major refactor

mod/desktop/accounts.nix

@@ -0,0 +1,106 @@
+{ config, lib, ... }:
+let
+  cfg = config.hd.desktop.accounts;
+  inherit (lib) mkEnableOption mkIf;
+in
+{
+  config = mkIf cfg.enable {
+    home = {
+      accounts.email.accounts = {
+        "Posteo" = rec {
+          primary = true;
+          address = "henridohmen@posteo.com";
+          realName = "Henri Dohmen";
+          smtp = {
+            tls.enable = true;
+            host = "posteo.de";
+            port = 465;
+          };
+          imap = {
+            tls.enable = true;
+            host = "posteo.de";
+            port = 993;
+          };
+          userName = address;
+          thunderbird.enable = true;
+          gpg.key = "AB79213B044674AE";
+        };
+
+        "Uni" = {
+          address = "henri.dohmen@stud.tu-darmstadt.de";
+          realName = "Henri Dohmen";
+          smtp = {
+            tls.enable = true;
+            host = "smtp.tu-darmstadt.de";
+            port = 465;
+          };
+          imap = {
+            tls.enable = true;
+            host = "imap.stud.tu-darmstadt.de";
+            port = 993;
+          };
+          userName = "hd48xebi";
+          thunderbird.enable = true;
+          gpg.key = "24FCE000F3470BAC";
+        };
+
+        "Proton" = rec {
+          address = "dohmenhenri@proton.me";
+          realName = "Henri Dohmen";
+          smtp = {
+            tls.enable = true;
+            tls.useStartTls = true;
+            host = "127.0.0.1";
+            port = 1025;
+          };
+          imap = {
+            tls.enable = true;
+            tls.useStartTls = true;
+            host = "127.0.0.1";
+            port = 1143;
+          };
+          userName = address;
+          thunderbird.enable = true;
+          gpg.key = "AB79213B044674AE";
+        };
+      };
+      accounts.calendar.accounts = {
+        "Privat" = {
+          primary = true;
+          thunderbird = {
+            enable = true;
+            color = "#DC8ADD";
+          };
+          remote = {
+            type = "caldav";
+            url = "https://posteo.de:8443/calendars/henridohmen/default";
+            userName = "henridohmen";
+          };
+        };
+        "Uni" = {
+          thunderbird = {
+            enable = true;
+            color = "#FFBE6F";
+          };
+          remote = {
+            type = "caldav";
+            url = "https://posteo.de:8443/calendars/henridohmen/zqrobi";
+            userName = "henridohmen";
+          };
+        };
+      };
+      accounts.contact.accounts = {
+        "Kontakte" = {
+          thunderbird = {
+            enable = true;
+          };
+          remote = {
+            type = "carddav";
+            url = "https://posteo.de:8843/addressbooks/henridohmen/default/";
+            userName = "henridohmen";
+          };
+        };
+      };
+    };
+  };
+}

mod/desktop/audio.nix

@@ -0,0 +1,26 @@
+{
+  pkgs,
+  config,
+  lib,
+  ...
+}:
+let
+  cfg = config.hd.desktop.audio;
+  inherit (lib) mkEnableOption mkIf;
+in
+{
+  config = mkIf cfg.enable {
+    environment.systemPackages = with pkgs; [
+      pavucontrol
+      alsa-utils
+    ];
+
+    services.pulseaudio.enable = false;
+    services.pipewire = {
+      enable = true;
+      alsa.enable = true;
+      alsa.support32Bit = true;
+      pulse.enable = true;
+    };
+  };
+}

mod/desktop/default.nix

@@ -0,0 +1,126 @@
+{
+  inputs,
+  lib,
+  config,
+  options,
+  ...
+}:
+with lib;
+{
+  options.home = lib.mkOption {
+    # used by /home/default.nix
+    type = lib.types.attrsOf lib.types.str;
+    default = { };
+    description = "Home Manager configuration for user `hd`. Has no effect if `/home` is not loaded";
+  };
+
+  options.hd.desktop = {
+    enable = mkOption {
+      type = types.bool;
+      default = false;
+      description = "Common NixOS configuration of all desktops.";
+    };
+
+    audio = {
+      enable = mkOption {
+        type = types.bool;
+        default = config.hd.desktop.enable;
+        description = "Enable audio configuration";
+      };
+    };
+
+    gpg = {
+      enable = mkOption {
+        type = types.bool;
+        default = config.hd.desktop.enable;
+        description = "Enable GPG configuration";
+      };
+    };
+
+    network = {
+      enable = mkOption {
+        type = types.bool;
+        default = config.hd.desktop.enable;
+        description = "Enable network configuration";
+      };
+    };
+
+    security = {
+      enable = mkOption {
+        type = types.bool;
+        default = config.hd.desktop.enable;
+        description = "Enable desktop security configuration";
+      };
+    };
+
+    software = {
+      enable = mkOption {
+        type = types.bool;
+        default = config.hd.desktop.enable;
+        description = "Enable software installation";
+      };
+
+      development = {
+        enable = mkOption {
+          type = types.bool;
+          default = config.hd.desktop.software.enable;
+          description = "Enable development software";
+        };
+      };
+    };
+
+    windowManager = {
+      enable = mkOption {
+        type = types.bool;
+        default = config.hd.desktop.enable;
+        description = "Enable window manager configuration";
+      };
+    };
+
+    accounts = {
+      enable = mkOption {
+        type = types.bool;
+        default = config.hd.desktop.enable;
+        description = "Enable desktop user accounts";
+      };
+    };
+
+    fonts = {
+      enable = mkOption {
+        type = types.bool;
+        default = config.hd.desktop.enable;
+        description = "Enable font configuration";
+      };
+    };
+
+    services = {
+      enable = mkOption {
+        type = types.bool;
+        default = config.hd.desktop.enable;
+        description = "Enable desktop services";
+      };
+    };
+  };
+
+  imports = [
+    ./accounts.nix
+    ./audio.nix
+    ./fonts.nix
+    ./gpg.nix
+    ./network.nix
+    ./security.nix
+    ./services.nix
+    ./software
+    ./window-manager.nix
+  ];
+
+  config = mkIf config.hd.desktop.enable {
+    nixpkgs.config.allowUnfreePredicate =
+      pkg:
+      builtins.elem (lib.getName pkg) [
+        "nvidia-x11"
+      ];
+
+    programs.nix-ld.enable = true;
+  };
+}

mod/desktop/fonts.nix

@@ -0,0 +1,24 @@
+{
+  pkgs,
+  config,
+  lib,
+  ...
+}:
+let
+  cfg = config.hd.desktop.fonts;
+  inherit (lib) mkEnableOption mkIf;
+in
+{
+  config = mkIf cfg.enable {
+    fonts = {
+      packages = with pkgs; [
+        noto-fonts
+        noto-fonts-cjk-sans
+        noto-fonts-color-emoji
+        nerd-fonts.noto
+      ];
+      fontDir.enable = true;
+      fontconfig.defaultFonts.monospace = [ "Noto Nerd Font Mono" ];
+    };
+  };
+}

mod/desktop/gpg.nix

@@ -0,0 +1,38 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+let
+  cfg = config.hd.desktop.gpg;
+  inherit (lib) mkEnableOption mkIf;
+in
+{
+  config = mkIf cfg.enable {
+    home = {
+      home.packages = with pkgs; [
+        libsecret
+        gnome-keyring
+      ];
+      programs.gpg = {
+        enable = true;
+        publicKeys = [
+          {
+            source = ../../pgp/id-priv.pgp;
+            trust = 5;
+          }
+          {
+            source = ../../pgp/id-uni.pgp;
+            trust = 5;
+          }
+        ];
+      };
+      services.gpg-agent = {
+        enable = true;
+        enableSshSupport = true;
+        pinentry.package = pkgs.pinentry-gtk2;
+      };
+    };
+  };
+}

mod/desktop/network.nix

@@ -0,0 +1,86 @@
+{
+  config,
+  host,
+  lib,
+  pkgs,
+  var,
+  ...
+}:
+let
+  cfg = config.hd.desktop.network;
+  inherit (lib) mkEnableOption mkIf;
+in
+{
+  config = mkIf cfg.enable {
+
+    hardware.bluetooth.enable = true;
+    systemd.network.wait-online.enable = false;
+
+    services = {
+      mullvad-vpn.enable = true;
+      blueman.enable = true;
+      resolved = {
+        # TODO: find out why doh breaks moodle...
+        enable = true;
+      };
+    };
+
+    networking = {
+      enableIPv6 = true;
+
+      wireguard.enable = true;
+      wg-quick = {
+        interfaces = {
+          "onet" = {
+            address = var.wg.wireguard-network.${host}.ips;
+            privateKeyFile = var.wg.keyFile;
+            peers = [ (lib.removeAttrs var.wg.wireguard-network."roam" [ "ips" ]) ];
+            mtu = 1248;
+          };
+        };
+      };
+
+      networkmanager = {
+        enable = true;
+        plugins = with pkgs; [ networkmanager-openconnect ];
+        wifi.macAddress = "random";
+        ensureProfiles.profiles = {
+          "tuda-vpn" = {
+            connection = {
+              autoconnect = "false";
+              id = "tuda-vpn";
+              type = "vpn";
+            };
+            ipv4 = {
+              method = "auto";
+            };
+            ipv6 = {
+              addr-gen-mode = "stable-privacy";
+              method = "auto";
+            };
+            vpn = {
+              authtype = "password";
+              autoconnect-flags = "0";
+              certsigs-flags = "0";
+              cookie-flags = "2";
+              disable_udp = "no";
+              enable_csd_trojan = "no";
+              gateway = "vpn.hrz.tu-darmstadt.de";
+              gateway-flags = "2";
+              gwcert-flags = "2";
+              lasthost-flags = "0";
+              pem_passphrase_fsid = "no";
+              prevent_invalid_cert = "no";
+              protocol = "anyconnect";
+              resolve-flags = "2";
+              service-type = "org.freedesktop.NetworkManager.openconnect";
+              stoken_source = "disabled";
+              xmlconfig-flags = "0";
+              password-flags = 0;
+            };
+          };
+        };
+      };
+    };
+  };
+}

mod/desktop/security.nix

@@ -0,0 +1,21 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+let
+  cfg = config.hd.desktop.security;
+  inherit (lib) mkEnableOption mkIf;
+in
+{
+  config = mkIf cfg.enable {
+    security.pam = {
+      services.login.enableGnomeKeyring = true;
+    };
+    services = {
+      gnome.gnome-keyring.enable = true;
+    };
+    programs.seahorse.enable = true;
+  };
+}

mod/desktop/services.nix

@@ -0,0 +1,49 @@
+{
+  pkgs,
+  lib,
+  config,
+  ...
+}:
+let
+  cfg = config.hd.desktop.services;
+  inherit (lib) mkEnableOption mkIf;
+in
+{
+  config = mkIf cfg.enable {
+    services = {
+      printing.enable = true;
+      avahi = {
+        enable = true;
+        nssmdns4 = true;
+        openFirewall = true;
+      };
+      udisks2.enable = true;
+    };
+
+    home.services.protonmail-bridge = {
+      enable = true;
+      extraPackages = with pkgs; [
+        pass
+        gnome-keyring
+      ];
+    };
+
+    home.services = {
+      emacs.enable = true;
+      unison' = {
+        # TODO: parameterize
+        enable = true;
+        pairs = {
+          "docs".roots = [
+            "/home/hd/Documents"
+            "ssh://roam.lan//home/hd/Documents"
+          ];
+          "desktop".roots = [
+            "/home/hd/Desktop"
+            "ssh://roam.lan//home/hd/Desktop"
+          ];
+        };
+      };
+    };
+  };
+}

mod/desktop/software/default.nix

@@ -0,0 +1,143 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+let
+  cfg = config.hd.desktop.software;
+  inherit (lib) mkEnableOption mkIf;
+in
+{
+  imports = [ ./development.nix ];
+
+  config = mkIf cfg.enable {
+    hd.desktop.software.development.enable = true;
+
+    environment.systemPackages = with pkgs; [
+      bitwarden-desktop
+      calibre
+      file
+      fuzzel
+      gh
+      nil
+      pciutils
+      signal-desktop
+      spotify-player
+      tor-browser
+      usbutils
+      vlc
+      wireguard-tools
+      wl-clipboard
+      yt-dlp
+      zotero
+      zulip
+    ];
+
+    virtualisation = {
+      podman = {
+        enable = true;
+        dockerCompat = true;
+        defaultNetwork.settings.dns_enabled = true;
+      };
+    };
+
+    programs.kdeconnect.enable = true;
+
+    home = {
+      programs.fish = {
+        enable = true;
+        interactiveShellInit = ''
+          set -U fish_greeting
+          starship init fish | source
+        '';
+      };
+      programs.starship = {
+        enable = true;
+        enableFishIntegration = true;
+        settings = {
+          format = "[$username](green)@[$hostname](red)[\\[$directory\\]](cyan bold) $all";
+          username = {
+            show_always = true;
+            format = "$user";
+          };
+          hostname = {
+            ssh_only = false;
+            format = "$hostname";
+          };
+          directory.format = "$path";
+          character = {
+            format = "$symbol ";
+            success_symbol = "\\\$";
+            error_symbol = "[\\\$](red)";
+          };
+          git_branch.format = "[$symbol$branch(:$remote_branch)]($style)";
+        };
+      };
+      programs.librewolf = {
+        enable = true;
+        settings = {
+          "identity.fxaccounts.enabled" = true;
+          "identity.sync.tokenserver.uri" = "https://firefox-syncserver.roam.hdohmen.de/1.0/sync/1.5";
+          "privacy.resistFingerprinting" = true;
+          "signon.rememberSignons" = false;
+          "signon.autofillForms" = false;
+          "privacy.spoof_english" = 2;
+          "privacy.resistFingerprinting.block_mozAddonManager" = true;
+          "network.http.sendRefererHeader" = 1;
+          "intl.accept_languages" = "en,en-us";
+          "privacy.resistFingerprinting.letterboxing" = true;
+        };
+      };
+      programs.thunderbird = {
+        enable = true;
+        package = pkgs.thunderbird-latest;
+        profiles.default = {
+          isDefault = true;
+          withExternalGnupg = true;
+          settings = {
+            "intl.date_time.pattern_override.date_short" = "yyyy-MM-dd";
+            "mail.html_compose" = false;
+            "mail.identity.default.compose_html" = false;
+          };
+        };
+      };
+      programs.git = {
+        enable = true;
+        signing = {
+          signByDefault = true;
+          signer = "openpgp";
+          key = "AB79213B044674AE";
+        };
+        settings = {
+          user.name = "Henri Dohmen";
+          user.email = "henridohmen@posteo.com";
+          color.ui = "auto";
+          column.ui = "auto";
+          branch.sort = "-committerdate";
+          alias = {
+            staash = "stash --all";
+          };
+          core = {
+            editor = "nvim";
+            autocrlf = "input";
+          };
+          init.defaultBranch = "main";
+          credential.helper = "libsecret";
+        };
+      };
+      programs.foot = {
+        enable = true;
+        server.enable = true;
+        settings = {
+          main = {
+            "font" = "monospace:size=11";
+          };
+        };
+      };
+    };
+
+    # Some excludes
+    services.xserver.excludePackages = [ pkgs.xterm ];
+  };
+}

mod/desktop/software/development.nix

@@ -0,0 +1,112 @@
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+let
+  cfg = config.hd.desktop.software.development;
+  inherit (lib) mkEnableOption mkIf;
+in
+{
+  config = mkIf cfg.enable {
+    documentation.dev.enable = true;
+
+    environment.systemPackages = with pkgs; [
+      (agda.withPackages (p: [ p.standard-library ]))
+      binutils
+      clang
+      elan
+      gcc
+      gdb
+      gnumake
+      man-pages
+      man-pages-posix
+      nixfmt-rfc-style
+      python313
+      python313Packages.mypy
+      rustup
+      # jetbrains.gateway
+      # jetbrains.rust-rover
+    ];
+
+    home = {
+      xdg.configFile = {
+        "agda/libraries".text = ''
+          ${pkgs.agdaPackages.standard-library}/standard-library.agda-lib
+        '';
+      };
+      programs.emacs = {
+        enable = true;
+        extraPackages =
+          epkgs: with epkgs; [
+            ace-window
+            agda2-mode
+            better-defaults
+            cmake-mode
+            company
+            consult
+            delight
+            doom-themes
+            editorconfig
+            exec-path-from-shell
+            fish-mode
+            haskell-mode
+            hl-todo
+            lsp-mode
+            magit
+            marginalia
+            markdown-mode
+            multiple-cursors
+            orderless
+            proof-general
+            pyvenv
+            rainbow-delimiters
+            restart-emacs
+            rust-mode
+            undo-tree
+            use-package
+            vertico
+            which-key
+            yaml-mode
+          ];
+        extraConfig = builtins.readFile ../../../dotfiles/emacs/init.el;
+      };
+      programs.vscode = {
+        enable = true;
+        package = pkgs.vscodium;
+        mutableExtensionsDir = true;
+        profiles.default = {
+          enableExtensionUpdateCheck = true;
+          enableUpdateCheck = false;
+          extensions = with pkgs.vscode-marketplace; [
+            banacorn.agda-mode
+            dnut.rewrap-revived
+            editorconfig.editorconfig
+            james-yu.latex-workshop
+            jnoortheen.nix-ide
+            leanprover.lean4
+            ltex-plus.vscode-ltex-plus
+            maximedenes.vscoq
+            mkhl.direnv
+            ms-python.python
+            ms-toolsai.jupyter
+            ocamllabs.ocaml-platform
+            rust-lang.rust-analyzer
+            # ms-vscode-remote.remote-ssh
+          ];
+          userSettings = {
+            "editor.rulers" = [ 80 ];
+            "editor.formatOnPaste" = false;
+            "editor.formatOnSave" = false;
+            "editor.formatOnType" = false;
+            # https://github.com/nix-community/nix-vscode-extensions/issues/123
+            "ltex.ltex-ls.path" = "${pkgs.ltex-ls-plus}";
+            "direnv.path.executable" = "${pkgs.direnv}/bin/direnv";
+            "latex-workshop.latex.autoBuild.run" = "never";
+          };
+        };
+      };
+    };
+  };
+}

mod/desktop/window-manager.nix

@@ -0,0 +1,20 @@
+{
+  pkgs,
+  config,
+  lib,
+  ...
+}:
+let
+  cfg = config.hd.desktop.windowManager;
+  inherit (lib) mkEnableOption mkIf;
+in
+{
+  config = mkIf cfg.enable {
+    # Enable the KDE Plasma Desktop Environment.
+    services.displayManager.sddm = {
+      enable = true;
+      wayland.enable = true;
+    };
+    services.desktopManager.plasma6.enable = true;
+  };
+}