fix waybar OSD calls

Signed-off-by: Hadi <112569860+anotherhadi@users.noreply.github.com>

README.md

@@ -33,7 +33,6 @@ _secrets_, and _custom theming_ all in one place.
 - 💻 Hyprland & TUIs: Preconfigured Hyprland ecosystem with a lot of cool TUIs
 - 🎨 Consistent Theming: Base16 & Stylix-powered themes
 - ⌨️ Vim-like Everywhere: Unified keybindings (Hyprland, nvim, vimium, etc.)
-- 🔒 Hardened by Default: LUKS encryption, sops-nix secrets, impermanence and more
 
 ## Table of Content
 

home/programs/gui/pkgs.nix

@@ -19,6 +19,5 @@
   home.persistence."/persist".directories = [
     ".config/ticktick"
     ".config/Signal"
-    ".config/obsidian"
   ];
 }

hosts/laptop/configuration.nix

@@ -29,7 +29,7 @@
 
   home-manager.users."${config.var.username}" = import ./home.nix;
 
-  users.users.${config.var.username}.hashedPassword = "$y$j9T$A7gH534UczuBxulj9IfEu1$ImRy3lpYpemRWNVIkA7efKPWXneFiqhZnEF1aMkWcD8"; # CHANGEME: This is my password
+  users.users.${config.var.username}.hashedPasswordFile = config.sops.secrets.hashedPassword.path;
 
   # Don't touch this
   system.stateVersion = "26.05";

hosts/laptop/persistence.nix

@@ -1,5 +1,5 @@
 # Impermanence: declares what should survive a wipe of "/".
-{
+{config, ...}: {
   environment.persistence."/persist" = {
     hideMounts = true;
 
@@ -13,7 +13,6 @@
       "/var/lib/systemd/timers" # last-run timestamps (e.g. nix gc weekly)
       "/var/log"
       "/var/cache/tuigreet"
-      "/var/db/sudo/lectured" # remembers that the sudo lecture was already shown
     ];
 
     files = [
@@ -25,4 +24,14 @@
       "/var/lib/systemd/random-seed" # avoid a weak entropy pool on first boot
     ];
   };
+
+  # -- How to find what's missing --
+  # Use the system normally for a week or two, then look for files that
+  # changed recently outside of what's already declared above:
+  #   find "/home/${config.var.username}" -xdev -type f -mtime -14 \
+  #     -not -path '*/.cache/*' -not -path '*/Cache/*' | less
+  # Anything that keeps showing up there (app state, history files,
+  # game saves, browser profile, spotify/lazygit config, GPG state, etc.)
+  # is a candidate to add above. Do this *before* switching root to a
+  # wipeable filesystem, not after.
 }

hosts/laptop/secrets/default.nix

@@ -12,6 +12,8 @@ in {
     age.keyFile = "${home}/.config/sops/age/keys.txt";
     defaultSopsFile = ./secrets.yaml;
     secrets = {
+      hashedPassword.neededForUsers = true;
+
       ssh-config = {
         owner = username;
         path = "${home}/.ssh/config";

hosts/laptop/wireguard.nix

@@ -5,6 +5,8 @@
 }: let
   vpnConnection = "wg-vpn";
 
+  # Same OSD mechanism as home/system/waybar/scripts.nix's waybar-osd: drop the
+  # text in /tmp/waybar-osd and nudge waybar's custom/osd module to show it.
   toggleVpn = pkgs.writeShellScript "toggle-wg-vpn" ''
     set -euo pipefail
     nmcli="${pkgs.networkmanager}/bin/nmcli"
@@ -18,7 +20,7 @@
     fi
 
     printf '%s' "$OSD_TEXT" > /tmp/waybar-osd
-    ${pkgs.procps}/bin/pkill -f -RTMIN+8 '^waybar$' 2>/dev/null || true
+    ${pkgs.procps}/bin/pkill -x -RTMIN+8 waybar 2>/dev/null || true
   '';
 in {
   environment.systemPackages = [

shell.nix

@@ -3,7 +3,7 @@
   gitHooksLib,
 }: let
   hooks = gitHooksLib.run {
-    src = ./.;
+    src = ../.;
     hooks = {
       inject-exec = {
         enable = true;