fix shell path

Signed-off-by: Hadi <112569860+anotherhadi@users.noreply.github.com>

README.md

@@ -33,6 +33,7 @@ _secrets_, and _custom theming_ all in one place.
 - 💻 Hyprland & TUIs: Preconfigured Hyprland ecosystem with a lot of cool TUIs
 - 🎨 Consistent Theming: Base16 & Stylix-powered themes
 - ⌨️ Vim-like Everywhere: Unified keybindings (Hyprland, nvim, vimium, etc.)
+- 🔒 Hardened by Default: LUKS encryption, sops-nix secrets, impermanence and more
 
 ## Table of Content
 

home/programs/gui/pkgs.nix

@@ -19,5 +19,6 @@
   home.persistence."/persist".directories = [
     ".config/ticktick"
     ".config/Signal"
+    ".config/obsidian"
   ];
 }

hosts/laptop/configuration.nix

@@ -29,7 +29,7 @@
 
   home-manager.users."${config.var.username}" = import ./home.nix;
 
-  users.users.${config.var.username}.hashedPasswordFile = config.sops.secrets.hashedPassword.path;
+  users.users.${config.var.username}.hashedPassword = "$y$j9T$A7gH534UczuBxulj9IfEu1$ImRy3lpYpemRWNVIkA7efKPWXneFiqhZnEF1aMkWcD8"; # CHANGEME: This is my password
 
   # Don't touch this
   system.stateVersion = "26.05";

hosts/laptop/persistence.nix

@@ -1,5 +1,5 @@
 # Impermanence: declares what should survive a wipe of "/".
-{config, ...}: {
+{
   environment.persistence."/persist" = {
     hideMounts = true;
 
@@ -13,6 +13,7 @@
       "/var/lib/systemd/timers" # last-run timestamps (e.g. nix gc weekly)
       "/var/log"
       "/var/cache/tuigreet"
+      "/var/db/sudo/lectured" # remembers that the sudo lecture was already shown
     ];
 
     files = [
@@ -24,14 +25,4 @@
       "/var/lib/systemd/random-seed" # avoid a weak entropy pool on first boot
     ];
   };
-
-  # -- How to find what's missing --
-  # Use the system normally for a week or two, then look for files that
-  # changed recently outside of what's already declared above:
-  #   find "/home/${config.var.username}" -xdev -type f -mtime -14 \
-  #     -not -path '*/.cache/*' -not -path '*/Cache/*' | less
-  # Anything that keeps showing up there (app state, history files,
-  # game saves, browser profile, spotify/lazygit config, GPG state, etc.)
-  # is a candidate to add above. Do this *before* switching root to a
-  # wipeable filesystem, not after.
 }

hosts/laptop/secrets/default.nix

@@ -12,8 +12,6 @@ in {
     age.keyFile = "${home}/.config/sops/age/keys.txt";
     defaultSopsFile = ./secrets.yaml;
     secrets = {
-      hashedPassword.neededForUsers = true;
-
       ssh-config = {
         owner = username;
         path = "${home}/.ssh/config";

hosts/laptop/wireguard.nix

@@ -5,8 +5,6 @@
 }: let
   vpnConnection = "wg-vpn";
 
-  # Same OSD mechanism as home/system/waybar/scripts.nix's waybar-osd: drop the
-  # text in /tmp/waybar-osd and nudge waybar's custom/osd module to show it.
   toggleVpn = pkgs.writeShellScript "toggle-wg-vpn" ''
     set -euo pipefail
     nmcli="${pkgs.networkmanager}/bin/nmcli"
@@ -20,7 +18,7 @@
     fi
 
     printf '%s' "$OSD_TEXT" > /tmp/waybar-osd
-    ${pkgs.procps}/bin/pkill -x -RTMIN+8 waybar 2>/dev/null || true
+    ${pkgs.procps}/bin/pkill -f -RTMIN+8 '^waybar$' 2>/dev/null || true
   '';
 in {
   environment.systemPackages = [

shell.nix

@@ -3,7 +3,7 @@
   gitHooksLib,
 }: let
   hooks = gitHooksLib.run {
-    src = ../.;
+    src = ./.;
     hooks = {
       inject-exec = {
         enable = true;