System Gen178 @ 2026-09-11-01:10:29 by jonas@monolith

flake.lock

@@ -125,11 +125,11 @@
       },
       "locked": {
         "dir": "pkgs/firefox-addons",
-        "lastModified": 1786420971,
-        "narHash": "sha256-irKN0AY5fDS96h7z3Cjp3EB7OwTJU1SeWFb1GxnFu3E=",
+        "lastModified": 1788840136,
+        "narHash": "sha256-ej5jnQIfjbw4wwPzy8Y4ntG9F3asdF6YBkLqpYeGUxc=",
         "owner": "rycee",
         "repo": "nur-expressions",
-        "rev": "a56dfe072a448e664d208e9ed5f7f9dc9a720686",
+        "rev": "555b23e68256c5abfb8a85a385231830d1d7ad1f",
         "type": "gitlab"
       },
       "original": {
@@ -174,11 +174,11 @@
         "nixpkgs-lib": "nixpkgs-lib"
       },
       "locked": {
-        "lastModified": 1785627969,
-        "narHash": "sha256-4dtXQk/NMePegK/nWp5NSeuZKLATItOq61lpEvmXqGw=",
+        "lastModified": 1788450739,
+        "narHash": "sha256-glZLQlzIn1fXH6PazR2iUmTo7kzzyYSshrWhLS9TqCU=",
         "owner": "hercules-ci",
         "repo": "flake-parts",
-        "rev": "427bf4bd9435fdf21321c8cc628c24efc14c0f7a",
+        "rev": "31729ca8cbdb4fa927b34e5f4353e6a83f39e993",
         "type": "github"
       },
       "original": {
@@ -311,11 +311,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1785119570,
-        "narHash": "sha256-Rgs2xKnGLFWQscxUaXX07oyZeuMDOHEbqDOsgliLFGM=",
+        "lastModified": 1788642154,
+        "narHash": "sha256-sPpQFVaFTDqO/4vvCAhuAhqTgqN/ygu+9eJcs5eB0js=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "d4fd24667c8cbef124bb70a20380cab75ec8474d",
+        "rev": "fd0956c99c41ae3c13a73a638f1f7e963aebc4ab",
         "type": "github"
       },
       "original": {
@@ -327,11 +327,11 @@
     },
     "import-tree": {
       "locked": {
-        "lastModified": 1784254960,
-        "narHash": "sha256-iI88R3wHz8wTKQb5orvpc51L/Xr64AJyxid/0MKa/b8=",
+        "lastModified": 1788467110,
+        "narHash": "sha256-ljEMTXP/rH0tOvDzc9gzwww6KcHRPRnEHzd9lK48V7s=",
         "owner": "vic",
         "repo": "import-tree",
-        "rev": "4ebb10ae17d5f1ad366e7aef5b92cb8eecf24f69",
+        "rev": "eb1b52eaecc57f7c136d07ae8a93e724dfecac46",
         "type": "github"
       },
       "original": {
@@ -349,11 +349,11 @@
         "systems": "systems"
       },
       "locked": {
-        "lastModified": 1786414302,
-        "narHash": "sha256-FNGnUYud1D3BqE1JU2Uef+puLB2Rml7gKSdIGQOb550=",
+        "lastModified": 1788840747,
+        "narHash": "sha256-nZ6Yt+8u5NhPSP46VcYXEcu4cJpeOiR/K+lfyk3COVA=",
         "owner": "Infinidoge",
         "repo": "nix-minecraft",
-        "rev": "cacc8cd89550f0cbec7103f3db5e96d1a66c58e7",
+        "rev": "1e6052f5ecebddbbb2d372e0fe6f1b7bc4b95a9e",
         "type": "github"
       },
       "original": {
@@ -383,11 +383,11 @@
         "nixpkgs": "nixpkgs"
       },
       "locked": {
-        "lastModified": 1786437054,
-        "narHash": "sha256-I++HzBBAgQ17UaLVU6aSm1/7LDo6c9xr8rAbpByWywE=",
+        "lastModified": 1788860136,
+        "narHash": "sha256-MhPMOFV4pVkygWEbQ8t1De/uQ9cWF1u++tRe2L5tG48=",
         "owner": "NixOS",
         "repo": "nixos-hardware",
-        "rev": "6ed13b1d888d5cb07dbb0723eb1df86bbacd0b9c",
+        "rev": "62173785b9a18c78b4a15aca2623d02bceb9d077",
         "type": "github"
       },
       "original": {
@@ -412,11 +412,11 @@
     },
     "nixpkgs-lib": {
       "locked": {
-        "lastModified": 1785031560,
-        "narHash": "sha256-OmshNvn2vupOFpYinLUu+1Dnpu4n7Q5N3ggGVNHpkUI=",
+        "lastModified": 1788057806,
+        "narHash": "sha256-DTQSMxzDWmT0zhguthvegnVkn7CFqGCv4IHCzk5ZUpM=",
         "owner": "nix-community",
         "repo": "nixpkgs.lib",
-        "rev": "0e79af5e3d4dcfcd676ab5ba3f95d2e3352e078c",
+        "rev": "596e2e3940e09b2abbeb03f75fa1828c57fcd72c",
         "type": "github"
       },
       "original": {
@@ -442,11 +442,11 @@
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1786247143,
-        "narHash": "sha256-8S3Kcxs7D4UtxJxSJZz0m14CGhuW0MxfrIwJxeGWGnQ=",
+        "lastModified": 1788752844,
+        "narHash": "sha256-VaWGJ6+cIYN2erfSecbRV+4ljI185Ty2wUrXyvQbgOw=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "279b4a8275f032c566576b3f181fa0f27197f588",
+        "rev": "dc5d91f840324650bac8c379428c7037a416959a",
         "type": "github"
       },
       "original": {
@@ -458,11 +458,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1786313170,
-        "narHash": "sha256-9BG7OgUWdu0ONDO5X2q6+K4bsuBITkX/3W4nNJu1Ito=",
+        "lastModified": 1788807765,
+        "narHash": "sha256-J9oC0bKnkXUrMegqRTXVkyDFJ0gn2U/Qpoo9HgGMQmA=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "fcb8fcd6bf2d0adecae5bd491afaaaf8311b758d",
+        "rev": "93108a538f079596c9a16c72cf03e9322782b6dd",
         "type": "github"
       },
       "original": {
@@ -561,11 +561,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1786375908,
-        "narHash": "sha256-G7qDAT98nywA4EFmJCwIRO5wKvDlBBN3BWpsOnjAto8=",
+        "lastModified": 1788337237,
+        "narHash": "sha256-gkSH8VUtCo6hnysNmb9DbTuDepH2t5pv+QWjP75xKAk=",
         "owner": "Mic92",
         "repo": "sops-nix",
-        "rev": "d1337e05ba0a8e88a75d2c0e1595d82f3b3e2ac4",
+        "rev": "fbf759290e0cb0a98dfc813a4eb7d53ad1dacb57",
         "type": "github"
       },
       "original": {
@@ -582,11 +582,11 @@
         "systems": "systems_2"
       },
       "locked": {
-        "lastModified": 1786252193,
-        "narHash": "sha256-a9SbkJWloPso00G4zIUkerd9n2qRyDYoDPeUc4O3ME8=",
+        "lastModified": 1788683578,
+        "narHash": "sha256-bERpuakmPAC2b36zgXy6OXh+SkZUjbaV+vV2sPmm6p8=",
         "owner": "Gerg-L",
         "repo": "spicetify-nix",
-        "rev": "a87616995724d27079b495ca07318512af799449",
+        "rev": "a4ef43fb13e3615f36e5a0935aabe8cc29363dc9",
         "type": "github"
       },
       "original": {
@@ -635,11 +635,11 @@
         "rust-overlay": "rust-overlay"
       },
       "locked": {
-        "lastModified": 1787221463,
-        "narHash": "sha256-G/BsqI9hMjr/x9h7mTNS5OoBuBno8G6oF4OdrEarNgA=",
+        "lastModified": 1788884686,
+        "narHash": "sha256-wl0NGoryP5veIaRn6azmejz1JsTbwHlBU/MT/icTKQ4=",
         "ref": "refs/heads/main",
-        "rev": "90ccd230e46cbe620ac3da25b95df17c0d32c248",
-        "revCount": 14,
+        "rev": "a827bd5eef0354f7e4fdca57383971ff6008b5d3",
+        "revCount": 42,
         "type": "git",
         "url": "https://git.jroeger.de/jonas/wordle-solver-rs"
       },

hosts/harbor/configuration.nix

@@ -37,10 +37,6 @@
     sopsFile = ../../secrets/harbor/hidden-matrix.yaml;
     key = "hostname";
   };
-  sops.secrets.hidden-matrix-registration-secret = {
-    sopsFile = ../../secrets/harbor/hidden-matrix.yaml;
-    key = "registration_secret";
-  };
 
   # gc settings and binary caches
   nix = {
@@ -97,10 +93,9 @@
   hive.matrix.enable = true;
   hive.matrix.hiddenServiceSecret = config.sops.secrets.matrix-hs-secret.path;
   hive.matrix.hiddenServiceHostnameSopsKey = config.sops.secrets.hidden-matrix-hostname.name;
-  hive.matrix.registrationSecretSopsKey = config.sops.secrets.hidden-matrix-registration-secret.name;
   hive.calibre.enable = true;
   hive.calibre.instanceFQDN = "calibre.jroeger.de";
-  hive.calibre.libraries = ["Rote Bücher" "Technik" "Wissenschaft oder so" "Dokumente"];
+  hive.calibre.libraries = ["Rote Bücher" "Bürgerliche Bücher" "Brain Maxxing" "Technik" "Wissenschaft oder so" "Dokumente"];
   hive.korrosync.enable = true;
   hive.korrosync.localPort = 7416;
   hive.korrosync.instanceFQDN = "korrosync.jroeger.de";

hosts/monolith/configuration.nix

@@ -174,7 +174,7 @@
   boot.plymouth.enable = true;
   boot.initrd.systemd.enable = true;
   boot.supportedFilesystems = ["ntfs"];
-  boot.kernelPackages = pkgs.linuxPackages_latest;
+  boot.kernelPackages = pkgs.linuxPackages_7_1;
 
   # Configure console keymap
   console.keyMap = "de";

modules/desktop/hyprland.nix

@@ -43,7 +43,8 @@
         ];
       };
 
-      environment.systemPackages = with pkgs; [pcmanfm-qt];
+      environment.systemPackages = with pkgs.kdePackages; [dolphin kio-extras];
+      services.gvfs.enable = true;
       services.udisks2.enable = true;
       programs.hyprlock.enable = true;
       security.pam.services.hyprlock = {};

modules/desktop/themes/layan/layan.nix

@@ -30,13 +30,15 @@
       pkgs.tela-circle-icon-theme
     ];
 
-    qt.enable = false;
+    qt.enable = true;
     qt.style.name = "kvantum";
     qt.style.package = pkgs.kdePackages.qtstyleplugin-kvantum;
     qt.platformTheme.name = "gtk";
+    home.sessionVariables = {
+      QT_STYLE_OVERRIDE = "kvantum";
+    };
     systemd.user.settings.Manager.DefaultEnvironment = lib.mapAttrs (_: lib.mkDefault) {
       QT_STYLE_OVERRIDE = "kvantum";
-      QT_QPA_PLATFORMTHEME = "gtk";
     };
     xdg.configFile."Kvantum/kvantum.kvconfig".text = lib.generators.toINI {} {
       General.theme = "LayanDark";

modules/desktop/waybar.nix

@@ -1,10 +1,5 @@
 {
-  flake.homeModules.waybar = {
-    config,
-    lib,
-    pkgs,
-    ...
-  }: {
+  flake.homeModules.waybar = {pkgs, ...}: {
     programs.waybar.enable = true;
     programs.waybar.systemd.enable = true;
 
@@ -12,14 +7,6 @@
     services.network-manager-applet.enable = true;
     services.pasystray.enable = true;
 
-    # is already fixed on latest home-manager rev
-    systemd.user.services = {
-      blueman-applet.Unit.After = lib.mkForce ["graphical-session.target"];
-      network-manager-applet.Unit.After = lib.mkForce ["graphical-session.target"];
-      pasystray.Unit.After = lib.mkForce ["graphical-session.target"];
-      waybar.Unit.After = lib.mkForce ["graphical-session.target"];
-    };
-
     home.packages = with pkgs; [
       pulsemixer
       pavucontrol

modules/doom/static/config.el

@@ -115,6 +115,15 @@
   :config
   (setq graphviz-dot-indent-width 4))
 
+(after! svelte-ts-mode
+  (add-to-list 'auto-mode-alist '("\\.svelte\\'" . svelte-ts-mode))
+  (add-hook! 'svelte-ts-mode-hook
+    (setq-local lsp-format-buffer-on-save t)))
+
+(after! typescript-ts-mode
+  (add-hook! 'typescript-ts-mode-hook
+    (setq-local lsp-format-buffer-on-save t)))
+
 (after! auctex
   (add-hook! 'LaTeX-mode-hook 'lsp)
   (map! :map LaTeX-mode-map
@@ -157,7 +166,7 @@
 (set-formatter! 'alejandra '("alejandra" "--quiet") :modes '(nix-mode nix-ts-mode))
 
 ;; nixd
-(after! 'lsp-mode
+(after! lsp-mode
   (lsp-register-client
    (make-lsp-client :new-connection (lsp-stdio-connection "nixd")
                     :major-modes '(nix-mode)
@@ -165,7 +174,7 @@
                     :server-id 'nixd)))
 
 ;; typescript-language-server
-(after! 'lsp-mode
+(after! lsp-mode
   (lsp-register-client
    (make-lsp-client :new-connection (lsp-stdio-connection '("typescript-language-server" "--stdio"))
                     :major-modes '(typescript-ts-mode typescript-mode)
@@ -253,18 +262,30 @@
          (haskell-ts-mode . lsp-deferred)
          (c-or-c++-ts-mode . lsp-deferred)
          (bash-ts-mode . lsp-deferred)
-         (json-ts-mode . lsp-deferred)))
+         (json-ts-mode . lsp-deferred)
+         (typescript-ts-mode . lsp-deferred)
+         (svelte-ts-mode . lsp-deferred)
+         (svelte-mode . lsp-deferred)
+         ))
 
 
-(after! jj-mode
-  (map! :leader
-        (:prefix ("j" . "Jujutsu")
-         :desc "Log" "j" #'jj-log
-         :desc "Describe" "d" #'jj-describe
-         :desc "Abandon" "a" #'jj-abandon
-         :desc "New" "n" #'jj-new
+(use-package! majutsu
+  :config (map! :leader
+                (:prefix ("j" . "majutsu")
+                 :desc "Log" "j" #'majutsu-log
                  )))
 
+
+;; Org-mode custom property for remaining effort (not-done-items)
+(defun my-org-columns-collect-open-effort (property)
+  "Return PROPERTY only or unfinished entries."
+  (if (member (org-get-todo-state) org-not-done-keywords)
+      (org-entry-get nil property)
+    ""))
+
+(setq org-columns-summary-types
+      '(("remaining:" org-columns--summary-sum-times my-org-columns-collect-open-effort)))
+
 (setq auto-mode-alist (cons '("\\.smt$" . smtlib-mode) auto-mode-alist))
 (autoload 'smtlib-mode "smtlib" "Major mode for SMTLIB" t)
 

modules/doom/static/packages.el

@@ -83,13 +83,18 @@
            )
   :pin "71f67971bc5eb2974ae2f738512c8f09f0822527")
 
+(package! svelte-ts-mode
+  :recipe (:host github
+           :repo "leafOfTree/svelte-ts-mode"
+           :branch "main")
+  :pin "b1b5b4a5b09493063394a51d0f0f022645a18444")
 (package! pdf-tools)
 (package! eww)
 (package! pandoc-mode)
 (package! tramp)
 (package! graphviz-dot-mode)
 (package! rainbow-delimiters)
-(package! jj-mode :recipe (:host github :repo "bolivier/jj-mode.el"))
+(package! majutsu :recipe (:host github :repo "0WD0/majutsu"))
 
 (let ((package-dir (expand-file-name "packages.d" doom-user-dir)))
   (when (file-directory-p package-dir)

modules/services/gitea-instance.nix

@@ -2,6 +2,7 @@
   flake.nixosModules.gitea-instance = {
     config,
     lib,
+    pkgs,
     ...
   }: let
     cfg = config.hive.gitea-instance;
@@ -61,6 +62,14 @@
         enableACME = true;
         locations."/" = {
           proxyPass = "http://unix:/run/gitea/gitea.sock";
+          extraConfig = ''
+            client_max_body_size 1G;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header X-Forwarded-Host $host;
+          '';
         };
       };
 
@@ -77,13 +86,25 @@
       };
 
       # act_runner
-      services.gitea-actions-runner = lib.mkIf cfg.nativeRunner {
-        instances.nixos-host = {
-          enable = true;
+      services.gitea-actions-runner.instances.nixoshost = {
+        enable = cfg.nativeRunner;
         name = "nixos-host-runner";
         url = "https://${cfg.instanceFQDN}";
         tokenFile = "/var/lib/gitea-registration/nixos-host";
 
+        hostPackages = with pkgs; [
+          bash
+          coreutils
+          curl
+          gawk
+          gitMinimal
+          gnused
+          nix
+          nodejs
+          skopeo
+          wget
+        ];
+
         labels = ["nixos:host"];
 
         settings = {
@@ -92,13 +113,9 @@
           };
         };
       };
-      };
-      systemd.services.gitea-runner-nixos-host = lib.mkIf cfg.nativeRunner {
+      systemd.services.gitea-runner-nixoshost = lib.mkIf cfg.nativeRunner {
         after = ["gitea-runner-gen-token.service"];
         requires = ["gitea-runner-gen-token.service"];
-        serviceConfig.Environment = ''
-          PATH=/run/current-system/sw/bin:/usr/bin:/bin
-        '';
       };
       systemd.services.gitea-runner-gen-token = lib.mkIf cfg.nativeRunner {
         wantedBy = ["multi-user.target"];

modules/services/korrosync/_derivation.nix

@@ -28,7 +28,11 @@ rustPlatform.buildRustPackage (finalAttrs: {
     pkg-config
   ];
 
-  #cargoHash = "sha256-3oMPREUWwKNEeaf8FdWHdjPMLU5xMSMzxKrmrhU+iko=";
+  checkFlags = [
+    "--skip"
+    "cli_should_start_server"
+  ];
+
   cargoLock.lockFile = "${finalAttrs.src}/Cargo.lock";
 
   SSL_CERT_FILE = "${cacert}/etc/ssl/certs/ca-bundle.crt";

modules/services/matrix.nix

@@ -2,10 +2,13 @@
   flake.nixosModules.matrix = {
     config,
     lib,
-    pkgs,
     ...
   }: let
     cfg = config.hive.matrix;
+    ketesa-web-root = fetchTarball {
+      url = "https://github.com/etkecc/ketesa/releases/download/v1.4.0/ketesa.tar.gz";
+      sha256 = "sha256:0za0rddcbxn2ra4xlykn7v8b4j0ddyacivyzp91m80r071ds1dk7";
+    };
   in {
     options.hive.matrix = {
       enable = lib.mkEnableOption "Enable matrix server (synapse)";
@@ -16,24 +19,21 @@
         description = "The internal port of the synapse server";
       };
 
-      registrationSecretSopsKey = lib.mkOption {
-        type = lib.types.str;
-        description = "The sops key of the secret containing the registration secret";
+      ketesaLocalPort = lib.mkOption {
+        type = lib.types.int;
+        default = 8475;
+        description = "The internal port of the ketesa virtual host";
       };
 
       hiddenServiceHostnameSopsKey = lib.mkOption {
         type = lib.types.str;
         description = "The sops key of the secret containing the hostname of the hidden service";
       };
+
       hiddenServiceSecret = lib.mkOption {
         type = lib.types.path;
         description = "The file containing the hidden service's secret";
       };
-      instanceFQDN = lib.mkOption {
-        type = lib.types.str;
-        example = "nextcloud.example.com";
-        description = "Fully qualified domain name of the Nextcloud instance";
-      };
     };
 
     config = lib.mkIf cfg.enable {
@@ -57,16 +57,35 @@
                 port = cfg.localPort;
               };
             }
+            {
+              port = 8080;
+              target = {
+                addr = "127.0.0.1";
+                port = cfg.ketesaLocalPort;
+              };
+            }
           ];
         };
       };
 
+      # Virtual host for ketesa
+      services.nginx.virtualHosts."ketesa-localhost" = {
+        listen = [
+          {
+            addr = "127.0.0.1";
+            port = cfg.ketesaLocalPort;
+          }
+        ];
+        forceSSL = false;
+        enableACME = false;
+        root = "${ketesa-web-root}";
+      };
+
       # Secret hostname for matrix-synapse
       sops.templates."hidden-matrix-synapse".owner = "matrix-synapse";
       sops.templates."hidden-matrix-synapse".content = ''
         server_name: "${config.sops.placeholder.${cfg.hiddenServiceHostnameSopsKey}}"
         public_baseurl: "http://${config.sops.placeholder.${cfg.hiddenServiceHostnameSopsKey}}"
-        registration_shared_secret: "${config.sops.placeholder.${cfg.registrationSecretSopsKey}}"
       '';
 
       # Synapse
@@ -90,11 +109,12 @@
           }
         ];
         settings = {
-          enable_registration = false;
+          enable_registration = true;
           registration_requires_token = true;
           report_stats = false;
           federation_domain_whitelist = [];
           federation_ip_range_blacklist = ["0.0.0.0/0"];
+          matrix_static_files_file_matrix_support_enabled = true;
         };
 
         extraConfigFiles = [

modules/tools/bulk-transcode/bulk-transcode.sh

@@ -10,6 +10,8 @@ declare -rA presets=(
     [storage-av1]="-c:v libsvtav1 -preset 6 -crf 28 -g 240 -svtav1-params tune=0:aq-mode=2 -c:a copy"
     [storage-av1-1080p]="-vf scale='if(gte(iw/ih,1),1920,-1)':'if(gte(iw/ih,1),-1,1920)' -c:v libsvtav1 -preset 6 -crf 28 -g 240 -svtav1-params tune=0:aq-mode=2 -c:a copy"
     [storage-av1-nvenc]="-c:v av1_nvenc -cq 28 -preset slow -c:a copy"
+    [network-hevc]="-c:v libx265 -preset slower -crf 22 -x265-params aq-mode=3:aq-strength=1.0:psy-rd=1.8:psy-rdoq=1.0 -pix_fmt yuv420p -c:a aac -b:a 128k"
+    [network-hevc-faster]="-c:v libx265 -preset slow -crf 26 -x265-params aq-mode=3:aq-strength=1.0:psy-rd=1.8:psy-rdoq=1.0 -pix_fmt yuv420p -c:a aac -b:a 128k"
     [network]="-c:v libx264 -preset slow -crf 22 -pix_fmt yuv420p -c:a aac -b:a 128k"
     [network-1080p]="-vf scale='if(gte(iw/ih,1),1920,-1)':'if(gte(iw/ih,1),-1,1920)' -c:v libx264 -preset slow -crf 22 -pix_fmt yuv420p -c:a aac -b:a 128k"
     [whatsapp]="-vf scale='if(gte(iw/ih,1),1920,-1)':'if(gte(iw/ih,1),-1,1920)' -c:v libx264 -preset slow -crf 30 -profile:v baseline -level 3.0 -pix_fmt yuv420p -r 25 -g 50 -c:a aac -b:a 160k -r:a 44100"
@@ -20,11 +22,13 @@ declare -rA containers=(
     [instagram]="mp4"
     [insta-4k]="mp4"
     [network-hevc]="mp4"
-    [storage-hevc-faster]="mkv"
-    [storage-hevc]="mkv"
+    [storage-hevc-faster]="mp4"
+    [storage-hevc]="mp4"
     [storage-av1]="mkv"
     [storage-av1-1080p]="mkv"
     [storage-av1-nvenc]="mkv"
+    [network-hevc]="mp4"
+    [network-hevc-faster]="mp4"
     [network]="mp4"
     [network-1080p]="mp4"
     [whatsapp]="mp4"