--hdr-debug-force-output"
-          "--mangoapp"
-          "--rt"
-          "--steam"
-          #"--xwayland-count 2"
-        ];
-        env = {
-          #PROTON_DISABLE_NVAPI = "1";
-          MANGOHUD = "1";
-          #MANGOHUD_CONFIG = "cpu_temp gpu_temp ram vram";
-        };
-      };
-      programs.steam = {
-        enable = true;
-        remotePlay.openFirewall = true;
-        localNetworkGameTransfers.openFirewall = true;
-        gamescopeSession = {
-          enable = true;
-        };
-        extraCompatPackages = with pkgs; [
-          proton-ge-bin
-        ];
-        #package = pkgs.steam.override {
-        #withJava = true;
-        #withPrimus = true;
-        #extraPkgs = pkgs: [ bumblebee glxinfo ];
-        #};
-      };
-      services.sunshine = {
-        enable = true;
-        autoStart = false;
-        capSysAdmin = true;
-        openFirewall = true;
-      };
-
-      virtualisation.docker.enable = true;
-      users.extraGroups.docker.members = [ "johno" ];
-
-      environment.systemPackages = with pkgs; mkMerge [
-        basePackages
-        (mkIf (!cfg.waylandOnly) x11BasePackages)
-        (mkIf cfg.x11Only x11OnlyPackages)
-        (mkIf (!cfg.x11Only) waylandBasePackages)
-        (mkIf (cfg.waylandOnly) waylandOnlyPackages)
-      ];
-    };
-
+  imports = [
+    ./x11.nix
+    ./wayland.nix
+    ./gaming.nix
+    ./kde.nix
+    ./programs.nix
+    ./sddm.nix
+    ./steam-sleep-inhibitor.nix
+  ];
 }
--- a/roles/desktop/gaming.nix
+++ b/roles/desktop/gaming.nix
@@ -0,0 +1,18 @@
+{ lib, config, pkgs, ... }:
+
+with lib;
+
+let
+  cfg = config.roles.desktop;
+in
+{
+  config = mkIf (cfg.enable && cfg.gaming) {
+    environment.systemPackages = with pkgs; [
+      steam
+      lutris
+      moonlight
+    ];
+
+    # Possibly other gaming specific services or settings
+  };
+}
--- a/roles/desktop/kde.nix
+++ b/roles/desktop/kde.nix
@@ -0,0 +1,12 @@
+{ config, lib, pkgs, ... }:
+
+with lib;
+
+let
+  cfg = config.roles.desktop;
+in
+{
+  config = mkIf (cfg.enable && cfg.kde) {
+    services.desktopManager.plasma6.enable = true;
+  };
+}
--- a/roles/desktop/programs.nix
+++ b/roles/desktop/programs.nix
@@ -0,0 +1,20 @@
+{ lib, config, pkgs, ... }:
+
+with lib;
+
+let
+  cfg = config.roles.desktop;
+in
+{
+  config = mkIf cfg.enable {
+    environment.systemPackages = with pkgs; [
+      brightnessctl
+      emacs-nox
+      moonlight-qt
+    ];
+
+    programs.dconf.enable = true;
+    services.gnome.gnome-keyring.enable = true;
+    programs.kdeconnect.enable = true;
+  };
+}
--- a/roles/desktop/sddm.nix
+++ b/roles/desktop/sddm.nix
@@ -0,0 +1,15 @@
+{ lib, config, pkgs, ... }:
+
+with lib;
+
+let
+  cfg = config.roles.desktop;
+in
+{
+  config = mkIf (cfg.enable && cfg.sddm) {
+    services.displayManager.sddm = {
+      enable = true;
+      wayland.enable = (!cfg.x11 && cfg.wayland);
+    };
+  };
+}
--- a/roles/desktop/steam-sleep-inhibitor.nix
+++ b/roles/desktop/steam-sleep-inhibitor.nix
@@ -0,0 +1,116 @@
+{ lib, config, pkgs, ... }:
+
+with lib;
+
+let
+  cfg = config.roles.desktop;
+  
+  steamSleepInhibitor = pkgs.writeShellScript "steam-sleep-inhibitor" ''
+    #!/usr/bin/env bash
+    
+    # Steam log path - adjust if different
+    STEAM_LOG="$HOME/.local/share/Steam/logs/streaming_log.txt"
+    FALLBACK_LOG="$HOME/.steam/steam/logs/streaming_log.txt"
+    
+    # Find Steam log file
+    if [[ -f "$STEAM_LOG" ]]; then
+      LOG_FILE="$STEAM_LOG"
+    elif [[ -f "$FALLBACK_LOG" ]]; then
+      LOG_FILE="$FALLBACK_LOG"
+    else
+      # Monitor Steam process for streaming activity
+      LOG_FILE=""
+    fi
+    
+    INHIBITOR_PID=""
+    MONITORING=false
+    
+    cleanup() {
+      if [[ -n "$INHIBITOR_PID" ]]; then
+        echo "Stopping sleep inhibitor (PID: $INHIBITOR_PID)"
+        kill "$INHIBITOR_PID" 2>/dev/null
+      fi
+      exit 0
+    }
+    
+    start_inhibitor() {
+      if [[ -z "$INHIBITOR_PID" ]]; then
+        echo "Starting sleep inhibitor for Steam Remote Play session"
+        ${pkgs.systemd}/bin/systemd-inhibit \
+          --what=sleep \
+          --who="Steam Remote Play" \
+          --why="Active streaming session detected" \
+          --mode=block \
+          sleep infinity &
+        INHIBITOR_PID=$!
+      fi
+    }
+    
+    stop_inhibitor() {
+      if [[ -n "$INHIBITOR_PID" ]]; then
+        echo "Stopping sleep inhibitor - streaming session ended"
+        kill "$INHIBITOR_PID" 2>/dev/null
+        INHIBITOR_PID=""
+      fi
+    }
+    
+    # Check if Steam Remote Play is active by looking for streaming processes
+    check_streaming_active() {
+      # Check for Steam streaming processes
+      if pgrep -f "streaming_client" >/dev/null || \
+         pgrep -f "steamremoteplay" >/dev/null || \
+         ${pkgs.procps}/bin/pgrep -f "Remote Play" >/dev/null; then
+        return 0
+      fi
+      
+      # Check for active network connections on Steam streaming ports
+      if ${pkgs.nettools}/bin/netstat -an 2>/dev/null | grep -E ":(27036|27037)" | grep ESTABLISHED >/dev/null; then
+        return 0
+      fi
+      
+      return 1
+    }
+    
+    trap cleanup EXIT INT TERM
+    
+    echo "Steam sleep inhibitor monitoring started"
+    
+    while true; do
+      if check_streaming_active; then
+        if [[ "$MONITORING" == "false" ]]; then
+          MONITORING=true
+          start_inhibitor
+        fi
+      else
+        if [[ "$MONITORING" == "true" ]]; then
+          MONITORING=false
+          stop_inhibitor
+        fi
+      fi
+      
+      sleep 10
+    done
+  '';
+in
+{
+  config = mkIf (cfg.enable && cfg.kde && cfg.gaming) {
+    # Steam streaming sleep inhibitor service
+    systemd.user.services.steam-sleep-inhibitor = {
+      description = "Steam Remote Play Sleep Inhibitor";
+      wantedBy = [ "default.target" ];
+      after = [ "graphical-session.target" ];
+      
+      serviceConfig = {
+        Type = "simple";
+        ExecStart = "${steamSleepInhibitor}";
+        Restart = "always";
+        RestartSec = "5";
+      };
+    };
+
+    # Steam-specific environment variables to prevent sleep interference
+    environment.sessionVariables = {
+      SDL_VIDEO_ALLOW_SCREENSAVER = "1";
+    };
+  };
+}
--- a/roles/desktop/wayland.nix
+++ b/roles/desktop/wayland.nix
@@ -0,0 +1,23 @@
+{ lib, config, pkgs, ... }:
+
+with lib;
+
+let
+  cfg = config.roles.desktop;
+in
+{
+  config = mkIf (cfg.enable && cfg.wayland) {
+    programs.sway = {
+      enable = true;
+      wrapperFeatures.gtk = true;
+    };
+    programs.light.enable = true;
+
+    environment.systemPackages = with pkgs; [
+      grim
+      slurp
+      wl-clipboard
+      mako
+    ];
+  };
+}
--- a/roles/desktop/x11.nix
+++ b/roles/desktop/x11.nix
@@ -0,0 +1,19 @@
+{ lib, config, pkgs, ... }:
+
+with lib;
+
+let
+  cfg = config.roles.desktop;
+in
+{
+  config = mkIf (cfg.enable && cfg.x11) {
+    services.xserver = {
+      enable = true;
+
+      windowManager.i3 = {
+        enable = true;
+        extraPackages = with pkgs; [ dmenu i3status i3lock ];
+      };
+    };
+  };
+}
--- a/roles/kodi/default.nix
+++ b/roles/kodi/default.nix
@@ -27,45 +27,30 @@ in
    ]);
  in mkIf cfg.enable
    {
-      users.extraUsers.kodi.isNormalUser = true;
+      users.extraUsers.kodi = {
+        isNormalUser = true;
+        extraGroups = [ "wheel" "networkmanager" "audio" "video" ];
+      };

      networking.firewall = {
        allowedTCPPorts = [ 8080 ];
        allowedUDPPorts = [ 8080 ];
      };

-      services = if cfg.autologin then mkMerge [
-        (mkIf cfg.wayland {
-          cage = mkIf cfg.wayland {
-            user = "kodi";
-            program = "${kodiPkg}/bin/kodi-standalone";
-            enable = true;
-          };
-          xserver = {
-            enable = false;
-            autorun = false;
-          };
-        })
+      environment.systemPackages = with pkgs; [
+        kodiPkg
+        wget
+      ];

-        (mkIf (!cfg.wayland) {
-          xserver = {
-            enable = true;
-            desktopManager.kodi = {
-              enable = true;
-              package = kodiPkg;
-            };
-            displayManager.lightdm = {
-              enable = true;
-              greeter.enable = false;
-            };
-          };
+      programs.kdeconnect.enable = true;
+
+      services = if cfg.autologin then {
          displayManager = {
            autoLogin.enable = true;
            autoLogin.user = "kodi";
            defaultSession = "kodi";
-            sessionData.autologinSession = "kodi";
+            sessionData.autologinSession = "plasma";
          };
-        })
-      ] else {};
+      } else {};
    };
 }
--- a/roles/secrets/default.nix
+++ b/roles/secrets/default.nix
@@ -1,8 +0,0 @@
-{ config, lib, pkgs, inputs, ... }:
-
-{
-  sops.defaultSopsFile = ../../secrets/secrets.yaml;
-  sops.defaultSopsFormat = "yaml";
-  sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" "/home/johno/.ssh/id_ed25519" ];
-  sops.secrets.example_key = {};
-}
--- a/roles/virtualisation/default.nix
+++ b/roles/virtualisation/default.nix
@@ -14,5 +14,7 @@ in
    {
      virtualisation.libvirtd.enable = true;
      programs.virt-manager.enable = true;
+      virtualisation.docker.enable = true;
+      users.extraGroups.docker.members = [ "johno" ];
    };
 }
--- a/secrets/secrets.yaml
+++ b/secrets/secrets.yaml
@@ -1,48 +0,0 @@
-hello: ENC[AES256_GCM,data:5ZpbPx3D8gQc1fOhViUqiCr0zLWYotB+vIBixqTbqP9XLS52y6tr5DXus0aV9mTgka5deqc=,iv:yPJaCqDD9WD56swfBjSm7A62ZTTIQDqyAKOgP1ese+U=,tag:bo8+7Ne2f9aEZSvpkt1fzA==,type:str]
-example_key: ENC[AES256_GCM,data:v15bEcb0H3vaj13blg==,iv:9P3IA7ChBamo41VE8G8tj46sZqeijsO1LcvwLtEPVPA=,tag:o/lAyAYYGNLP9EjQNa/K8Q==,type:str]
-example_array:
-    - ENC[AES256_GCM,data:3Vwa7dfNfKzRc/xpk6I=,iv:IevBgxwWdaBvZY1ywteWcfWwDIA8lK3FTWs67lLBKxw=,tag:Mx5lzUeNZ/3wJBWAl5XSBw==,type:str]
-    - ENC[AES256_GCM,data:epkT6WPGW5Oe/S+4HtU=,iv:N0yoDuieAaEi+NuCoCL4zrkhaDDdkttboI89m+UccjQ=,tag:OoERRByb0OM4un9oGLJQgA==,type:str]
-#ENC[AES256_GCM,data:YzMFXxn3sbbHpGB4jPRtRw==,iv:TN6ogQuH7c6xtDoWt0Ew9B2f7wuaipJynvscZmaJYoU=,tag:No0UwEktEyMNBg/46P+Zmg==,type:comment]
-example_number: ENC[AES256_GCM,data:jmLoVC+8YIlB2A==,iv:u9GztD/aE9UN5zWq3Am2nhYwmYt3sf8sy65MHbhVoD0=,tag:wKuf1mMr5XBJveJrz0uHPA==,type:float]
-example_booleans:
-    - ENC[AES256_GCM,data:ZacILA==,iv:xo+7aFFQXzbJzKDY0mYTeFLf10AlnHkywDRAMHeprEM=,tag:F/OnJdqjrZP02sTLWLmnbg==,type:bool]
-    - ENC[AES256_GCM,data:NaFrvrs=,iv:kKDmGs9u/w5qrZ/379Jlx8AotUVADvH+eHwHCqykmkE=,tag:nD9TsmkXUm4ABaT1ABWmcg==,type:bool]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age:
-        - recipient: age1ls6a033d4p4u8h4rwazjwt8w4c4xg73wq0mdnm64jajxzcz4k9asvjnks3
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjak9vRVJtVmJoanhEZ0hQ
-            MFJwMEE4UDcrRkdPRmZ6R09FSDY1aTk3Y1dNClZJYXRLNU5senR3Qzh6VmZGMlhu
-            bnl6VjlaUEFISnBtSTVrcEd0ZjI5Q2MKLS0tIFl1b3A5ZWVqc1gvWVZnZis0ZHFk
-            bWhnNVB2TUJ4YzY4NHdSVXhPc3dReTgKWRYBbBE3+oGsRNw1CROhFY+btENbShfv
-            gw3IdW7OoZV6JpJBOcI82eOuOkIxrmgSGDGeyy10/a5MA/cB1umm+w==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age12l5u7sw59u5pkwp83qm8t3ff7uv0ld2c9k3zh5j4ame9k2szcynqu7ftqe
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGcmV3TDlNL2Zxb0h5QTYx
-            QkVmczA0MDc2ZnpNNU1YeFVzSXJwc3RWUmk4CjF4bHIrVU9VM3htTUxGZ2FUR256
-            UEovdVV2cmNIbkloS1VobTNFSDVyRG8KLS0tIEFhUk5kL3hCNGs4MGJBTmNJaVFm
-            b2ZBUGJ1K0lKTitKYTRUMWszQzhBU0UKBaM6t6JmWfiG+wPorGea1gqvV5RSIPyw
-            6yb2PcH2oZ0HrjJM5sjfu7XOWY3KneiZZikR1BpD5KvevfagWTSR/w==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1fa3zqavfmqk4ssa22yne9td90gyqv9q5a8y0s8jp3xak8q7p3yjqyn7rkg
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaMFJiNjVOb0lTcmJ3VnhH
-            WlRKZERRZFM3TFZBZGNSZC9GdHlHakMza21zClJ3SDdFUkVRc3oyVVU3WEtDQzBu
-            OEFqS3NwbHZFUlpCYlN6RW84N0F1amcKLS0tIHFZK21aTHdwZ2dWbVRrWEZDWFZj
-            aU1IQzdTMVhnbHhsNENwMG05dXhOU2MK8fEJea9sL5JLgltVlTI6mRDb+Tl83Iz7
-            4wPYvo68cn8vimXqSk45ldHRrNa3zhYai3CalQaGtDT3fkWGvSq0zQ==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-09-28T15:44:39Z"
-    mac: ENC[AES256_GCM,data:YUi+AbS6DQTmrSyOXsbkZWfWaMyKGR8fYm/MHcxmqChi8hng+UWHBZjsLBe6ef/FLH3rnP6bhfwK8KYnVS6fHvHahoqIq/BHydTsqrclnSgRAGl8Lh0yuhwISNRvP1AuW5pd50sdQaS0uGOtzOCharI/pZ9H+cmt2SB5WOCdeLs=,iv:2nBG6it3tNSLSia8hGzCcesuK9QwzB9EzfjWegjQ2kw=,tag:RGGPAPw/rQKhWA2OqLjTJw==,type:str]
-    pgp: []
-    unencrypted_suffix: _unencrypted
-    version: 3.9.0
Author	SHA1	Message	Date
John Ogle	24a09a9922	[desktop] Add steam sleep inhibitor Adds sleep inhibitor based on whether or not Steam is actively streaming a remote session	2025-07-19 15:11:33 -07:00
John Ogle	f757ea7271	[kodi] Add kdeconnect	2025-07-19 14:55:35 -07:00
John Ogle	64149713d2	[home] Add k8s management apps	2025-07-16 22:38:19 -07:00
John Ogle	88b413e0af	[nixbook] disable gaming	2025-07-16 18:52:51 -07:00
John Ogle	c5070eb4bf	[home] Re-enable openscad-unstable	2025-07-13 12:07:01 -07:00
John Ogle	6b4dc1e6b7	Add CLAUDE.md	2025-07-13 12:06:55 -07:00
John Ogle	aadd8c7b6c	[home] Add claude-code	2025-07-13 12:06:46 -07:00
John Ogle	f8d145b495	[secrets] Remove altogether I'm standardizing on bitwarden and rbw for secrets. No need to build out a separate secret management system. The complexity of this was just not worth it for my effectively single-user workflows	2025-07-13 11:08:42 -07:00
John Ogle	9232d46f6a	[wixos] Add users role	2025-07-13 11:06:49 -07:00
John Ogle	b2b34fc05f	[flake] update	2025-07-13 10:44:00 -07:00
John Ogle	aa4dacb3af	Add bootstrap script Adds a very simple bootstrap script for setting up a new host. I'm not exactly sure the best way to use this yet. Though I suppose it could be run with some sort of "curl https://blahblah \| bash" shenanigans. That just seems like it would be about as much effort as just running the nixos-rebuild command itself from a new host. In any case though, this worked well for bootstrapping a new wixos instance. So that was nice.	2025-07-13 10:28:52 -07:00
John Ogle	6dc4d6956a	[doom] defer loading gptel This prevents the rbw auth prompt from appearing until it is actually needed	2025-07-13 10:27:52 -07:00
John Ogle	be83fc566f	[wixos] remove deprecated reference	2025-07-13 10:16:31 -07:00
John Ogle	485df44aea	[home] Add snapcast	2025-06-07 09:41:39 -07:00
John Ogle	4861128de6	[doom] Add gptel	2025-05-28 18:45:20 -07:00
John Ogle	9fe7cfbbfc	[home] Add codex	2025-05-27 19:35:26 -07:00
John Ogle	741e3a67d6	[doom] unset DOOMPROFILE	2025-05-27 19:35:16 -07:00
John Ogle	22254eb1f3	[doom] bump version	2025-05-27 19:02:34 -07:00
John Ogle	79dde1a0fe	[flake] update	2025-05-26 11:28:26 -07:00
John Ogle	f4b3c36a4e	[openscad] Disable for now	2025-05-26 11:27:27 -07:00
John Ogle	1fa7a2689c	[home] Add openscad-unstable	2025-05-26 11:23:56 -07:00
John Ogle	c08c5e2486	[emacs] Remove doom-emacs-unstraightened	2025-05-26 11:23:50 -07:00
John Ogle	ecaa6dcb83	[flake] update	2025-03-16 15:44:01 -07:00
John Ogle	7729ff7434	[desktop] Fix moonlight package	2025-03-16 15:43:54 -07:00
John Ogle	52c110a505	[boxy] Enhance graphics drivers	2025-03-16 15:43:41 -07:00
John Ogle	d5997575df	[boxy] Add sddm config	2025-03-16 14:34:19 -07:00
John Ogle	57bc35101e	[kodi] Setup extra groups	2025-03-16 14:34:12 -07:00
John Ogle	6b09b1b0bc	[desktop] Add moonlight	2025-03-16 14:33:58 -07:00
John Ogle	1851743a21	[desktop] Finish programs refactor	2025-03-16 14:33:44 -07:00
John Ogle	c6d787f9f5	[boxy] Enable bluetooth	2025-03-16 14:33:00 -07:00
John Ogle	f4a8f9d614	[home] Remove nixpkgs config Need to find some better way of doing this so that it works across home-manager-only installations as well as nixos home manager module installations.	2025-03-08 14:46:47 -08:00
John Ogle	1e01d44f2f	wip	2025-03-08 14:46:39 -08:00
John Ogle	39dbe6644c	[kodi] Add moonlight-embedded	2025-03-07 14:51:39 -08:00
John Ogle	870e1073dc	[home] Switch from gpg-agent to gnome-keyring	2025-03-05 13:30:32 -08:00
John Ogle	c1f132026a	[home] Remove some accidental non-working update	2025-03-05 13:25:39 -08:00
John Ogle	5650125d7e	Add .goosehints	2025-03-05 13:25:08 -08:00
John Ogle	6536213bd0	[home] Remove autoUpgrade Flakes make this irrelevant	2025-03-05 13:24:51 -08:00
John Ogle	a0ce3b810e	[home] Fix support for non-NixOS systems	2025-03-05 13:24:38 -08:00
John Ogle	abbcfebc97	[doom] Restore	2025-03-05 12:33:45 -08:00
John Ogle	495aba3fef	[home] Support standalone home manager	2025-03-05 12:33:32 -08:00
John Ogle	f9bcec74d3	Revert "[audio] Setup squeezelite" This reverts commit `1d0b3a0367`.	2025-03-04 12:50:46 -08:00
John Ogle	97c4d7035c	[squeezelite] Disable for now	2025-02-17 12:46:56 -08:00
John Ogle	8abd331619	[home] Add google-cookie-retrieval	2025-02-17 12:44:14 -08:00
John Ogle	aca0afa0dc	[flake] Remove z790prors	2025-02-17 12:35:16 -08:00
John Ogle	1d0b3a0367	[audio] Setup squeezelite	2025-02-16 18:41:50 -08:00
John Ogle	50f9defdd5	[wixos] Add audio role	2025-02-16 18:40:07 -08:00
John Ogle	d71d7a1ffb	Remove more gaming stuff	2025-02-16 11:21:20 -08:00
John Ogle	ee511f6ab8	[wixos] Get nvidia drivers working I think	2025-02-16 11:21:04 -08:00
John Ogle	e3dd0bdb30	[flake] Update	2025-02-16 11:20:12 -08:00
John Ogle	10300ed10b	[desktop] Fix sddm import	2025-02-15 11:54:28 -08:00
John Ogle	8e72ef71d2	[machines] Remove z790prors	2025-02-15 10:24:02 -08:00
John Ogle	d6e031efd0	[desktop] Refactor into multiple components	2025-02-15 10:23:33 -08:00
John Ogle	16fa4a641c	Add goosehints	2025-02-15 09:38:14 -08:00
John Ogle	7a5ec23cc5	[home] Add goose (honk)	2025-02-12 19:32:15 -08:00
John Ogle	ff1124fbe6	[doom] Disable unstraightened for now	2025-02-07 07:19:57 -08:00
John Ogle	53088f9536	[wixos] Add desktop role	2025-02-07 07:19:50 -08:00
John Ogle	68c04b43fd	[default] Add glances	2025-02-07 07:19:42 -08:00
John Ogle	efbfffbb61	[gaming] Abandon for now	2025-02-07 07:18:09 -08:00
John Ogle	0e1a67b980	[flake] update	2025-02-07 07:17:30 -08:00