yes

Signed-off-by: Hadi <hadi@example.com>

.github/assets/README_template.md

@@ -119,6 +119,8 @@ sudo nixos-rebuild switch --flake ~/.config/nixos#yourhostname
 - [THEMES](docs/THEMES.md): How themes work and how to create your own
 - [WALLPAPERS](https://github.com/anotherhadi/awesome-wallpapers): An awesome
   collection of wallpapers
+- [NEOVIM](docs/NEOVIM.md): How to use the Neovim config in your own flake
+- [GROUPS](docs/GROUPS.md): Reusable package groups (dev, cybersecurity)
 
 - [CONTRIBUTING](docs/CONTRIBUTING.md): How to contribute
 - [LICENSE](LICENSE): MIT License

.gitignore

@@ -1,2 +1,3 @@
 .sops.yaml
+.claude/
 old/

LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2024 Hadi
+Copyright (c) 2026 Hadi
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

README.md

@@ -129,6 +129,8 @@ sudo nixos-rebuild switch --flake ~/.config/nixos#yourhostname
 - [THEMES](docs/THEMES.md): How themes work and how to create your own
 - [WALLPAPERS](https://github.com/anotherhadi/awesome-wallpapers): An awesome
   collection of wallpapers
+- [NEOVIM](docs/NEOVIM.md): How to use the Neovim config in your own flake
+- [GROUPS](docs/GROUPS.md): Reusable package groups (dev, cybersecurity)
 
 - [CONTRIBUTING](docs/CONTRIBUTING.md): How to contribute
 - [LICENSE](LICENSE): MIT License

docs/GROUPS.md

@@ -0,0 +1,44 @@
+# Groups
+
+Groups are curated sets of packages exposed as flake outputs. Each group has two forms:
+
+- **`homeManagerModules.<group>`** — full home-manager module (packages + files + systemd units)
+- **`packages.<group>`** — standalone environment for `nix shell` (packages only)
+
+## Available groups
+
+- dev (go, bun, air, ...)
+- cybersecurity (nmap, john, dirb, ffuf, ...)
+
+For the Cybersecurity group, the home-manager module also sets up:
+
+- `~/Cyber/wordlists/` with SecLists, fuzz4bounty, and hashcat rules
+- `~/Cyber/tmp/` as a temporary workspace
+
+## Use in another flake
+
+Add this repo as an input:
+
+```nix
+inputs.nixy.url = "github:anotherhadi/nixy";
+```
+
+Import the home-manager module in your home configuration:
+
+```nix
+{ inputs, ... }: {
+  imports = [
+    inputs.nixy.homeManagerModules.cybersecurity
+    # inputs.nixy.homeManagerModules.dev
+  ];
+}
+```
+
+## Quick shell without installing
+
+```sh
+nix shell github:anotherhadi/nixy#cybersecurity
+nix shell github:anotherhadi/nixy#dev
+```
+
+This drops you into a shell with all tools in `PATH`. No home-manager required, no wordlists or systemd units.

docs/NEOVIM.md

@@ -0,0 +1,40 @@
+# Neovim
+
+The Neovim configuration is built with [nvf](https://github.com/notashelf/nvf) and exposed as a standalone flake output.
+It can be used in three ways: run it directly, import it into another flake's home-manager setup, or use it as part of this config.
+
+## Run directly
+
+No installation needed:
+
+```sh
+nix run github:anotherhadi/nixy#nvim
+```
+
+## Use in another flake
+
+Add this repo as an input:
+
+```nix
+inputs.nixy.url = "github:anotherhadi/nixy";
+```
+
+Then import the home-manager module in your home configuration:
+
+```nix
+{ inputs, ... }: {
+  imports = [ inputs.nixy.homeManagerModules.nvim ];
+}
+```
+
+## What's included
+
+| File            | Description                                                            |
+| --------------- | ---------------------------------------------------------------------- |
+| `options.nix`   | Core settings: theme (catppuccin mocha), clipboard, indentation, folds |
+| `languages.nix` | LSP, treesitter, formatters, diagnostics, and per-language config      |
+| `keymaps.nix`   | All key mappings (leader: `space`)                                     |
+| `picker.nix`    | Snacks picker + oil.nvim                                               |
+| `snacks.nix`    | Snacks extras: image preview, zen mode, git signs, statuscolumn        |
+| `utils.nix`     | Bufferline, lualine, copilot, lazygit, toggleterm, autocomplete        |
+| `mini.nix`      | Mini.nvim suite: pairs, comment, icons, indentscope, diff, git         |

docs/SERVER.md

@@ -24,8 +24,6 @@ The server hosts several key applications:
 - **Mealie**: A self-hosted recipe manager and meal planner with a clean user interface.
 - **Stirling-PDF**: A powerful, locally hosted web application for editing, merging, and converting PDF files.
 - **CyberChef**: The "Cyber Swiss Army Knife" for data analysis, decoding, and encryption tasks.
-- **Linkding**: A simple, fast, and minimalist bookmark manager.
 - **Mazanoke**: A utility service for image processing, specialized in format conversion and downgrading/optimization.
-- **Eleakxir**: A private search engine for exploring data wells (parquet files) with a modern web interface.
 - **SSH**: Secure remote access configuration for server management. (via browser too)
 - **Security related stuff**: Cloudflared, Fail2Ban, Firewall

flake.nix

@@ -7,15 +7,13 @@
 
   inputs = {
     nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
-    nixpkgs-stable.url = "github:nixos/nixpkgs/nixos-25.05";
+    nixpkgs-stable.url = "github:nixos/nixpkgs/nixos-26.05";
-    nixos-hardware.url = "github:NixOS/nixos-hardware/master";
+    nixos-hardware.url = "github:NixOS/nixos-hardware";
-    hyprland.url = "git+https://github.com/hyprwm/Hyprland?submodules=1";
-    stylix.url = "github:danth/stylix";
-    nixcord.url = "github:kaylorben/nixcord";
-    sops-nix.url = "github:Mic92/sops-nix";
     nvf.url = "github:notashelf/nvf";
-    bun2nix.url = "github:nix-community/bun2nix";
+    nur = {
-
+      url = "github:nix-community/nur";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
     nix-index-database = {
       url = "github:nix-community/nix-index-database";
       inputs.nixpkgs.follows = "nixpkgs";
@@ -24,75 +22,60 @@
       url = "github:nix-community/home-manager";
       inputs.nixpkgs.follows = "nixpkgs";
     };
-    caelestia-shell = {
+    stylix = {
-      url = "github:caelestia-dots/shell";
+      url = "github:nix-community/stylix";
       inputs.nixpkgs.follows = "nixpkgs";
     };
-    caelestia-cli = {
+    sops-nix = {
-      url = "github:caelestia-dots/cli";
+      url = "github:Mic92/sops-nix";
       inputs.nixpkgs.follows = "nixpkgs";
     };
-    spicetify-nix = {
+    notashelf-tuigreet = {
-      url = "github:Gerg-L/spicetify-nix";
+      url = "github:NotAShelf/tuigreet";
       inputs.nixpkgs.follows = "nixpkgs";
     };
+    helium-browser = {
+      url = "github:oxcl/nix-flake-helium-browser";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+
     # Server
-    # FIXME: Deleted repo for now
-    # eleakxir.url = "github:anotherhadi/eleakxir";
     nixarr.url = "github:rasmus-kirk/nixarr";
     default-creds.url = "github:anotherhadi/default-creds";
     blog.url = "github:anotherhadi/blog";
     awesome-wallpapers.url = "github:anotherhadi/awesome-wallpapers";
+    iknowyou.url = "github:anotherhadi/iknowyou";
   };
 
-  outputs = inputs @ {nixpkgs, ...}: {
+  outputs = inputs @ {
-    nixosConfigurations = {
+    nixpkgs,
-      nixy =
+    nixpkgs-stable,
-        # CHANGEME: This should match the 'hostname' in your variables.nix file
+    ...
-        nixpkgs.lib.nixosSystem {
+  }: let
-          modules = [
+    system = "x86_64-linux";
-            {
+    pkgs = nixpkgs.legacyPackages.${system};
-              nixpkgs.overlays = [];
+    args = {
-              _module.args = {
+      inherit
-                inherit inputs;
+        inputs
-              };
+        nixpkgs
-            }
+        system
-            inputs.nixos-hardware.nixosModules.omen-16-n0005ne # CHANGEME: check https://github.com/NixOS/nixos-hardware
+        pkgs
-            inputs.home-manager.nixosModules.home-manager
+        ;
-            inputs.stylix.nixosModules.stylix
+      pkgs-stable = nixpkgs-stable.legacyPackages.${system};
-            inputs.nix-index-database.nixosModules.default
-            ./hosts/laptop/configuration.nix # CHANGEME: change the path to match your host folder
-          ];
-        };
-
-      pph = nixpkgs.lib.nixosSystem {
-        modules = [
-          {
-            nixpkgs.overlays = [];
-            _module.args = {
-              inherit inputs;
-            };
-          }
-          inputs.home-manager.nixosModules.home-manager
-          inputs.stylix.nixosModules.stylix
-          inputs.nix-index-database.nixosModules.default
-          ./hosts/pph/configuration.nix
-        ];
-      };
-      # Jack is my server
-      jack = nixpkgs.lib.nixosSystem {
-        modules = [
-          {_module.args = {inherit inputs;};}
-          inputs.home-manager.nixosModules.home-manager
-          inputs.stylix.nixosModules.stylix
-          inputs.sops-nix.nixosModules.sops
-          inputs.nixarr.nixosModules.default
-          # inputs.eleakxir.nixosModules.eleakxir
-          inputs.nix-index-database.nixosModules.default
-          inputs.default-creds.nixosModules.default
-          ./hosts/server/configuration.nix
-        ];
-      };
     };
-  };
+    merge = nixpkgs.lib.foldl nixpkgs.lib.recursiveUpdate {};
+  in
+    merge [
+      (import ./home/programs/nvf/flake.nix args)
+      (import ./home/programs/group/flake.nix args)
+      (import ./home/programs/nixy/flake.nix args)
+      {
+        formatter.${system} = pkgs.alejandra;
+        nixosConfigurations = {
+          h-laptop = import ./hosts/laptop/flake.nix args;
+          h-work = import ./hosts/work/flake.nix args;
+          jack = import ./hosts/server/flake.nix args;
+        };
+      }
+    ];
 }

home/programs/brave/default.nix

@@ -1,113 +0,0 @@
-{pkgs, ...}: {
-  programs.brave = {
-    enable = true;
-    commandLineArgs = [
-      # Wayland Native
-      "--enable-features=UseOzonePlatform"
-      "--ozone-platform=wayland"
-
-      # Hardware Acceleration (NVIDIA optimized)
-      "--enable-accelerated-video-decode"
-      "--enable-gpu-rasterization"
-      "--enable-zero-copy"
-      "--ignore-gpu-blocklist"
-
-      # Performance
-      "--enable-features=VaapiVideoDecoder"
-      "--enable-features=VaapiVideoEncoder"
-      "--enable-features=CanvasOopRasterization"
-      "--disable-features=UseChromeOSDirectVideoDecoder"
-
-      # Privacy & Security
-      "--disable-features=MediaRouter" # Disable Chromecast
-      "--disable-features=OptimizationHints" # No Google suggestions
-      "--disable-features=AutofillSavePaymentMethods"
-      "--disable-background-networking" # No telemetry
-      "--disable-sync" # Manual sync control
-
-      # Wayland-specific fixes
-      "--disable-features=WaylandWpColorManagerV1" # Color management fix
-
-      # UI/UX
-      "--force-dark-mode" # Match Stylix theme
-      "--enable-features=WebUIDarkMode"
-      "--no-default-browser-check"
-    ];
-    extensions = let
-      ids = [
-        "cjpalhdlnbpafiamejdnhcphjbkeiagm" # ublock origin
-        "dbepggeogbaibhgnhhndojpepiihcmeb" # vimium
-        "eimadpbcbfnmbkopoojfekhnkhdbieeh" # dark reader
-        "pkehgijcmpdhfbdbbnkijodmdjhbjlgp" # privacy badger
-        "ghmbeldphafepmbegfdlkpapadhbakde" # proton pass
-        "mmjbdbjnoablegbkcklggeknkfcjkjia" # custom new tab page
-        "oabailhgoobiboghkmlppflobceplfde" # Enable Clipboard
-      ];
-    in
-      map (id: {inherit id;}) ids;
-  };
-
-  xdg.configFile."BraveSoftware/Brave-Browser/Policies/managed/policy.json".text = builtins.toJSON {
-    BraveShieldsAdControl = 2;
-    BraveShieldsTrackersBlocked = 1;
-    BraveShieldsHttpsEverywhere = 1;
-    BraveRewardsDisabled = 1;
-    BraveWalletDisabled = 1;
-    BraveVPNDisabled = 1;
-    BraveAIChatEnabled = 0;
-    PasswordManagerEnabled = 0;
-    BravePlaylistEnabled = 0;
-    BraveWebDiscoveryEnabled = 0;
-    BraveStatsPingEnabled = 0;
-    DnsOverHttpsMode = "automatic";
-    BraveDarkMode = 1;
-  };
-
-  home.sessionVariables = {
-    DEFAULT_BROWSER = "${pkgs.brave}/bin/brave";
-    BROWSER = "${pkgs.brave}/bin/brave";
-  };
-
-  xdg.desktopEntries = {
-    brave-incognito = {
-      name = "Brave (Private window)";
-      genericName = "Navigateur Web";
-      exec = "brave --incognito";
-      icon = "brave-browser";
-      terminal = false;
-      categories = ["Network" "WebBrowser"];
-      mimeType = ["text/html" "text/xml"];
-    };
-    brave-tor = {
-      name = "Brave (Private window w/Tor)";
-      genericName = "Navigateur Web";
-      exec = "brave --tor";
-      icon = "brave-browser";
-      terminal = false;
-      categories = ["Network" "WebBrowser"];
-    };
-  };
-
-  # =================================================================
-  #  BRAVE SETTINGS (via brave://flags)
-  # =================================================================
-
-  # These need to be set manually in brave://flags on first launch:
-  # - Enable Tab Groups (UI)
-  # - Enable Parallel Downloading
-  # - Enable Reader Mode
-  # - GPU Rasterization: Enabled
-  # - Override software rendering list: Enabled
-  #
-  # Privacy settings (brave://settings/privacy):
-  # - Block trackers & ads: Aggressive
-  # - Block all fingerprinting
-  # - Upgrade connections to HTTPS
-  # - Block scripts: Off (breaks sites, use uBlock instead)
-  # - Block cookies: Only 3rd party
-  #
-  # Appearance (brave://settings/appearance):
-  # - Show home button: Off
-  # - Show bookmarks bar: Only on new tab
-  # - Use wide address bar: On
-}

home/programs/discord/default.nix

@@ -1,9 +0,0 @@
-# Discord is a popular chat application.
-{inputs, ...}: {
-  imports = [inputs.nixcord.homeModules.nixcord];
-
-  programs.nixcord = {
-    enable = true;
-    config = {frameless = true;};
-  };
-}

home/programs/fetch/default.nix

@@ -1,367 +0,0 @@
-# Nerdfetch, a simple system info script written in bash
-# Source: https://github.com/ThatOneCalculator/NerdFetch
-{pkgs, ...}: let
-  nerdfetch = pkgs.writeShellScriptBin "nerdfetch" ''
-          ostype="$(uname)"
-
-          version=8.1.1
-          font=nerd
-          distrotype=none
-          osi=""
-          ki=""
-          ri="󰍛"
-          pi="󰏔"
-          ui="󰅶"
-          ci=""
-
-          case $1 in
-          "-p")
-          	font=phosphor
-          	osi=""
-          	ki=""
-          	ri=""
-          	pi=""
-          	ui=""
-          	ci=""
-          	;;
-          "-c")
-          	font=cozette
-          	ki="♥"
-          	ri=""
-          	pi=""
-          	ui=""
-          	ci=""
-          	;;
-          "-e")
-          	font=emoji
-          	osi="🐧"
-          	ki="💓"
-          	ri="🐐"
-          	pi="📦"
-          	ui="☕"
-          	ci="🎨"
-          	;;
-          "-v")
-          	echo "NerdFetch $version"
-          	exit
-          	;;
-          "-h")
-          	echo "Flags:
-          -c: Cozette font
-          -p: Phosphor font
-          -e: Emoji font
-          -v: Version"
-          	exit
-          	;;
-          esac
-
-          if command -v getprop 1>/dev/null; then
-          	distrotype=android
-          fi
-          kernel="$(echo $(uname -r) | cut -d'-' -f1-1)"
-          case $ostype in
-          *"Linux"*)
-          	if [ $distrotype = android ]; then
-          		host="$(hostname)"
-          		USER="$(whoami)"
-          		os="Android $(getprop ro.build.version.release)"
-          		case $font in
-          		phosphor) osi="" ;;
-          		emoji) osi="🤖" ;;
-          		*) osi="󰀲" ;;
-          		esac
-          	else
-          		host="$(cat /proc/sys/kernel/hostname)"
-          		. /etc/os-release
-          		if [ -f /bedrock/etc/bedrock-release ]; then
-          			os="$(brl version)"
-          		else
-          			os="''${PRETTY_NAME}"
-          			if [ $font = nerd ]; then
-          				case $(echo $ID | sed 's/ .*//') in
-          				debian) osi="" ;;
-          				arch) osi="󰣇" ;;
-          				endeavouros) osi="" ;;
-          				fedora) osi="" ;;
-          				gentoo) osi="" ;;
-          				rhel) osi="" ;;
-          				slackware) osi="" ;;
-          				void) osi="" ;;
-          				alpine) osi="" ;;
-          				nixos) osi="󱄅" ;;
-          				artix) osi="" ;;
-          				exherbo) osi="󰆚" ;;
-          				mageia) osi="" ;;
-          				manjaro) osi="" ;;
-          				opensuse) osi="" ;;
-          				solus) osi="" ;;
-          				ubuntu) osi="" ;;
-          				mint) osi="󰣭" ;;
-          				trisquel) osi="" ;;
-          				puppy) osi="" ;;
-          				coreos) osi="" ;;
-          				mx) osi="" ;;
-          				vanilla) osi="" ;;
-          				pop_os) osi="" ;;
-          				raspbian) osi="" ;;
-          				deepin) osi="" ;;
-          				almalinux) osi="" ;;
-          				garuda) osi="" ;;
-          				centos) osi="" ;;
-          				rocky) osi="" ;;
-          				esac
-          			elif [ $font = cozette ]; then
-          				case $(echo $ID | sed 's/ .*//') in
-          				debian) osi="" ;;
-          				arch) osi="" ;;
-          				fedora) osi="" ;;
-          				gentoo) osi="" ;;
-          				slackware) osi="" ;;
-          				void) osi="" ;;
-          				alpine) osi="" ;;
-          				nixos) osi="" ;;
-          				mageia) osi="" ;;
-          				manjaro) osi="" ;;
-          				opensuse) osi="" ;;
-          				ubuntu) osi="" ;;
-          				mint) osi="" ;;
-          				coreos) osi="" ;;
-          				centos) osi="" ;;
-          				esac
-          			fi
-          		fi
-          	fi
-          	shell=$(basename "$SHELL")
-          	;;
-          *"Darwin"*)
-          	host="$(hostname -f | sed -e 's/^[^.]*\.//')"
-          	mac_product="$(/usr/libexec/PlistBuddy -c "Print:ProductName" /System/Library/CoreServices/SystemVersion.plist)"
-          	mac_version="$(/usr/libexec/PlistBuddy -c "Print:ProductVersion" /System/Library/CoreServices/SystemVersion.plist)"
-          	os="''${mac_product} ''${mac_version}"
-          	case $font in
-          	nerd) osi="" ;;
-          	phosphor) osi="" ;;
-          	cozette) osi="" ;;
-          	emoji) osi="🍎" ;;
-          	esac
-          	;;
-          *"FreeBSD"*)
-          	host="$(hostname)"
-          	distrotype=bsd
-          	os="FreeBSD $(freebsd-version | sed 's/-.*//')"
-          	case $font in
-          	nerd) osi="" ;;
-          	phosphor) osi="" ;;
-          	cozette) osi="" ;;
-          	emoji) osi="😈" ;;
-          	esac
-          	;;
-          *"OpenBSD"*)
-          	host="$(hostname)"
-          	distrotype=bsd
-          	os="OpenBSD $(uname -r)"
-          	case $font in
-          	nerd) osi="" ;;
-          	phosphor) osi="" ;;
-          	cozette) osi="⌘" ;;
-          	emoji) osi="🐡" ;;
-          	esac
-          	;;
-          *"NetBSD"*)
-          	host="$(hostname)"
-          	distrotype=netbsd
-          	os="NetBSD $(uname -r)"
-          	case $font in
-          	nerd) osi="󰉀" ;;
-          	phosphor) osi="" ;;
-          	cozette) osi="" ;;
-          	emoji) osi="🚩" ;;
-          	esac
-          	;;
-          *)
-          	os="Unix-like"
-          	host="host"
-          	;;
-          esac
-
-          ## PACKAGE MANAGER AND PACKAGES DETECTION
-
-          MANAGER=$(which nix-env pkg flatpak yum zypper dnf rpm dpkg-query brew port pacman xbps-query emerge cave apk kiss pmm /usr/sbin/slackpkg bulge birb yay paru pacstall cpm pmm eopkg getprop 2>/dev/null)
-          manager=$(basename "$MANAGER")
-          if [ $distrotype = netbsd ]; then
-          	manager="pkg_info-netbsd"
-          fi
-          case $manager in
-          cpm) packages="$(cpm C)" ;;
-          flatpak) packages="$(flatpak list --app | wc -l)" ;;
-          brew) packages="$(printf '%s\n' "$(brew --cellar)/"* | wc -l)" ;;
-          port) packages="$(port installed | wc -l)" ;;
-          dpkg-query) packages="$(dpkg-query -f '${"binary:Package"}\n' -W | wc -l)" ;;
-          rpm) packages="$(rpm -qa --last | wc -l)" ;;
-          yum) packages="$(yum list installed | wc -l)" ;;
-          dnf) packages="$(dnf list installed | wc -l)" ;;
-          zypper) packages="$(zypper se | wc -l)" ;;
-          pacman) packages="$(pacman -Q | wc -l)" ;;
-          yay) packages="$(yay -Q | wc -l)" ;;
-          paru) packages="$(paru -Q | wc -l)" ;;
-          pacstall) packages="$(pacstall -L | wc -l)" ;;
-          kiss) packages="$(kiss list | wc -l)" ;;
-          emerge) packages="$(qlist -I | wc -l)" ;;
-          pkg) packages="$(pkg info | wc -l | tr -d ' ')" ;;
-          cave) packages="$(cave show installed-slots | wc -l)" ;;
-          xbps-query) packages="$(xbps-query -l | wc -l)" ;;
-          nix-env) packages="$(nix-store -q --requisites /run/current-system/sw | wc -l)" ;;
-          apk) packages="$(apk list --installed | wc -l)" ;;
-          pmm) packages="$(/bedrock/libexec/pmm pacman pmm -Q 2>/dev/null | wc -l)" ;;
-          eopkg) packages="$(eopkg li | wc -l)" ;;
-          /usr/sbin/slackpkg) packages="$(ls /var/log/packages | wc -l)" ;;
-          bulge) packages="$(bulge list | wc -l)" ;;
-          birb) packages="$(birb --list-installed | wc -l)" ;;
-          pkg_info)
-          	packages="$(pkg_info -A | wc -l)"
-          	manager="pkg"
-          	;;
-          pkg_info-netbsd)
-          	packages="$(pkg_info -a | wc -l)"
-          	manager="pkg"
-          	;;
-          *)
-          	if [ $distrotype = android ]; then
-          		packages="$(dpkg-query -f '${"binary:Package"}\n' -W | wc -l)"
-          		manager="dpkg"
-          	else
-          		packages="$(ls /usr/bin | wc -l)"
-          		manager="bin"
-          	fi
-          	;;
-          esac
-
-          packages="''${packages#"''${packages%%[![:space:]]*}"}"
-          manager=$(echo $manager | sed "s/-query//; s/\/usr\/.*\///")
-
-          ## UPTIME DETECTION
-
-          if [ $distrotype = android ]; then
-          	uptime="$(echo $(uptime -p) | cut -c 4-)"
-          elif [ $distrotype = bsd ] || [ $distrotype = netbsd ]; then
-          	uptime="$(uptime | sed -e 's/.* up //; s/, [0-9]* user.*//')"
-          else
-          	case $ostype in
-          	*"Linux"*)
-          		IFS=. read -r s _ </proc/uptime
-          		;;
-          	*)
-          		s=$(sysctl -n kern.boottime)
-          		s=''${s#*=}
-          		s=''${s%,*}
-          		s=$(($(date +%s) - s))
-          		;;
-          	esac
-          	d="$((s / 60 / 60 / 24))"
-          	h="$((s / 60 / 60 % 24))"
-          	m="$((s / 60 % 60))"
-          	# Plurals
-          	[ "$d" -gt 1 ] && dp=s
-          	[ "$h" -gt 1 ] && hp=s
-          	[ "$m" -gt 1 ] && mp=s
-          	[ "$s" -gt 1 ] && sp=s
-          	# Hide empty fields.
-          	[ "$d" = 0 ] && d=
-          	[ "$h" = 0 ] && h=
-          	[ "$m" = 0 ] && m=
-          	[ "$m" != "" ] && s=
-          	# Make the output of uptime smaller.
-          	[ "$d" ] && uptime="$d day$dp, "
-          	[ "$h" ] && uptime="$uptime$h hour$hp, "
-          	[ "$m" ] && uptime="$uptime$m min$mp"
-          	[ "$s" ] && uptime="$uptime$s sec$sp"
-          	uptime=''${uptime%, }
-          fi
-
-          ## RAM DETECTION
-
-          case $ostype in
-          *"Linux"*)
-          	while IFS=':k ' read -r key val _; do
-          		case $key in
-          		MemTotal)
-          			mem_used=$((mem_used + val))
-          			mem_full=$val
-          			;;
-          		Shmem) mem_used=$((mem_used + val)) ;;
-          		MemFree | Buffers | Cached | SReclaimable) mem_used=$((mem_used - val)) ;;
-          		esac
-          	done </proc/meminfo
-          	mem_used=$((mem_used / 1024))
-          	mem_full=$((mem_full / 1024))
-          	;;
-          *"Darwin"*)
-          	mem_full=$(($(sysctl -n hw.memsize) / 1024 / 1024))
-          	while IFS=:. read -r key val; do
-          		case $key in
-          		*' wired'* | *' active'* | *' occupied'*)
-          			mem_used=$((mem_used + ${"val:-0"}))
-          			;;
-          		esac
-          	done <-EOF
-          		$(vm_stat)
-          	EOF
-
-          	mem_used=$((mem_used * 4 / 1024))
-          	;;
-          *"BSD"*)
-          	mem_full=$(($(sysctl -n hw.physmem) / 1024 / 1024))
-          	if [ $distrotype = netbsd ]; then
-          		mem_free=$(($(vmstat | awk 'NR==3 {print $4}') / 1024))
-          	else
-          		mem_free=$(($(sysctl -n vm.stats.vm.v_free_count) * $(sysctl -n vm.stats.vm.v_page_size) / 1024 / 1024))
-          	fi
-          	mem_used=$((mem_full - mem_free))
-          	;;
-          *)
-          	mem_full=1
-          	mem_used=0
-          	;;
-          esac
-          memstat="''${mem_used}/''${mem_full} MiB"
-          if which expr >/dev/null 2>&1; then
-          	mempercent="($(expr $(expr ''${mem_used} \* 100 / ''${mem_full}))%)"
-          fi
-
-          ## DEFINE COLORS
-
-          bold=''
-          black=''
-          red=''
-          green=''
-          yellow=''
-          blue=''
-          magenta=''
-          cyan=''
-          white=''
-          grey=''
-          reset=''
-
-          ## USER VARIABLES -- YOU CAN CHANGE THESE
-
-          lc="$reset$bold$magenta" # labels
-          nc="$reset$bold$magenta" # labels
-          hn="$reset$bold$magenta" # labels
-          ic="$reset$white"          # info
-          c0="$reset$grey"           # first color
-          c1="$reset$white"          # second color
-          c2="$reset$yellow"         # third color
-
-          ## OUTPUT
-
-    echo """
-        ''${c0}      ___     ''${nc}''${USER}''${grey}@''${reset}''${hn}''${host}''${reset}
-        ''${c0}     (''${c1}.. ''${c0}\    ''${lc}''${osi}  ''${ic}''${os}''${reset}
-        ''${c0}     (''${c2}<> ''${c0}|    ''${lc}''${ki}  ''${ic}''${kernel}''${reset}
-        ''${c0}    /''${c1}/  \\ ''${c0}\\   ''${lc}''${ri}  ''${ic}''${RAM}''${memstat} ''${mempercent}
-        ''${c0}   ( ''${c1}|  | ''${c0}/|  ''${lc}''${pi}  ''${ic}''${packages} (''${manager})''${reset}
-        ''${c2}  _''${c0}/\\ ''${c1}__)''${c0}/''${c2}_''${c0})  ''${lc}''${ui}  ''${ic}''${uptime}''${reset}
-        ''${c2}  \/''${c0}-____''${c2}\/''${reset}   ''${lc}''${ci}  ''${red}███''${green}███''${yellow}███''${blue}███''${magenta}███''${cyan}███''${reset}
-        """
-  '';
-in {home.packages = [nerdfetch];}

home/programs/ghostty/default.nix

@@ -1,4 +1,21 @@
 {
+  pkgs,
+  config,
+  ...
+}: let
+  cursorShaders = pkgs.fetchFromGitHub {
+    owner = "sahaj-b";
+    repo = "ghostty-cursor-shaders";
+    rev = "06d4e90fb5410e9c4d0b3131584060adddf89406";
+    hash = "sha256-G/UIr1bKnxn1AcHl/4FL/jou6b7M2VeREslYVELxdmw=";
+  };
+  c = config.lib.stylix.colors;
+in {
+  home.sessionVariables = {
+    TERMINAL = "ghostty";
+    TERM = "ghostty";
+  };
+
   programs.ghostty = {
     enable = true;
     installVimSyntax = true;
@@ -11,17 +28,39 @@
       clipboard-write = "allow";
       copy-on-select = "clipboard";
       app-notifications = false;
+      custom-shader = "${cursorShaders}/cursor_warp.glsl";
+      custom-shader-animation = "always";
       keybind = [
-        "ctrl+j=goto_split:left"
+        # "ctrl+j=goto_split:left"
-        "ctrl+i=goto_split:up"
+        # "ctrl+i=goto_split:up"
-        "ctrl+k=goto_split:down"
+        # "ctrl+k=goto_split:down"
-        "ctrl+l=goto_split:right"
+        # "ctrl+l=goto_split:right"
-        "shift+ctrl+h=new_split:left"
+        # "shift+ctrl+h=new_split:left"
-        "shift+ctrl+j=new_split:down"
+        # "shift+ctrl+j=new_split:down"
-        "shift+ctrl+k=new_split:up"
+        # "shift+ctrl+k=new_split:up"
-        "shift+ctrl+l=new_split:right"
+        # "shift+ctrl+l=new_split:right"
         "shift+ctrl+tab=new_tab"
       ];
     };
   };
+
+  home.file.".config/ilovetui/config.yaml".text = ''
+    colors:
+      base00: "#${c.base00}" # Background
+      base01: "#${c.base01}" # Lighter Background / Status Bars
+      base02: "#${c.base02}" # Selection Background
+      base03: "#${c.base03}" # Comments / Invisibles
+      base04: "#${c.base04}" # Dark Foreground / Status Bars
+      base05: "#${c.base05}" # Default Foreground
+      base06: "#${c.base06}" # Light Foreground
+      base07: "#${c.base07}" # Light Background
+      base08: "#${c.base08}" # Variables / Errors / Diff Deleted
+      base09: "#${c.base09}" # Integers / Constants / Booleans
+      base0a: "#${c.base0A}" # Classes / Warnings / Search Background
+      base0b: "#${c.base0B}" # Strings / Success / Diff Inserted
+      base0c: "#${c.base0C}" # Support / Regex / Escape Characters
+      base0d: "#${c.base0D}" # Functions / Methods / Headings / Accent
+      base0e: "#${c.base0E}" # Keywords / Storage / Diff Changed
+      base0f: "#${c.base0F}" # Embedded / Misc
+  '';
 }

home/programs/git/default.nix

@@ -44,10 +44,8 @@ in {
         st = "status";
         br = "branch";
         df = "!git hist | peco | awk '{print $2}' | xargs -I {} git diff {}^ {}";
-        hist = ''
+        hist = ''log --pretty=format:"%Cgreen%h %Creset%cd %Cblue[%cn] %Creset%s%C(yellow)%d%C(reset)" --graph --date=relative --decorate --all'';
-          log --pretty=format:"%Cgreen%h %Creset%cd %Cblue[%cn] %Creset%s%C(yellow)%d%C(reset)" --graph --date=relative --decorate --all'';
+        llog = ''log --graph --name-status --pretty=format:"%C(red)%h %C(reset)(%cd) %C(green)%an %Creset%s %C(yellow)%d%Creset" --date=relative'';
-        llog = ''
-          log --graph --name-status --pretty=format:"%C(red)%h %C(reset)(%cd) %C(green)%an %Creset%s %C(yellow)%d%Creset" --date=relative'';
         edit-unmerged = "!f() { git ls-files --unmerged | cut -f2 | sort -u ; }; hx `f`";
       };
     };

home/programs/git/lazygit.nix

@@ -16,12 +16,15 @@ in {
       update.method = "never";
       git = {
         commit.signOff = true;
-        overrideGpg = true; 
+        overrideGpg = true;
         parseEmoji = true;
       };
       gui = {
         theme = {
-          activeBorderColor = [accent "bold"];
+          activeBorderColor = [
+            accent
+            "bold"
+          ];
           inactiveBorderColor = [muted];
         };
         showListFooter = false;

home/programs/group/basic-apps.nix

@@ -0,0 +1,44 @@
+{
+  pkgs,
+  pkgs-stable,
+  ...
+}: {
+  home.packages = with pkgs-stable; [
+    vlc # Video player
+    obsidian # Note taking app
+    textpieces # Manipulate texts
+    resources # Ressource monitor
+    gnome-clocks # Clocks app
+    gnome-text-editor # Basic graphic text editor
+    ticktick # Todo app
+    pinta # Image editor
+    switcheroo # Convert images between different formats
+    onlyoffice-desktopeditors # Office suite
+    blanket # Listen to different sounds
+    signal-desktop # Messaging app
+
+    # I love TUIs
+    caligula # User-friendly, lightweight TUI for disk imaging (ISO, USB BOOT)
+    dysk # A terminal-based disk usage analyzer
+    wikiman # Offline search engine for manual pages (arch wiki, tldr)
+    tealdeer # Fast tldr client
+    sttr # Minimalist "cyberchef" like. Cross-platform, cli app to perform various operations on string
+    wiremix # Simple TUI mixer for PipeWire
+    slides # A terminal-based presentation tool that allows you to create and deliver presentations directly from the command line
+    pom # Pomodoro timer in your terminal
+    tabiew # A terminal-based CSV viewer and manipulator
+    jless # A pager for JSON
+    pkgs.wifitui # TUI for managing wifi
+    pkgs.nur.repos.anotherhadi.usbguard-tui # TUI for managing USBGuard rules
+    pkgs.nur.repos.anotherhadi.sheets # Terminal based spreadsheet tool
+
+    # I love CLIs
+    httpie # Command-line HTTP client, a user-friendly cURL replacement
+    gh # GitHub
+    gh-dash # A terminal dashboard for GitHub
+    figlet # Transform text into ASCII art
+    pastel # Command-line tool to generate, analyze, convert and manipulate colors
+    imagemagick # Image manipulation tool
+    chafa # Image to ANSI/Unicode converter and more.
+  ];
+}

home/programs/group/cybersecurity-packages.nix

@@ -0,0 +1,47 @@
+{
+  pkgs,
+  pkgs-stable,
+}:
+(with pkgs-stable; [
+  # Web
+  dirb
+  ffuf
+  katana
+  whatweb
+
+  # Hashes
+  hashcat
+  haiti
+  hydra
+  john
+
+  # Databases
+  mariadb
+  redis
+  sqlmap
+  nosqli
+
+  # Network
+  inetutils
+  termshark # wireshark in TUI
+  whois
+  dig
+  nmap
+  samba
+
+  # Misc
+  metasploit
+  nuclei
+  openvpn
+
+  # Secrets
+  trufflehog
+
+  # Forensics
+  binwalk
+])
+++ [ pkgs.dnsrecon ]
+++ (with pkgs.nur.repos.anotherhadi; [
+  spilltea
+  jwt-tui
+])

home/programs/group/cybersecurity.nix

@@ -1,16 +1,44 @@
 {
   pkgs,
-  inputs,
+  pkgs-stable,
   ...
 }: {
-  home.packages = with pkgs; [
+  home.packages = import ./cybersecurity-packages.nix {
-    firefox
+    inherit pkgs pkgs-stable;
-    wireshark
+  };
-    nmap
+
-    john
+  systemd.user.tmpfiles.rules = [
-    hashcat
+    "d %h/Cyber/tmp 0755 - - -"
-    # inputs.eleakxir.packages.${stdenv.hostPlatform.system}.leak-utils
+    "d %h/Cyber/wordlists 0755 - - -"
-    caido
+    "d %h/Cyber/wordlists/rules 0755 - - -"
-    nuclei
   ];
+
+  home.file = {
+    "Cyber/wordlists/seclists".source = pkgs.fetchFromGitHub {
+      owner = "danielmiessler";
+      repo = "SecLists";
+      rev = "47aa98053fce8670c6489e4f6fb57dc34881d8bd";
+      hash = "sha256-ojXLB/TXap1Qi0MtV5/WJlJpjNIDYx/sLY2KHm0uFKI=";
+    };
+
+    "Cyber/wordlists/fuzz4bounty".source = pkgs.fetchFromGitHub {
+      owner = "0xPugal";
+      repo = "fuzz4bounty";
+      rev = "a805f6b434033f054312da0ddc2bc3021cc9a3b0";
+      hash = "sha256-wMhx1CcxIyw2E7gJXQxXAFc7m5nYt0FXNkoTZqFMQh4=";
+    };
+
+    # RULES
+    "Cyber/wordlists/rules/oneruletorulethemstill".source = pkgs.fetchFromGitHub {
+      owner = "stealthsploit";
+      repo = "oneruletorulethemstill";
+      rev = "4bfb7322e189305b5f35bb7fcd4e9cc233c3d3c6";
+      hash = "sha256-h7MeymIXS/6wlPRt4lzsIEqOOssP0lDx9nQip65cwZw=";
+    };
+
+    "Cyber/wordlists/rules/best64.rule".source = pkgs.fetchurl {
+      url = "https://raw.githubusercontent.com/CarlosLannister/OwadeReborn/refs/heads/master/owade/fileAnalyze/hashcatLib/best64.rule%7E";
+      hash = "sha256-T0XkMHJZQiy63/j25nGTkaiDFjc+blmgEVGTAFgVylU=";
+    };
+  };
 }

home/programs/group/dev-packages.nix

@@ -0,0 +1,17 @@
+{
+  pkgs,
+  pkgs-stable,
+}:
+(with pkgs; [
+  go
+  claude-code
+])
+++ (with pkgs-stable; [
+  nodejs
+  air
+  duckdb
+  python3
+  jq
+  nix-prefetch-github
+  rsync
+])

home/programs/group/dev.nix

@@ -0,0 +1,7 @@
+{
+  pkgs,
+  pkgs-stable,
+  ...
+}: {
+  home.packages = import ./dev-packages.nix {inherit pkgs pkgs-stable;};
+}

home/programs/group/flake.nix

@@ -0,0 +1,21 @@
+{
+  inputs,
+  pkgs,
+  pkgs-stable,
+  system,
+  ...
+}: let
+  devPackages = import ./dev-packages.nix {inherit pkgs pkgs-stable;};
+  cyberPackages = import ./cybersecurity-packages.nix {inherit pkgs pkgs-stable;};
+in {
+  packages.${system} = {
+    dev = pkgs.buildEnv {
+      name = "dev-tools";
+      paths = devPackages;
+    };
+    cybersecurity = pkgs.buildEnv {
+      name = "cybersecurity-tools";
+      paths = cyberPackages;
+    };
+  };
+}

home/programs/group/misc.nix

@@ -0,0 +1,11 @@
+{pkgs-stable, ...}: {
+  home.packages = with pkgs-stable; [
+    tty-solitaire
+    bastet
+    peaclock
+    cbonsai
+    pipes
+    cmatrix
+    fastfetch
+  ];
+}

home/programs/helium/bookmarks/default.nix

@@ -0,0 +1,459 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}: let
+  bookmarkList =
+    (import ./general.nix)
+    ++ (import ./tools.nix)
+    ++ (import ./entertainment.nix)
+    ++ (import ./infosec.nix)
+    ++ (import ./other.nix)
+    ++ (import ./jack.nix);
+
+  c = config.lib.stylix.colors;
+
+  stripProtocol = url: lib.removePrefix "https://" (lib.removePrefix "http://" url);
+  stripDomain = url: builtins.head (lib.splitString "/" (stripProtocol url));
+
+  mkCard = item: let
+    domain = stripDomain item.url;
+    initial = builtins.substring 0 1 item.name;
+  in ''
+    <a href="${item.url}" class="card">
+      <div class="favicon-wrapper">
+        <img class="favicon" src="https://icons.duckduckgo.com/ip3/${domain}.ico" alt="" aria-hidden="true" loading="lazy" onerror="this.style.display='none';this.nextElementSibling.style.display='flex'">
+        <span class="favicon-fallback" style="display:none">${initial}</span>
+      </div>
+      <div class="card-info">
+        <span class="card-name">${item.name}</span>
+        <span class="card-url">${stripProtocol item.url}</span>
+      </div>
+    </a>'';
+
+  mkFolderContent = items: let
+    step = acc: item:
+      if item ? url
+      then acc // {pending = acc.pending ++ [item];}
+      else {
+        chunks =
+          acc.chunks
+          ++ lib.optional (acc.pending != []) {
+            isCards = true;
+            items = acc.pending;
+          }
+          ++ [
+            {
+              isCards = false;
+              folder = item;
+            }
+          ];
+        pending = [];
+      };
+    result =
+      lib.foldl' step {
+        chunks = [];
+        pending = [];
+      }
+      items;
+    chunks =
+      result.chunks
+      ++ lib.optional (result.pending != []) {
+        isCards = true;
+        items = result.pending;
+      };
+  in
+    lib.concatMapStrings (
+      chunk:
+        if chunk.isCards
+        then ''
+          <div class="cards">
+            ${lib.concatMapStrings mkCard chunk.items}
+          </div>''
+        else mkFolder chunk.folder
+    )
+    chunks;
+
+  mkFolder = folder: let
+    iconHtml =
+      if folder ? icon
+      then ''<span class="material-symbols-outlined folder-icon" aria-hidden="true">${folder.icon}</span>''
+      else "";
+  in ''
+    <details class="folder-section" open>
+      <summary class="folder-title">
+        ${iconHtml}<span class="folder-name">${folder.name}</span>
+        <svg class="chevron" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polyline points="6 9 12 15 18 9"/></svg>
+      </summary>
+      <div class="folder-content">
+        ${mkFolderContent folder.bookmarks}
+      </div>
+    </details>'';
+
+  grouped = let
+    step = acc: item:
+      if item ? url
+      then acc // {pending = acc.pending ++ [item];}
+      else {
+        groups =
+          acc.groups
+          ++ lib.optional (acc.pending != []) {
+            isRoot = true;
+            items = acc.pending;
+          }
+          ++ [
+            {
+              isRoot = false;
+              inherit item;
+            }
+          ];
+        pending = [];
+      };
+    result =
+      lib.foldl' step {
+        groups = [];
+        pending = [];
+      }
+      bookmarkList;
+  in
+    result.groups
+    ++ lib.optional (result.pending != []) {
+      isRoot = true;
+      items = result.pending;
+    };
+
+  mkSection = group:
+    if group.isRoot
+    then ''
+      <div class="root-section">
+        <div class="cards">
+          ${lib.concatMapStrings mkCard group.items}
+        </div>
+      </div>''
+    else mkFolder group.item;
+in {
+  home.file.".local/share/helium-startpage/index.html".text = ''
+    <!DOCTYPE html>
+    <html lang="en">
+    <head>
+      <meta charset="UTF-8">
+      <meta name="viewport" content="width=device-width, initial-scale=1.0">
+      <title>Bookmarks</title>
+      <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@20,300,0,0">
+      <style>
+        *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
+
+        body {
+          background-color: #${c.base00};
+          color: #${c.base05};
+          font-family: 'Source Sans Pro', sans-serif;
+          font-size: 14px;
+          min-height: 100vh;
+          padding: 2.5rem 2rem;
+        }
+
+        .header {
+          max-width: 1100px;
+          margin: 0 auto 2rem;
+          display: flex;
+          align-items: center;
+          gap: 1.5rem;
+        }
+
+        .page-title {
+          font-size: 1.3rem;
+          font-weight: 700;
+          color: #${c.base0D};
+          letter-spacing: -0.01em;
+          flex-shrink: 0;
+        }
+
+        .search-bar {
+          flex: 1;
+          background-color: #${c.base01};
+          border: 1px solid #${c.base02};
+          border-radius: 8px;
+          color: #${c.base05};
+          font-family: 'Source Sans Pro', sans-serif;
+          font-size: 0.9rem;
+          padding: 0.5rem 0.9rem;
+          outline: none;
+          transition: border-color 0.15s ease;
+        }
+
+        .search-bar::placeholder { color: #${c.base03}; }
+        .search-bar:focus { border-color: #${c.base0D}; }
+
+        .collapse-btn {
+          flex-shrink: 0;
+          background: none;
+          border: 1px solid #${c.base02};
+          border-radius: 8px;
+          color: #${c.base03};
+          cursor: pointer;
+          display: flex;
+          align-items: center;
+          justify-content: center;
+          padding: 0.47rem;
+          transition: color 0.15s ease, border-color 0.15s ease;
+        }
+
+        .collapse-btn:hover {
+          color: #${c.base0D};
+          border-color: #${c.base0D};
+        }
+
+        .collapse-btn svg { width: 16px; height: 16px; }
+
+        .bookmarks-container {
+          max-width: 1100px;
+          margin: 0 auto;
+          display: flex;
+          flex-direction: column;
+          gap: 0.75rem;
+        }
+
+        .root-section { margin-bottom: 1rem; }
+
+        details.folder-section { border-radius: 8px; }
+
+        details.folder-section > summary {
+          list-style: none;
+          cursor: pointer;
+          display: flex;
+          align-items: center;
+          gap: 0.5rem;
+          padding: 0.45rem 0.5rem;
+          border-radius: 8px;
+          user-select: none;
+          transition: background-color 0.12s ease;
+        }
+
+        details.folder-section > summary::-webkit-details-marker { display: none; }
+
+        details.folder-section > summary:hover {
+          background-color: #${c.base01};
+          color: #${c.base0D};
+        }
+
+        details.folder-section > summary:hover .folder-name { color: #${c.base0D}; }
+        details.folder-section > summary:hover .folder-icon { color: #${c.base0D}; }
+
+        .folder-icon {
+          font-size: 14px;
+          line-height: 1;
+          flex-shrink: 0;
+          color: #${c.base04};
+          user-select: none;
+        }
+
+        .folder-name {
+          font-size: 0.72rem;
+          font-weight: 700;
+          letter-spacing: 0.12em;
+          text-transform: uppercase;
+          color: #${c.base03};
+          flex: 1;
+        }
+
+        .chevron {
+          width: 13px;
+          height: 13px;
+          color: #${c.base03};
+          transition: transform 0.2s ease;
+          flex-shrink: 0;
+        }
+
+        details[open] > summary > .chevron { transform: rotate(180deg); }
+
+        .folder-content {
+          padding: 0.4rem 0 0.5rem 0;
+          display: flex;
+          flex-direction: column;
+          gap: 0.25rem;
+        }
+
+        .folder-content > details.folder-section > summary { padding-left: 1.2rem; }
+        .folder-content > details.folder-section > .folder-content { padding-left: 1rem; }
+
+        .cards {
+          display: grid;
+          grid-template-columns: repeat(auto-fill, minmax(220px, 1fr));
+          gap: 0.4rem;
+        }
+
+        .card {
+          display: flex;
+          align-items: center;
+          gap: 0.7rem;
+          padding: 0.6rem 0.8rem;
+          background-color: #${c.base01};
+          border: 1px solid #${c.base02};
+          border-radius: 10px;
+          text-decoration: none;
+          transition: background-color 0.12s ease, border-color 0.12s ease;
+          overflow: hidden;
+        }
+
+        .card:hover {
+          background-color: #${c.base02};
+          border-color: #${c.base0D};
+        }
+
+        .favicon-wrapper { position: relative; width: 18px; height: 18px; flex-shrink: 0; }
+
+        .favicon {
+          position: absolute;
+          inset: 0;
+          width: 100%;
+          height: 100%;
+          object-fit: contain;
+          border-radius: 3px;
+        }
+
+        .favicon-fallback {
+          position: absolute;
+          inset: 0;
+          display: flex;
+          align-items: center;
+          justify-content: center;
+          background-color: #${c.base02};
+          border-radius: 4px;
+          color: #${c.base04};
+          font-size: 10px;
+          font-weight: 700;
+          text-transform: uppercase;
+          user-select: none;
+        }
+
+        .card-info {
+          display: flex;
+          flex-direction: column;
+          gap: 0.05rem;
+          overflow: hidden;
+          flex: 1;
+        }
+
+        .card-name {
+          color: #${c.base05};
+          font-size: 0.86rem;
+          font-weight: 500;
+          white-space: nowrap;
+          overflow: hidden;
+          text-overflow: ellipsis;
+          transition: color 0.12s ease;
+        }
+
+        .card:hover .card-name { color: #${c.base0D}; }
+
+        .card-url {
+          color: #${c.base03};
+          font-family: 'Maple Mono NF', monospace;
+          font-size: 0.7rem;
+          white-space: nowrap;
+          overflow: hidden;
+          text-overflow: ellipsis;
+        }
+
+        .no-results {
+          color: #${c.base03};
+          font-size: 0.9rem;
+          padding: 0.5rem 0.2rem;
+          display: none;
+        }
+      </style>
+    </head>
+    <body>
+      <div class="header">
+        <h1 class="page-title">Bookmarks</h1>
+        <input id="search" class="search-bar" type="text" placeholder="Search…" autocomplete="off" spellcheck="false">
+        <button id="collapse-btn" class="collapse-btn" title="Collapse all folders" aria-label="Collapse all folders">
+          <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+            <polyline points="4 14 10 14 10 20"/><polyline points="20 10 14 10 14 4"/><line x1="10" y1="14" x2="3" y2="21"/><line x1="21" y1="3" x2="14" y2="10"/>
+          </svg>
+        </button>
+      </div>
+      <div class="bookmarks-container">
+        <p id="no-results" class="no-results">No results</p>
+        ${lib.concatMapStrings mkSection grouped}
+      </div>
+      <script>
+        window.addEventListener('DOMContentLoaded', function () {
+          const input = document.getElementById('search');
+          const noResults = document.getElementById('no-results');
+          const collapseBtn = document.getElementById('collapse-btn');
+
+          input.focus();
+
+          collapseBtn.addEventListener('click', function () {
+            document.querySelectorAll('details.folder-section').forEach(function (d) {
+              d.open = false;
+            });
+          });
+
+          input.addEventListener('input', function () {
+            const query = this.value.toLowerCase().trim();
+            let anyVisible = false;
+
+            if (query) {
+              document.querySelectorAll('details.folder-section').forEach(function (d) {
+                d.open = true;
+              });
+            }
+
+            document.querySelectorAll('.folder-section, .root-section').forEach(function (section) {
+              let sectionVisible = false;
+              section.querySelectorAll('.card').forEach(function (card) {
+                const name = card.querySelector('.card-name').textContent.toLowerCase();
+                const url = card.querySelector('.card-url').textContent.toLowerCase();
+                const match = !query || name.includes(query) || url.includes(query);
+                card.style.display = match ? ''' : 'none';
+                if (match) { sectionVisible = true; anyVisible = true; }
+              });
+              section.style.display = sectionVisible ? ''' : 'none';
+            });
+
+            noResults.style.display = anyVisible || !query ? 'none' : 'block';
+          });
+
+          input.addEventListener('keydown', function (e) {
+            if (e.key === 'Enter') {
+              const val = this.value.trim();
+              const isUrl = /^https?:\/\//i.test(val) || /^[a-zA-Z0-9-]+(\.[a-zA-Z]{2,})(\/.*)?$/.test(val);
+              if (isUrl) {
+                location.href = /^https?:\/\//i.test(val) ? val : 'https://' + val;
+              } else {
+                const first = document.querySelector('.card:not([style*="none"])');
+                if (first) {
+                  location.href = first.href;
+                } else {
+                  const q = encodeURIComponent(val);
+                  if (q) location.href = 'https://duckduckgo.com/?q=' + q;
+                }
+              }
+            }
+            if (e.key === 'Escape') {
+              this.value = ''';
+              this.dispatchEvent(new Event('input'));
+            }
+          });
+        });
+      </script>
+    </body>
+    </html>
+  '';
+
+  systemd.user.services.helium-startpage = {
+    Unit = {
+      Description = "Helium startpage HTTP server";
+      After = ["network.target"];
+    };
+    Service = {
+      Type = "simple";
+      ExecStart = "${pkgs.darkhttpd}/bin/darkhttpd %h/.local/share/helium-startpage --port 8888 --addr 127.0.0.1 --no-listing";
+      Restart = "on-failure";
+    };
+    Install.WantedBy = ["default.target"];
+  };
+}

home/programs/helium/bookmarks/entertainment.nix

@@ -0,0 +1,50 @@
+[
+  {
+    name = "Entertainment";
+    icon = "movie";
+    bookmarks = [
+      {
+        name = "Youtube";
+        url = "https://youtube.com";
+      }
+      {
+        name = "Jellyfin";
+        url = "https://media.hadi.icu";
+      }
+      {
+        name = "Seerr";
+        url = "https://demandemedia.hadi.icu";
+      }
+      {
+        name = "Social Media";
+        icon = "group";
+        bookmarks = [
+          {
+            name = "Medium";
+            url = "https://medium.com";
+          }
+          {
+            name = "Bluesky";
+            url = "https://bsky.app";
+          }
+          {
+            name = "Reddit";
+            url = "https://reddit.com";
+          }
+          {
+            name = "Instagram";
+            url = "https://instagram.com";
+          }
+          {
+            name = "Discord";
+            url = "https://discord.com/channels/@me/";
+          }
+          {
+            name = "Gitlab";
+            url = "https://gitlab.com/";
+          }
+        ];
+      }
+    ];
+  }
+]

home/programs/helium/bookmarks/general.nix

@@ -0,0 +1,14 @@
+[
+  {
+    name = "Proton Mail";
+    url = "https://mail.proton.me";
+  }
+  {
+    name = "Proton Drive";
+    url = "https://drive.proton.me";
+  }
+  {
+    name = "Github";
+    url = "https://github.com";
+  }
+]

home/programs/helium/bookmarks/infosec.nix

@@ -0,0 +1,56 @@
+[
+  {
+    name = "Infosec";
+    icon = "terminal";
+    bookmarks = [
+      {
+        name = "Nix 4 Cyber";
+        url = "https://n4c.hadi.icu";
+      }
+      {
+        name = "Infosec Notes - Anotherhadi";
+        url = "https://hadi.icu/notes";
+      }
+      {
+        name = "Cyberchef";
+        url = "https://cyberchef.hadi.icu";
+      }
+      {
+        name = "TryHackMe";
+        url = "https://tryhackme.com";
+      }
+      {
+        name = "Root-Me";
+        url = "https://root-me.org";
+      }
+      {
+        name = "Hack The Box";
+        url = "https://hackthebox.com";
+      }
+      {
+        name = "Iknowyou";
+        url = "https://iknowyou-prod.hadi.icu";
+      }
+      {
+        name = "Exploit-DB";
+        url = "https://exploit-db.com";
+      }
+      {
+        name = "Reverse Shell Generator";
+        url = "https://revshells.com";
+      }
+      {
+        name = "GTFOBins";
+        url = "https://gtfobins.org/";
+      }
+      {
+        name = "Crack Station";
+        url = "https://crackstation.net";
+      }
+      {
+        name = "Osint Tracker";
+        url = "https://app.osintracker.com";
+      }
+    ];
+  }
+]

home/programs/helium/bookmarks/jack.nix

@@ -0,0 +1,80 @@
+[
+  {
+    name = "Jack";
+    icon = "dns";
+    bookmarks = [
+      {
+        name = "Glance";
+        url = "https://home.hadi.icu";
+      }
+      {
+        name = "Blog";
+        url = "https://hadi.icu";
+      }
+      {
+        name = "Gitea";
+        url = "https://git.hadi.icu";
+      }
+      {
+        name = "Mealie";
+        url = "https://mealie.hadi.icu";
+      }
+      {
+        name = "Wallpapers";
+        url = "https://wallpapers.hadi.icu";
+      }
+      {
+        name = "Default Creds";
+        url = "https://default-creds.hadi.icu";
+      }
+      {
+        name = "Media";
+        icon = "subscriptions";
+        bookmarks = [
+          {
+            name = "Radarr";
+            url = "https://radarr.hadi.icu";
+          }
+          {
+            name = "Sonarr";
+            url = "https://sonarr.hadi.icu";
+          }
+          {
+            name = "Bazarr";
+            url = "https://bazarr.hadi.icu";
+          }
+          {
+            name = "Prowlarr";
+            url = "https://prowlarr.hadi.icu";
+          }
+          {
+            name = "Transmission";
+            url = "https://transmission.hadi.icu";
+          }
+        ];
+      }
+      {
+        name = "Infrastructure";
+        icon = "construction";
+        bookmarks = [
+          {
+            name = "AdGuard";
+            url = "https://adguard.hadi.icu";
+          }
+          {
+            name = "Umami";
+            url = "https://umami.hadi.icu";
+          }
+          {
+            name = "Cloudflare";
+            url = "https://dash.cloudflare.com";
+          }
+          {
+            name = "Cloudflare Zero Trust";
+            url = "https://one.dash.cloudflare.com";
+          }
+        ];
+      }
+    ];
+  }
+]

home/programs/helium/bookmarks/other.nix

@@ -0,0 +1,58 @@
+[
+  {
+    name = "Other";
+    icon = "category";
+    bookmarks = [
+      {
+        name = "Documentation";
+        icon = "menu_book";
+        bookmarks = [
+          {
+            name = "Hyprland Wiki";
+            url = "https://wiki.hypr.land";
+          }
+          {
+            name = "Nerdfont Cheatsheet";
+            url = "https://www.nerdfonts.com/cheat-sheet";
+          }
+          {
+            name = "Helium Bangs";
+            url = "https://helium.computer/bangs";
+          }
+          {
+            name = "NVF Options";
+            url = "https://nvf.notashelf.dev/";
+          }
+          {
+            name = "Stylix Wiki";
+            url = "https://nix-community.github.io/stylix/";
+          }
+          {
+            name = "Nixpkgs";
+            url = "https://github.com/NixOS/nixpkgs";
+          }
+          {
+            name = "tldr";
+            url = "https://tldr.inbrowser.app/";
+          }
+        ];
+      }
+      {
+        name = "Startpage Config";
+        url = "https://www.startpage.com/do/mypage.pl?prfe=45d331deb05471d659dba933e7400df51d952bb103da6f6125c0e769a6be1d65610456a479f495ceeee7e97311cf227d7c1bb198de0ceeb193d8cddf9c455c19a409cc35c3e3f542ee27bd7cecd3";
+      }
+      {
+        name = "Feedly";
+        url = "https://feedly.com";
+      }
+      {
+        name = "MyNixOS";
+        url = "https://mynixos.com";
+      }
+      {
+        name = "Amazon";
+        url = "https://amazon.fr";
+      }
+    ];
+  }
+]

home/programs/helium/bookmarks/tools.nix

@@ -0,0 +1,48 @@
+[
+  {
+    name = "Tools";
+    icon = "handyman";
+    bookmarks = [
+      {
+        name = "Maps";
+        url = "https://maps.apple.com";
+      }
+      {
+        name = "Excalidraw";
+        url = "https://excalidraw.com";
+      }
+      {
+        name = "Cobalt (downloader)";
+        url = "https://cobalt.meowing.de";
+      }
+      {
+        name = "Mazanoke (image)";
+        url = "https://mazanoke.hadi.icu";
+      }
+      {
+        name = "Vert";
+        url = "https://vert.sh";
+      }
+      {
+        name = "Markdown to PDF";
+        url = "https://md2file.com";
+      }
+      {
+        name = "Image to Vector";
+        url = "https://www.vectorcascade.com/";
+      }
+      {
+        name = "PrivateBin";
+        url = "https://privatebin.net";
+      }
+      {
+        name = "Claude";
+        url = "https://claude.ai";
+      }
+      {
+        name = "Gemini";
+        url = "https://gemini.google.com";
+      }
+    ];
+  }
+]

home/programs/helium/default.nix

@@ -0,0 +1,138 @@
+{
+  inputs,
+  config,
+  pkgs,
+  lib,
+  ...
+}: let
+  c = config.lib.stylix.colors;
+  rgb = base: map lib.strings.toInt [c."${base}-rgb-r" c."${base}-rgb-g" c."${base}-rgb-b"];
+
+  themeId = "abcadngacjlikcpkhleafekcdjmddegk";
+  themeKey = "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6t46VoE3mdV1QNMgybpmQLi5PtYHejnNrSj4DkBZyiTzMzs7Yyvg64f78w3QubZA5cTXSQ7FVhVHvv30I8ym/jNzsSN6reh1t4PtKsFjFRugAty8bfKJGD404HZLOFN2z3G9UPVLBBgzDH3DWbb/kcOq60Mlo/QDCIjsieZg0G3EYMl4efoThzYPWoyv0UEoiliwrE/AChxbgipQetUZ48bFhTCsmnYzCze7clssfTobzWtJJG0qFx76LauHKymRS5OTFfgsovKqHUSFJ202Q53vFdUPP/j8PjSPr1kZeg1NYc7Ba3MoA49EwtJf5ol9oYu05EEnSQ5+1AoYVmdE8QIDAQAB";
+
+  themeManifest = builtins.toJSON {
+    manifest_version = 2;
+    name = "Stylix Theme";
+    version = "1.0";
+    key = themeKey;
+    theme.colors = {
+      frame = rgb "base00";
+      frame_inactive = rgb "base00";
+      frame_incognito = rgb "base00";
+      frame_incognito_inactive = rgb "base00";
+      toolbar = rgb "base00";
+      toolbar_button_icon = rgb "base05";
+      control_background = rgb "base00";
+      tab_text = rgb "base0D";
+      background_tab = rgb "base00";
+      tab_background_text = rgb "base04";
+      tab_background_text_inactive = rgb "base04";
+      ntp_background = rgb "base00";
+      ntp_text = rgb "base05";
+    };
+  };
+
+  heliumFlags = [
+    "--ozone-platform=wayland"
+    "--enable-features=UseOzonePlatform,VaapiVideoDecoder,VaapiVideoEncoder,CanvasOopRasterization"
+    "--disable-features=UseChromeOSDirectVideoDecoder,WaylandWpColorManagerV1"
+    "--enable-accelerated-video-decode"
+    "--enable-gpu-rasterization"
+    "--use-gl=egl"
+    "--no-default-browser-check"
+    "--show-avatar-button=never"
+  ];
+
+  originalPkg = (inputs.helium-browser.packages.${pkgs.stdenv.hostPlatform.system}.helium).override {
+    flags = heliumFlags;
+  };
+
+  patchScript = pkgs.writeShellScript "helium-patch-prefs" ''
+    PROFILE="$HOME/.config/net.imput.helium/Default"
+    THEME_DIR="$PROFILE/Extensions/${themeId}/1.0_0"
+    PREFS="$PROFILE/Preferences"
+
+    mkdir -p "$THEME_DIR"
+    rm -f "$THEME_DIR/Cached Theme.pak"
+    printf '%s' '${themeManifest}' > "$THEME_DIR/manifest.json"
+
+    if [ -f "$PREFS" ]; then
+      tmp=$(mktemp)
+      ${lib.getExe pkgs.jq} \
+        --arg       id       "${themeId}" \
+        --slurpfile manifest "$THEME_DIR/manifest.json" \
+        '
+          .helium.browser.layout                       = 3     |
+          .helium.browser.minimal_location_bar        = true  |
+          .helium.browser.show_dynamic_new_tab_button = false |
+          .helium.browser.rounded_frame               = false |
+          .bookmark_bar.show_tab_groups               = false |
+          .extensions.settings[$id] = {
+            "active_permissions": {"api": [], "explicit_host": [], "manifest_permissions": [], "scriptable_host": []},
+            "creation_flags": 0,
+            "from_webstore":  false,
+            "install_time":   "13300000000000000",
+            "location":       1,
+            "manifest":       $manifest[0],
+            "path":           ($id + "/1.0_0"),
+            "state":          1,
+            "was_installed_by_default": false,
+            "was_installed_by_oem":     false
+          } |
+          .extensions.theme = {"id": $id, "use_system": false}
+        ' "$PREFS" > "$tmp" && mv "$tmp" "$PREFS"
+    fi
+  '';
+
+  baseWrapped = pkgs.symlinkJoin {
+    name = "helium-wrapped";
+    paths = [originalPkg];
+    nativeBuildInputs = [pkgs.makeWrapper];
+    postBuild = ''
+      wrapProgram $out/bin/helium \
+        --run ${lib.escapeShellArg (toString patchScript)}
+    '';
+  };
+
+  wrappedPkg = baseWrapped // {override = _: baseWrapped;};
+in {
+  imports = [
+    inputs.helium-browser.homeModules.default
+    ./bookmarks
+  ];
+
+  programs.helium = {
+    enable = true;
+    package = lib.mkForce wrappedPkg;
+  };
+
+  home.sessionVariables.BROWSER = "${config.programs.helium.package}/bin/helium";
+
+  xdg.desktopEntries.helium = {
+    name = "Helium";
+    genericName = "Navigateur Web";
+    exec = "${config.programs.helium.package}/bin/helium %U";
+    icon = "${config.programs.helium.package}/share/icons/hicolor/256x256/apps/helium.png";
+    terminal = false;
+    categories = ["Network" "WebBrowser"];
+    mimeType = [
+      "text/html"
+      "text/xml"
+      "application/xhtml+xml"
+      "x-scheme-handler/http"
+      "x-scheme-handler/https"
+      "x-scheme-handler/ftp"
+    ];
+  };
+
+  xdg.desktopEntries.helium-private = {
+    name = "Helium (Private window)";
+    genericName = "Navigateur Web";
+    exec = "${config.programs.helium.package}/bin/helium --incognito %U";
+    icon = "${config.programs.helium.package}/share/icons/hicolor/256x256/apps/helium.png";
+    terminal = false;
+    categories = ["Network" "WebBrowser"];
+    mimeType = ["text/html" "text/xml" "application/xhtml+xml"];
+  };
+}

home/programs/helium/system.nix

@@ -0,0 +1,70 @@
+{...}: let
+  bookmarkList =
+    (import ./bookmarks/general.nix)
+    ++ (import ./bookmarks/tools.nix)
+    ++ (import ./bookmarks/entertainment.nix)
+    ++ (import ./bookmarks/infosec.nix)
+    ++ (import ./bookmarks/other.nix)
+    ++ (import ./bookmarks/jack.nix);
+
+  toChromium = items:
+    map (item:
+      if item ? url
+      then {inherit (item) name url;}
+      else {
+        name = item.name;
+        children = toChromium item.bookmarks;
+      })
+    items;
+in {
+  stylix.targets.chromium.enable = false;
+
+  programs.helium = {
+    enable = true;
+
+    policies = {
+      BrowserSignin = 0;
+      SyncDisabled = true;
+      SigninAllowed = false;
+
+      PasswordManagerEnabled = false;
+      AutofillAddressEnabled = false;
+      AutofillCreditCardEnabled = false;
+      SafeBrowsingEnabled = false;
+      MetricsReportingEnabled = false;
+      SpellCheckServiceEnabled = false;
+      DefaultCookiesSetting = 1;
+      DefaultGeolocationSetting = 2;
+      DefaultNotificationsSetting = 2;
+      DefaultPopupsSetting = 2;
+
+      DefaultBrowserSettingEnabled = false;
+      DeveloperToolsAvailability = 1;
+
+      DnsOverHttpsMode = "automatic";
+      DnsOverHttpsTemplates = "https://dns.quad9.net/dns-query";
+
+      DefaultSearchProviderEnabled = true;
+      DefaultSearchProviderName = "Startpage";
+      DefaultSearchProviderSearchURL = "https://www.startpage.com/do/search?q={searchTerms}";
+      DefaultSearchProviderSuggestURL = "https://www.startpage.com/do/suggest?q={searchTerms}";
+
+      NewTabPageLocation = "http://127.0.0.1:8888";
+      HomepageIsNewTabPage = false;
+      HomepageLocation = "http://127.0.0.1:8888";
+      ShowHomeButton = false;
+      RestoreOnStartup = 4;
+
+      BookmarkBarEnabled = false;
+      ManagedBookmarks = toChromium bookmarkList;
+
+      ExtensionInstallForcelist = [
+        "dbepggeogbaibhgnhhndojpepiihcmeb" # Vimiu
+        "gcknhkkoolaabfmlnjonogaaifnjlfnp" # FoxyProxy
+        "ghmbeldphafepmbegfdlkpapadhbakde" # Proton Pass
+        "mdjildafknihdffpkfmmpnpoiajfjnjd" # Consent-O-Matic
+        "pkehgijcmpdhfbdbbnkijodmdjhbjlgp" # Privacy Badger
+      ];
+    };
+  };
+}

home/programs/nightshift/default.nix

@@ -1,19 +0,0 @@
-{pkgs, ...}: let
-  nightshift-toggle =
-    pkgs.writeShellScriptBin "nightshift-toggle"
-    # bash
-    ''
-      if pidof "hyprsunset"; then
-        pkill hyprsunset
-        ${pkgs.libnotify}/bin/notify-send "Night Shift Disabled" "Returning to full spectrum light. Filter disabled."
-      else
-        ${pkgs.hyprsunset}/bin/hyprsunset -t 4500 &
-        ${pkgs.libnotify}/bin/notify-send "Night Shift Activated" "Welcome to the warm side. Blue light filtering is now active."
-      fi
-    '';
-in {
-  home.packages = with pkgs; [
-    hyprsunset
-    nightshift-toggle
-  ];
-}

home/programs/nixy/default.nix

@@ -6,78 +6,26 @@
 #- - `nixy rebuild` - Rebuild the system.
 #- - `nixy ...` - ... see the script for more commands.
 {
-  pkgs,
   config,
+  lib,
+  pkgs,
   ...
-}: let
+}: {
-  configDirectory = config.var.configDirectory;
+  options.programs.nixy = {
+    enable = lib.mkEnableOption "nixy";
+    configDirectory = lib.mkOption {
+      type = lib.types.str;
+      default = "$HOME/.config/nixos";
+      description = "Path to the NixOS configuration directory";
+    };
+  };
 
-  nixy =
+  config = lib.mkIf config.programs.nixy.enable {
-    pkgs.writeShellScriptBin "nixy"
+    home.packages = [
-    # bash
+      (import ./package.nix {
-    ''
+        inherit pkgs;
-      EXTRA_ARGS="''${@:2}"
+        inherit (config.programs.nixy) configDirectory;
-
+      })
-      function exec() {
+    ];
-        $@
+  };
-      }
+}
-
-      function ui(){
-        DEFAULT_ICON="󰘳"
-
-        # "icon;name;command"[]
-        apps=(
-          "󰑓;Rebuild;nixy rebuild"
-          "󰐊;Test;nixy test"
-          "󰚰;Update;nixy update"
-          ";Collect Garbage;nixy gc"
-          "󰍜;Clean Boot Menu;nixy cb"
-          ";List generation;nixy listgen"
-          "󰌌;Hyprland Keybindings;nvim ${configDirectory}/docs/KEYBINDINGS-HYPRLAND.md"
-          "󰋩;Wallpapers;zen https://github.com/anotherhadi/nixy-wallpapers"
-        )
-
-        # Apply default icons if empty:
-        for i in "''${!apps[@]}"; do
-          apps[i]=$(echo "''${apps[i]}" | sed 's/^;/'$DEFAULT_ICON';/')
-        done
-
-        fzf_result=$(printf "%s\n" "''${apps[@]}" | awk -F ';' '{print $1" "$2}' | fzf)
-        [[ -z $fzf_result ]] && exit 0
-        fzf_result=''${fzf_result/ /;}
-        line=$(printf "%s\n" "''${apps[@]}" | grep "$fzf_result")
-        command=$(echo "$line" | sed 's/^[^;]*;//;s/^[^;]*;//')
-
-        exec "$command"
-        exit $?
-      }
-
-      [[ $1 == "" ]] && ui
-
-      if [[ $1 == "rebuild" ]];then
-        cd ${configDirectory} && git add . && sudo nixos-rebuild switch --flake . $EXTRA_ARGS
-      elif [[ $1 == "test" ]];then
-        cd ${configDirectory} && git add . && sudo nixos-rebuild test --flake . $EXTRA_ARGS
-      elif [[ $1 == "update" ]];then
-        cd ${configDirectory} && nix flake update $EXTRA_ARGS
-      elif [[ $1 == "gc" ]];then
-        echo "Starting Nix garbage collection..."
-        cd ${configDirectory} && \
-        echo "Cleaning up system garbage..." && \
-        sudo nix-collect-garbage -d && \
-        echo "Cleaning up user garbage..." && \
-        nix-collect-garbage -d && \
-        echo "Collecting garbage from Nix store..." && \
-        nix-store --gc && \
-        echo "Optimizing Nix store..." && \
-        nix-store --optimise
-        echo "Nix garbage collection complete."
-      elif [[ $1 == "cb" ]];then
-        sudo /run/current-system/bin/switch-to-configuration boot
-      elif [[ $1 == "listgen" ]];then
-        sudo nix-env -p /nix/var/nix/profiles/system --list-generations
-      else
-        echo "Unknown argument"
-      fi
-    '';
-in {home.packages = [nixy];}

home/programs/nixy/flake.nix

@@ -0,0 +1,14 @@
+{
+  pkgs,
+  system,
+  ...
+}: {
+  packages.${system}.nixy = import ./package.nix {
+    inherit pkgs;
+    configDirectory = "$HOME/.config/nixos";
+  };
+
+  homeManagerModules.nixy = {
+    imports = [./default.nix];
+  };
+}

home/programs/nixy/package.nix

@@ -0,0 +1,69 @@
+{
+  pkgs,
+  configDirectory,
+}:
+pkgs.writeShellScriptBin "nixy"
+# bash
+''
+  EXTRA_ARGS="''${@:2}"
+
+  function exec() {
+    $@
+  }
+
+  function ui(){
+    DEFAULT_ICON="󰘳"
+
+    # "icon;name;command"[]
+    apps=(
+      "󰑓;Rebuild;nixy rebuild"
+      "󰐊;Test;nixy test"
+      "󰚰;Update;nixy update"
+      ";Collect Garbage;nixy gc"
+      "󰍜;Clean Boot Menu;nixy cb"
+      ";List generation;nixy listgen"
+    )
+
+    # Apply default icons if empty:
+    for i in "''${!apps[@]}"; do
+      apps[i]=$(echo "''${apps[i]}" | sed 's/^;/'$DEFAULT_ICON';/')
+    done
+
+    fzf_result=$(printf "%s\n" "''${apps[@]}" | awk -F ';' '{print $1" "$2}' | fzf)
+    [[ -z $fzf_result ]] && exit 0
+    fzf_result=''${fzf_result/ /;}
+    line=$(printf "%s\n" "''${apps[@]}" | grep "$fzf_result")
+    command=$(echo "$line" | sed 's/^[^;]*;//;s/^[^;]*;//')
+
+    exec "$command"
+    exit $?
+  }
+
+  [[ $1 == "" ]] && ui
+
+  if [[ $1 == "rebuild" ]];then
+    cd ${configDirectory} && git add . && sudo nixos-rebuild switch --flake . $EXTRA_ARGS
+  elif [[ $1 == "test" ]];then
+    cd ${configDirectory} && git add . && sudo nixos-rebuild test --flake . $EXTRA_ARGS
+  elif [[ $1 == "update" ]];then
+    cd ${configDirectory} && nix flake update $EXTRA_ARGS
+  elif [[ $1 == "gc" ]];then
+    echo "Starting Nix garbage collection..."
+    cd ${configDirectory} && \
+    echo "Cleaning up system garbage..." && \
+    sudo nix-collect-garbage -d && \
+    echo "Cleaning up user garbage..." && \
+    nix-collect-garbage -d && \
+    echo "Collecting garbage from Nix store..." && \
+    nix-store --gc && \
+    echo "Optimizing Nix store..." && \
+    nix-store --optimise
+    echo "Nix garbage collection complete."
+  elif [[ $1 == "cb" ]];then
+    sudo /run/current-system/bin/switch-to-configuration boot
+  elif [[ $1 == "listgen" ]];then
+    sudo nix-env -p /nix/var/nix/profiles/system --list-generations
+  else
+    echo "Unknown argument"
+  fi
+''

home/programs/nvf/default.nix

@@ -1,21 +1,37 @@
-# NVF is a Neovim configuration that provides a minimal setup with essential plugins and configurations.
 {
   inputs,
-  pkgs,
+  config,
   ...
-}: {
+}: let
-  imports = [
+  c = config.lib.stylix.colors;
-    inputs.nvf.homeManagerModules.default
+in {
-    ./options.nix
+  imports = [inputs.nvf.homeManagerModules.default];
-    ./languages.nix
+
-    ./picker.nix
+  home.sessionVariables = {
-    ./snacks.nix
+    EDITOR = "nvim";
-    ./keymaps.nix
+  };
-    ./utils.nix
-    ./mini.nix
-  ];
 
   programs.nvf = {
     enable = true;
+    settings = {
+      vim.luaConfigRC.hl-overrides = ''
+        local function apply_hl()
+          vim.api.nvim_set_hl(0, "MiniStarterHeader",   { fg = "#${c.base0D}", bold = true })
+          vim.api.nvim_set_hl(0, "SnacksPickerBorder",  { fg = "#${c.base0D}" })
+          vim.api.nvim_set_hl(0, "SnacksPickerTitle",   { fg = "#${c.base0D}", bold = true })
+        end
+        apply_hl()
+        vim.api.nvim_create_autocmd("ColorScheme", { pattern = "*", callback = apply_hl })
+      '';
+      imports = [
+        ./options.nix
+        ./languages.nix
+        ./picker.nix
+        ./snacks.nix
+        ./keymaps.nix
+        ./utils.nix
+        ./mini.nix
+      ];
+    };
   };
 }

home/programs/nvf/flake.nix

@@ -0,0 +1,37 @@
+{
+  inputs,
+  pkgs,
+  system,
+  ...
+}: let
+  nvimConfig = inputs.nvf.lib.neovimConfiguration {
+    inherit pkgs;
+    modules = [
+      ./options.nix
+      ./languages.nix
+      ./picker.nix
+      ./snacks.nix
+      ./keymaps.nix
+      ./utils.nix
+      ./mini.nix
+    ];
+  };
+in {
+  packages.${system}.nvim = nvimConfig.neovim;
+
+  apps.${system}.nvim = {
+    type = "app";
+    program = "${nvimConfig.neovim}/bin/nvim";
+  };
+  defaultApp.${system} = {
+    type = "app";
+    program = "${nvimConfig.neovim}/bin/nvim";
+  };
+
+  homeManagerModules.nvim = {
+    imports = [
+      inputs.nvf.homeManagerModules.default
+      ./default.nix
+    ];
+  };
+}

home/programs/nvf/keymaps.nix

@@ -1,21 +1,14 @@
 {
-  programs.nvf.settings.vim = {
+  vim = {
     globals.mapleader = " ";
-    binds = {
+
-      whichKey = {
-        enable = true;
-        # TODO: registers
-        register = {};
-      };
-    };
     keymaps = [
-      # General Mappings
       {
         key = "s";
         mode = "n";
         silent = true;
-        action = "<cmd>lua require('flash').jump()<cr>";
+        action = "<cmd>lua MiniJump2d.start(MiniJump2d.builtin_opts.single_character)<cr>";
-        desc = "Flash";
+        desc = "Jump2d";
       }
       {
         key = "K";
@@ -32,52 +25,57 @@
         desc = "Next Buffer";
       }
 
-      # Disable Arrow Keys in Normal Mode and Middle click
+      # Format
       {
-        key = "<Up>";
+        key = "<leader>lf";
         mode = "n";
         silent = true;
-        action = "<Nop>";
+        action = "<cmd>lua require('conform').format({ async = true, lsp_format = 'fallback' })<cr>";
-        desc = "Disable Up Arrow";
+        desc = "Format file";
       }
+
+      # Terminal
       {
-        key = "<Down>";
+        key = "<leader>tt";
         mode = "n";
         silent = true;
-        action = "<Nop>";
+        action = "<cmd>lua Snacks.terminal.toggle()<cr>";
-        desc = "Disable Down Arrow";
+        desc = "Toggle terminal";
       }
       {
-        key = "<Left>";
+        key = "<leader>tf";
         mode = "n";
         silent = true;
-        action = "<Nop>";
+        action = "<cmd>lua Snacks.terminal.toggle(nil, { style = 'float' })<cr>";
-        desc = "Disable Left Arrow";
+        desc = "Toggle terminal (float)";
       }
       {
-        key = "<Right>";
+        key = "<leader>tg";
         mode = "n";
         silent = true;
-        action = "<Nop>";
+        action = "<cmd>lua Snacks.lazygit()<cr>";
-        desc = "Disable Right Arrow";
+        desc = "Lazygit";
       }
       {
-        key = "<MiddleMouse>";
+        key = "<leader>ts";
-        mode = ["n" "i" "v"]; # Normal, Insert, Visual
+        mode = "v";
-        action = "<nop>"; # No Operation
         silent = true;
+        action = ":<C-u>SttrTransform<CR>";
+        desc = "String Transform";
       }
       {
-        key = "<2-MiddleMouse>"; # Désactive aussi le double clic molette
+        key = "<leader>tj";
-        mode = ["n" "i" "v"];
+        mode = "n";
-        action = "<nop>";
         silent = true;
+        action = ":JwtTui<CR>";
+        desc = "JWT TUI";
       }
       {
-        key = "<3-MiddleMouse>"; # Désactive aussi le double clic molette
+        key = "<leader>tj";
-        mode = ["n" "i" "v"];
+        mode = "v";
-        action = "<nop>";
         silent = true;
+        action = ":<C-u>JwtTuiOpen<CR>";
+        desc = "JWT TUI";
       }
 
       # UI
@@ -138,27 +136,59 @@
         desc = "Hide tabline";
       }
 
-      # Windows
+      # Todos
       {
-        key = "<leader>ws";
+        key = "<leader>xt";
         mode = "n";
         silent = true;
-        action = "<cmd>split<cr>";
+        action = "<cmd>TodoTrouble<cr>";
-        desc = "Split";
+        desc = "Todo (Trouble)";
+      }
+
+      # Shell
+      {
+        key = "<leader>!";
+        mode = "n";
+        silent = true;
+        lua = true;
+        desc = "Insert command output";
+        action = ''
+          function()
+            local cmd = vim.fn.input("Command: ")
+            if cmd == "" then return end
+            local lines = vim.fn.systemlist(cmd)
+            while #lines > 0 and lines[#lines] == "" do
+              table.remove(lines)
+            end
+            if #lines == 0 then return end
+            vim.api.nvim_put(lines, "l", true, true)
+          end
+        '';
       }
       {
-        key = "<leader>wv";
+        key = "<leader>!";
-        mode = "n";
+        mode = "v";
         silent = true;
-        action = "<cmd>vsplit<cr>";
+        lua = true;
-        desc = "VSplit";
+        desc = "Run command with selection";
-      }
+        action = ''
-      {
+          function()
-        key = "<leader>wd";
+            local start_line = vim.fn.line("'<")
-        mode = "n";
+            local end_line = vim.fn.line("'>")
-        silent = true;
+            local lines = vim.api.nvim_buf_get_lines(0, start_line - 1, end_line, false)
-        action = "<cmd>close<cr>";
+            local input_text = table.concat(lines, "\n")
-        desc = "Close";
+
+            local cmd = vim.fn.input("$ ")
+            if cmd == "" then return end
+
+            local result = vim.fn.system({"bash", "-c", cmd}, input_text)
+            local output = vim.split(result, "\n", { plain = true })
+            if output[#output] == "" then table.remove(output) end
+            if #output == 0 then return end
+
+            vim.api.nvim_buf_set_lines(0, start_line - 1, end_line, false, output)
+          end
+        '';
       }
 
       # QOL
@@ -210,7 +240,11 @@
       # Save
       {
         key = "<C-s>";
-        mode = ["n" "i" "v"];
+        mode = [
+          "n"
+          "i"
+          "v"
+        ];
         silent = true;
         action = "<cmd>w<cr>";
         desc = "Save file";
@@ -219,11 +253,75 @@
       # Deactivate "esc"
       {
         key = "<Esc>";
-        mode = ["n" "i" "v"];
+        mode = [
+          "n"
+          "i"
+          "v"
+        ];
         silent = true;
         action = "<Nop>";
         desc = "Disable Escape";
       }
+
+      # Disable Arrow Keys in Normal Mode and Middle click
+      {
+        key = "<Up>";
+        mode = "n";
+        silent = true;
+        action = "<Nop>";
+        desc = "Disable Up Arrow";
+      }
+      {
+        key = "<Down>";
+        mode = "n";
+        silent = true;
+        action = "<Nop>";
+        desc = "Disable Down Arrow";
+      }
+      {
+        key = "<Left>";
+        mode = "n";
+        silent = true;
+        action = "<Nop>";
+        desc = "Disable Left Arrow";
+      }
+      {
+        key = "<Right>";
+        mode = "n";
+        silent = true;
+        action = "<Nop>";
+        desc = "Disable Right Arrow";
+      }
+      {
+        key = "<MiddleMouse>";
+        mode = [
+          "n"
+          "i"
+          "v"
+        ];
+        action = "<nop>";
+        silent = true;
+      }
+      {
+        key = "<2-MiddleMouse>";
+        mode = [
+          "n"
+          "i"
+          "v"
+        ];
+        action = "<nop>";
+        silent = true;
+      }
+      {
+        key = "<3-MiddleMouse>";
+        mode = [
+          "n"
+          "i"
+          "v"
+        ];
+        action = "<nop>";
+        silent = true;
+      }
     ];
   };
 }

home/programs/nvf/languages.nix

@@ -1,9 +1,5 @@
-{
+{...}: {
-  lib,
+  vim = {
-  pkgs,
-  ...
-}: {
-  programs.nvf.settings.vim = {
     diagnostics = {
       enable = true;
       config = {
@@ -17,43 +13,33 @@
         };
         underline = true;
         update_in_insert = true;
-        virtual_text = {
+        virtual_text = true;
-          format =
-            lib.generators.mkLuaInline
-            /*
-            lua
-            */
-            ''
-              function(diagnostic)
-                return string.format("%s", diagnostic.message)
-                --return string.format("%s (%s)", diagnostic.message, diagnostic.source)
-              end
-            '';
-        };
       };
       nvim-lint = {
         enable = true;
       };
     };
-    syntaxHighlighting = true;
     treesitter = {
       enable = true;
       autotagHtml = true;
       context.enable = true;
       highlight.enable = true;
-      grammars = with pkgs.vimPlugins.nvim-treesitter.builtGrammars; [
+      textobjects.enable = true;
-        typescript # in language settings only tsx gets enabled, not typescript
-      ];
     };
     lsp = {
       enable = true;
+      presets = {
+        tailwindcss-language-server = {
+          enable = true;
+        };
+      };
       trouble.enable = true;
       lspSignature.enable = true;
       lspconfig.enable = true;
-      formatOnSave = true;
+      formatOnSave = false;
+      mappings.format = null;
       inlayHints.enable = true;
-      null-ls.enable = true;
+      servers.nil.settings.nix.autoArchive = true;
-      servers.nixd.settings.nil.nix.autoArchive = true;
       otter-nvim = {
         enable = true;
         setupOpts = {
@@ -77,12 +63,11 @@
             sign = false;
             virtual_text = true;
           };
-          breadcrumbs.enable = false;
+          symbol_in_winbar.enable = false;
         };
       };
     };
     languages = {
-      enableDAP = true;
       enableExtraDiagnostics = true;
       enableFormat = true;
       enableTreesitter = true;
@@ -102,24 +87,29 @@
         extensions = {
           markview-nvim = {
             enable = true;
+            setupOpts = {
+              preview = {
+                hybrid_modes = ["n"];
+              };
+            };
           };
         };
         extraDiagnostics.enable = true;
       };
-      ts = {
+      typescript.enable = true;
-        enable = true;
-        extensions.ts-error-translator.enable = true;
-      };
       css.enable = true;
       svelte.enable = true;
       html.enable = true;
       bash.enable = true;
       nix.enable = true;
-      tailwind.enable = true;
+      lua.enable = true;
     };
     formatter = {
       conform-nvim = {
         enable = true;
+        setupOpts.format_on_save = {
+          lsp_format = "fallback";
+        };
       };
     };
   };

home/programs/nvf/mini.nix

@@ -1,13 +1,100 @@
-{
+{lib, ...}: {
-  programs.nvf.settings.vim.mini = {
+  vim.luaConfigRC.mini-clue = ''
-    starter.enable = true;
+    local miniclue = require('mini.clue')
+    miniclue.setup({
+      triggers = {
+        { mode = 'n', keys = '<Leader>' },
+        { mode = 'x', keys = '<Leader>' },
+        { mode = 'n', keys = 'g' },
+        { mode = 'x', keys = 'g' },
+        { mode = 'n', keys = "'" },
+        { mode = 'n', keys = '`' },
+        { mode = 'n', keys = '"' },
+        { mode = 'i', keys = '<C-r>' },
+        { mode = 'c', keys = '<C-r>' },
+        { mode = 'n', keys = '<C-w>' },
+        { mode = 'n', keys = 'z' },
+      },
+      clues = {
+        miniclue.gen_clues.g(),
+        miniclue.gen_clues.marks(),
+        miniclue.gen_clues.registers(),
+        miniclue.gen_clues.windows({ submode_resize = true }),
+        miniclue.gen_clues.z(),
+        { mode = 'n', keys = '<Leader>f', desc = '+find' },
+        { mode = 'n', keys = '<Leader>s', desc = '+search' },
+        { mode = 'n', keys = '<Leader>t', desc = '+terminal' },
+        { mode = 'n', keys = '<Leader>u', desc = '+ui' },
+        { mode = 'n', keys = '<Leader>l', desc = '+lsp' },
+        { mode = 'n', keys = '<Leader>x', desc = '+trouble' },
+        { mode = 'n', keys = '<Leader>!', desc = 'shell' },
+        { mode = 'v', keys = '<Leader>!', desc = 'shell' },
+        { mode = 'n', keys = '<Leader>e', desc = 'yazi' },
+      },
+      window = { delay = 300 },
+    })
+  '';
+
+  vim.mini = {
+    ai.enable = true;
+    starter = {
+      enable = true;
+      setupOpts = {
+        header = ''
+          ⣟⣯⣟⣯⡇⠀⣿⢩⣛⡼⣏⠀⠈⠋⠀⣈⡷⣙⢎⡳⣙⢮⣙⢮⣙⢎⡳⣙⢾⣿
+          ⢿⡾⣽⡞⣷⣤⣏⡳⡜⡼⠗⠁⢀⠀⠙⢧⠳⣍⢞⡱⣭⠲⣍⠶⣩⢞⡱⡭⣾⣿
+          ⠈⠻⠧⢿⣧⣿⠶⣵⢻⢞⡷⢲⡟⡶⢴⡭⢿⣜⣮⡱⢎⡳⣍⢞⡱⢮⡱⣳⣿⣽
+          ⠀⣰⣶⡏⢷⣈⣿⣸⣇⣾⣸⣿⣾⣹⣆⡹⡎⡶⢇⡿⣹⢷⣾⣈⠷⣇⢷⣿⣿⣹
+          ⣾⣻⣭⣿⣾⣿⣿⣟⣿⣿⡿⣽⡿⣿⢿⣿⣿⣿⣾⣶⣵⣾⠲⣭⢳⣞⣾⡿⣷⣿
+          ⣿⣿⣿⣯⣷⣿⣿⠿⢝⠚⠋⠉⠉⠉⠙⠚⠛⡾⢿⣿⣻⣿⣿⣶⣏⠶⣩⠿⣿⡈
+          ⣿⣟⣿⣻⣿⡏⠀⠀⠀⠳⡀⠀⠀⠀⠀⠰⠊⠀⠀⠈⠙⠳⣿⣿⣿⣿⣧⣻⣿⣿
+          ⠘⢻⣿⣿⣽⡇⠈⠧⣄⠀⠀⠀⠀⠀⠀⢀⣄⡤⠴⠚⠀⠀⠀⠙⢿⣷⡿⣿⣿⣿
+          ⠀⠠⢈⢛⣿⠀⠚⠉⠉⠱⣼⡷⠀⠀⠀⠀⠉⠉⠑⠶⠀⠀⠀⠀⠀⠻⣿⣿⣾⢿
+          ⠀⠡⠈⠉⠹⡀⠀⠀⡄⠀⣸⡀⠀⠀⠀⠀⡀⠀⠀⠀⠀⠀⠀⠀⠀⣰⣿⣯⣿⢿
+          ⠀⠁⢶⣶⠀⢷⠀⠀⠉⠉⠀⠈⠉⠶⠆⠈⠀⠀⠀⠀⠀⠀⠀⠀⣸⣿⣿⣿⣾⣿
+          ⠀⠡⢸⢹⠏⡍⠓⣄⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣴⣺⡟⠋⠉⢹⢭⢣
+          ⠀⠀⢸⣹⡏⠭⠭⠭⠙⣲⣦⣤⣤⣀⣀⣀⣀⣤⣤⣶⣞⠉⠙⠛⠷⢀⣀⠘⣎⠧
+          ⢁⣈⣀⣀⢀⣀⣀⣀⣼⠟⠹⢿⣯⣟⣿⣻⡿⠿⠛⢿⣿⣦⡀⠀⠀⠀⠀⠉⠉⠘
+        '';
+        footer = "";
+        items = [
+          {
+            name = "files";
+            action = lib.mkLuaInline "function() Snacks.picker.files() end";
+            section = "";
+          }
+          {
+            name = "directories";
+            action = lib.mkLuaInline "function() Snacks.explorer() end";
+            section = "";
+          }
+          {
+            name = "tmp";
+            action = lib.mkLuaInline ''
+              function()
+                local uuid = vim.fn.system("uuidgen"):match("(%S+)")
+                vim.cmd("edit /tmp/" .. uuid .. ".md")
+              end
+            '';
+            section = "";
+          }
+          {
+            name = "recent";
+            action = lib.mkLuaInline "function() Snacks.picker.recent() end";
+            section = "";
+          }
+        ];
+      };
+    };
     comment.enable = true;
-    # cursorword.enable = true;
     icons.enable = true;
     indentscope.enable = true;
-    notify.enable = true;
     pairs.enable = true;
     diff.enable = true;
     git.enable = true;
+    jump2d.enable = true;
+    statusline.enable = true;
+    clue.enable = true;
+    surround.enable = true;
   };
 }

home/programs/nvf/options.nix

@@ -1,9 +1,8 @@
 {lib, ...}: {
-  programs.nvf.settings.vim = {
+  vim = {
     viAlias = false;
     vimAlias = true;
     withNodeJs = true;
-    # syntaxHighlighting = true;
     options = {
       autoindent = true;
       smartindent = true;
@@ -18,17 +17,10 @@
       softtabstop = 2;
       wrap = false;
     };
-    globals = {
+    globals.navic_silence = true;
-      navic_silence = true; # navic tries to attach multiple LSPs and fails
-      suda_smart_edit = 1; # use super user write automatically
-      neovide_scale_factor = 0.7;
-      neovide_cursor_animation_length = 0.1;
-      neovide_cursor_short_animation_length = 0;
-    };
     clipboard = {
       enable = true;
       registers = "unnamedplus";
-      providers.wl-copy.enable = true;
     };
     luaConfigRC.osc52-clipboard = ''
       vim.g.clipboard = {

home/programs/nvf/picker.nix

@@ -1,7 +1,6 @@
 {
-  programs.nvf.settings.vim = {
+  vim = {
     utility = {
-      oil-nvim.enable = true;
       snacks-nvim = {
         setupOpts = {
           picker.enabled = true;
@@ -18,27 +17,6 @@
         action = "<cmd>lua Snacks.picker.smart()<cr>";
         desc = "Smart Find Files";
       }
-      {
-        key = "<leader>,";
-        mode = "n";
-        silent = true;
-        action = "<cmd>lua Snacks.picker.buffers()<cr>";
-        desc = "Buffers";
-      }
-      {
-        key = "<leader>/";
-        mode = "n";
-        silent = true;
-        action = "<cmd>lua Snacks.picker.grep()<cr>";
-        desc = "Grep";
-      }
-      {
-        key = "<leader>:";
-        mode = "n";
-        silent = true;
-        action = "<cmd>lua Snacks.picker.command_history()<cr>";
-        desc = "Command History";
-      }
       {
         key = "<leader>e";
         mode = "n";
@@ -47,11 +25,11 @@
         desc = "File Explorer";
       }
       {
-        key = "-";
+        key = "<leader>/";
         mode = "n";
         silent = true;
-        action = "<cmd>Oil<cr>";
+        action = "<cmd>lua Snacks.picker.lines()<cr>";
-        desc = "Oil";
+        desc = "Buffer Lines";
       }
 
       # Find
@@ -62,14 +40,6 @@
         action = "<cmd>lua Snacks.picker.buffers()<cr>";
         desc = "Buffers";
       }
-      {
-        key = "<leader>fc";
-        mode = "n";
-        silent = true;
-        action = ''
-          <cmd>lua Snacks.picker.files({ cwd = vim.fn.stdpath("config") })<cr>'';
-        desc = "Find Config File";
-      }
       {
         key = "<leader>ff";
         mode = "n";
@@ -77,13 +47,6 @@
         action = "<cmd>lua Snacks.picker.files()<cr>";
         desc = "Find Files";
       }
-      {
-        key = "<leader>fg";
-        mode = "n";
-        silent = true;
-        action = "<cmd>lua Snacks.picker.git_files()<cr>";
-        desc = "Find Git Files";
-      }
       {
         key = "<leader>fp";
         mode = "n";
@@ -98,6 +61,13 @@
         action = "<cmd>lua Snacks.picker.recent()<cr>";
         desc = "Recent";
       }
+      {
+        key = "<leader>f:";
+        mode = "n";
+        silent = true;
+        action = "<cmd>lua Snacks.picker.command_history()<cr>";
+        desc = "Command History";
+      }
       {
         key = "<leader>fn";
         mode = "n";
@@ -105,65 +75,14 @@
         action = "<cmd>lua Snacks.picker.notifications()<cr>";
         desc = "Notification History";
       }
-      {
-        key = "<leader>fe";
-        mode = "n";
-        silent = true;
-        action = "<cmd>lua Snacks.picker.icons()<cr>";
-        desc = "Emoji";
-      }
-
-      # Git
-      {
-        key = "<leader>gb";
-        mode = "n";
-        silent = true;
-        action = "<cmd>lua Snacks.picker.git_branches()<cr>";
-        desc = "Git Branches";
-      }
-      {
-        key = "<leader>gL";
-        mode = "n";
-        silent = true;
-        action = "<cmd>lua Snacks.picker.git_log()<cr>";
-        desc = "Git Log Line";
-      }
-      {
-        key = "<leader>gs";
-        mode = "n";
-        silent = true;
-        action = "<cmd>lua Snacks.picker.git_status()<cr>";
-        desc = "Git Status";
-      }
-      {
-        key = "<leader>gS";
-        mode = "n";
-        silent = true;
-        action = "<cmd>lua Snacks.picker.git_stash()<cr>";
-        desc = "Git Stash";
-      }
-      {
-        key = "<leader>gd";
-        mode = "n";
-        silent = true;
-        action = "<cmd>lua Snacks.picker.git_diff()<cr>";
-        desc = "Git Diff (Hunks)";
-      }
-      {
-        key = "<leader>gf";
-        mode = "n";
-        silent = true;
-        action = "<cmd>lua Snacks.picker.git_log_file()<cr>";
-        desc = "Git Log File";
-      }
 
       # Grep
       {
-        key = "<leader>sb";
+        key = "<leader>sg";
         mode = "n";
         silent = true;
-        action = "<cmd>lua Snacks.picker.lines()<cr>";
+        action = "<cmd>lua Snacks.picker.grep()<cr>";
-        desc = "Buffer Lines";
+        desc = "Grep";
       }
       {
         key = "<leader>st";
@@ -172,20 +91,6 @@
         action = "<cmd>lua Snacks.picker.todo_comments()<cr>";
         desc = "Todos";
       }
-      {
-        key = "<leader>sB";
-        mode = "n";
-        silent = true;
-        action = "<cmd>lua Snacks.picker.grep_buffers()<cr>";
-        desc = "Grep Open Buffers";
-      }
-      {
-        key = "<leader>sg";
-        mode = "n";
-        silent = true;
-        action = "<cmd>lua Snacks.picker.grep()<cr>";
-        desc = "Grep";
-      }
       {
         key = "<leader>sw";
         mode = "n";

home/programs/nvf/snacks.nix

@@ -1,26 +1,18 @@
-{pkgs, ...}: {
+{
-  home.packages = with pkgs; [
+  vim.utility.snacks-nvim = {
-    imagemagick
-    tree-sitter
-    ghostscript
-    tectonic
-    mermaid-cli
-  ];
-  programs.nvf.settings.vim.utility.snacks-nvim = {
     enable = true;
     setupOpts = {
-      image = {
-        enabled = true;
-        doc = {
-          inline = false;
-          float = true;
-        };
-      };
       quickfile.enabled = true;
       statuscolumn.enabled = true;
       zen.enabled = true;
       bufdelete.enabled = true;
       gitsigns.enabled = true;
+      animate.enabled = true;
+      lazygit = {
+        enabled = true;
+        configure = false;
+      };
+      terminal.enabled = true;
     };
   };
 }

home/programs/nvf/utils.nix

@@ -1,17 +1,11 @@
 {pkgs, ...}: {
-  programs.nvf.settings.vim = {
+  vim = {
+    luaConfigRC.remove-todo-keymaps = ''
+      vim.keymap.del("n", "<leader>tdq")
+      vim.keymap.del("n", "<leader>tdt")
+    '';
     undoFile.enable = true;
-    utility = {
-      motion.flash-nvim.enable = true;
-      outline.aerial-nvim.enable = true;
-    };
-    tabline.nvimBufferline.enable = true;
     notes.todo-comments.enable = true;
-    assistant.copilot = {
-      enable = true;
-      cmp.enable = true;
-    };
-    statusline.lualine.enable = true;
 
     autocomplete = {
       nvim-cmp = {
@@ -31,21 +25,39 @@
       noice.enable = true;
       colorizer.enable = true;
     };
-    git = {
+
-      enable = true;
-      gitsigns.enable = true;
-    };
-    terminal.toggleterm = {
-      enable = true;
-      lazygit = {
-        enable = true;
-        mappings.open = "<leader>gl";
-      };
-    };
     visuals = {
       rainbow-delimiters.enable = true;
-      nvim-scrollbar = {
+    };
-        enable = false;
+
+    extraPlugins = {
+      sttr-nvim = {
+        package = pkgs.vimUtils.buildVimPlugin {
+          name = "sttr-nvim";
+          src = pkgs.fetchFromGitHub {
+            owner = "anotherhadi";
+            repo = "sttr.nvim";
+            rev = "b41f2f51372222e23efbe5df9d72391cd933d4d1";
+            hash = "sha256-JPv0NNNUUNPNJM5LHYjcmTvilbOKB3OxI2Q6wxVbTks=";
+          };
+        };
+        setup = ''
+          require("sttr").setup()
+        '';
+      };
+      jwt-tui-nvim = {
+        package = pkgs.vimUtils.buildVimPlugin {
+          name = "jwt-tui-nvim";
+          src = pkgs.fetchFromGitHub {
+            owner = "anotherhadi";
+            repo = "jwt-tui.nvim";
+            rev = "c5100cb2cdfaf333014076a1a5c4c6a778bf3983";
+            hash = "sha256-qnQYZuQwyWkezhuyOorM67KBtatUboubofuT9A6McJI=";
+          };
+        };
+        setup = ''
+          require("jwt-tui").setup()
+        '';
       };
     };
   };

home/programs/proton/auto-start-vpn.nix

@@ -1,5 +1,5 @@
 {
   wayland.windowManager.hyprland.settings.exec-once = [
-    "protonvpn-app --start-minimized &"
+    "protonvpn-app --start-minimized"
   ];
 }

home/programs/proton/default.nix

@@ -1,5 +1,9 @@
-{pkgs, ...}: {
+{
-  home.packages = with pkgs; [
+  pkgs-stable,
+  config,
+  ...
+}: {
+  home.packages = with pkgs-stable; [
     proton-vpn
     proton-pass
     proton-authenticator
@@ -9,11 +13,27 @@
   xdg.desktopEntries = {
     "Proton Authenticator" = {
       name = "Proton Authenticator";
-      exec = "env WEBKIT_DISABLE_COMPOSITING_MODE=1 ${pkgs.proton-authenticator}/bin/proton-authenticator";
+      exec = "env WEBKIT_DISABLE_COMPOSITING_MODE=1 ${pkgs-stable.proton-authenticator}/bin/proton-authenticator";
       icon = "proton-authenticator";
       type = "Application";
       categories = ["Utility"];
       terminal = false;
     };
+    "Proton Calendar" = {
+      name = "Proton Calendar";
+      exec = ''${config.programs.helium.package}/bin/helium "https://calendar.proton.me"'';
+      icon = "proton-calendar";
+      type = "Application";
+      categories = ["Utility"];
+      terminal = false;
+    };
+    "Proton Mail" = {
+      name = "Proton Mail";
+      exec = ''${config.programs.helium.package}/bin/helium "https://mail.proton.me/"'';
+      icon = "proton-mail";
+      type = "Application";
+      categories = ["Utility"];
+      terminal = false;
+    };
   };
 }

home/programs/shell/default.nix

@@ -1,4 +1,11 @@
 # Import all shell configurations
 {
-  imports = [./fzf.nix ./zsh.nix ./starship.nix ./zoxide.nix ./eza.nix];
+  imports = [
+    ./fzf.nix
+    ./zsh.nix
+    ./starship.nix
+    ./zoxide.nix
+    ./eza.nix
+    ./direnv.nix
+  ];
 }

home/programs/shell/direnv.nix

@@ -0,0 +1,10 @@
+{pkgs-stable, ...}: {
+  programs.direnv = {
+    enable = true;
+    package = pkgs-stable.direnv;
+    nix-direnv = {
+      enable = true;
+      package = pkgs-stable.nix-direnv;
+    };
+  };
+}

home/programs/shell/eza.nix

@@ -1,7 +1,8 @@
 # Eza is a ls replacement
-{
+{pkgs-stable, ...}: {
   programs.eza = {
     enable = true;
+    package = pkgs-stable.eza;
     icons = "auto";
 
     extraOptions = [

home/programs/shell/fzf.nix

@@ -1,5 +1,6 @@
 # Fzf is a general-purpose command-line fuzzy finder.
 {
+  pkgs-stable,
   config,
   lib,
   ...
@@ -10,6 +11,7 @@
 in {
   programs.fzf = {
     enable = true;
+    package = pkgs-stable.fzf;
     enableZshIntegration = true;
     colors = lib.mkForce {
       "fg+" = accent;

home/programs/shell/starship.nix

@@ -1,5 +1,6 @@
 # starship is a minimal, fast, and extremely customizable prompt for any shell!
 {
+  pkgs-stable,
   config,
   lib,
   ...
@@ -9,6 +10,7 @@
 in {
   programs.starship = {
     enable = true;
+    package = pkgs-stable.starship;
     settings = {
       add_newline = true;
       format = lib.concatStrings [
@@ -20,7 +22,9 @@ in {
         "$git_status"
         "$character"
       ];
-      directory = {style = accent;};
+      directory = {
+        style = accent;
+      };
 
       character = {
         success_symbol = "[❯](${accent})";

home/programs/shell/zoxide.nix

@@ -1,7 +1,8 @@
 # Zoxide is a cd replacement
-{
+{pkgs-stable, ...}: {
   programs.zoxide = {
     enable = true;
+    package = pkgs-stable.zoxide;
     enableZshIntegration = true;
   };
 }

home/programs/shell/zsh.nix

@@ -1,16 +1,21 @@
 # My shell configuration
 {
-  pkgs,
+  pkgs-stable,
   lib,
   config,
   ...
-}: let
+}: {
-  fetch = config.theme.fetch; # neofetch, nerdfetch, pfetch
+  home.packages = with pkgs-stable; [
-in {
+    bat
-  home.packages = with pkgs; [bat ripgrep tldr witr];
+    ripgrep
+  ];
 
-  # Add go binaries to the PATH
+  home = {
-  home.sessionPath = ["$HOME/go/bin"];
+    sessionPath = ["$HOME/go/bin"];
+    sessionVariables = {
+      COLORTERM = "truecolor";
+    };
+  };
 
   programs.zsh = {
     enable = true;
@@ -18,7 +23,14 @@ in {
     autosuggestion.enable = true;
     syntaxHighlighting = {
       enable = true;
-      highlighters = ["main" "brackets" "pattern" "regexp" "root" "line"];
+      highlighters = [
+        "main"
+        "brackets"
+        "pattern"
+        "regexp"
+        "root"
+        "line"
+      ];
     };
     historySubstringSearch.enable = true;
 
@@ -29,34 +41,27 @@ in {
     };
 
     profileExtra = lib.optionalString (config.home.sessionPath != []) ''
-      export PATH="$PATH''${PATH:+:}${
+      export PATH="$PATH''${PATH:+:}${lib.concatStringsSep ":" config.home.sessionPath}"
-        lib.concatStringsSep ":" config.home.sessionPath
-      }"
     '';
 
     shellAliases = {
+      # Change default
       vim = "nvim";
       vi = "nvim";
-      v = "nvim";
-      c = "clear";
-      clera = "clear";
-      celar = "clear";
-      e = "exit";
       cd = "z";
       ls = "eza --icons=always --no-quotes";
       tree = "eza --icons=always --tree --no-quotes";
-      sl = "ls";
-      open = "${pkgs.xdg-utils}/bin/xdg-open";
       cat = "bat --theme=base16 --color=always --paging=never --tabs=2 --wrap=never --plain";
       mkdir = "mkdir -p";
 
-      obsidian-no-gpu = "env ELECTRON_OZONE_PLATFORM_HINT=auto obsidian --ozone-platform=x11";
+      # Shortcuts
-      wireguard-import = "nmcli connection import type wireguard file";
+      spt = "spotatui";
+      v = "nvim";
+      c = "clear";
+      e = "exit";
+      open = "${pkgs-stable.xdg-utils}/bin/xdg-open";
 
       notes = "nvim ~/notes/index.md --cmd 'cd ~/notes' -c ':lua Snacks.picker.smart()'";
-      note = "notes";
-      tmp = "nvim /tmp/$(date | sed 's/ //g;s/\\.//g').md";
-
       nix-shell = "nix-shell --command zsh";
 
       # git
@@ -73,59 +78,43 @@ in {
       gbr = "git branch";
       grs = "git reset HEAD~1";
       grh = "git reset --hard HEAD~1";
-
       gaa = "git add .";
       gcm = "git commit -m";
+
+      # Typo
+      clera = "clear";
+      celar = "clear";
+      claer = "clear";
+      sl = "ls";
     };
 
     initContent =
       # bash
       ''
         bindkey -e
-        ${
-          if fetch == "neofetch"
-          then pkgs.neofetch + "/bin/neofetch"
-          else if fetch == "nerdfetch"
-          then "nerdfetch"
-          else if fetch == "pfetch"
-          then "echo; ${pkgs.pfetch}/bin/pfetch"
-          else ""
-        }
 
-        function sesh-sessions() {
+        # Open command in VIM
-          session=$(sesh list -t -c | fzf --height 70% --reverse)
+        autoload -Uz edit-command-line
-          [[ -z "$session" ]] && return
+        zle -N edit-command-line
-          sesh connect $session
+        bindkey '^X' edit-command-line
-        }
 
-        function chatgptfolder(){
+        # Suffix Aliases
-          echo "################################"
+        alias -s {nix,md,txt,yml,yaml,go}=nvim
-          echo "###         TREE             ###"
+        alias -s {json,jsonl}=jless
-          echo "################################"
+        alias -s {csv,tsv,parquet,pqt,arrow,db,sqlite,xls,xlsx,xlsm,xlsb,fwf}=tw
-          ${pkgs.eza}/bin/eza --tree -aF --icons never
+        alias -s {png,jpg,jpeg,gif,pdf}=xdg-open
-          echo -e "\n\n"
-          echo "##############################"
-          echo "###        CONTENT         ###"
-          echo "##############################"
-          find . -type f -not -path '*/.git/*' -print0 | while IFS= read -r -d "" file; do
-              echo -e "\n--- DEBUT: $file ---\n"
-              cat "$file"
-              echo -e "\n--- FIN: $file ---\n"
-          done
-        }
 
-
+        # 3. Global Aliases (Remplacés n'importe où dans la commande, pas seulement au début)
-        function n4c() {
+        alias -g G="| grep"
-          category=''${1:-all}
+        alias -g L="| less"
-          shift
+        alias -g V="| nvim"
-          args=''${*}
+        alias -g H="| head"
-          nix develop "github:nix4cyber/n4c#''${category}" ''${args} -c zsh
+        alias -g T="| tail"
-        }
+        alias -g JQ="| jq"
-
+        alias -g C="| wl-copy"
-        zle     -N             sesh-sessions
+        alias -g NE="2>/dev/null"
-        bindkey -M emacs '\es' sesh-sessions
+        alias -g ND=">/dev/null"
-        bindkey -M vicmd '\es' sesh-sessions
+        alias -g NUL=">/dev/null 2>1"
-        bindkey -M viins '\es' sesh-sessions
 
         # search history based on what's typed in the prompt
         autoload -U history-search-end
@@ -166,7 +155,7 @@ in {
         # Colors
         zstyle ':completion:*' list-colors ''${(s.:.)LS_COLORS}
 
-        # case insensitive tab completion
+        # Case insensitive tab completion
         zstyle ':completion:*:*:cd:*' tag-order local-directories directory-stack path-directories
         zstyle ':completion:*:*:cd:*:directory-stack' menu yes select
         zstyle ':completion:*:-tilde-:*' group-order 'named-directories' 'path-directories' 'users' 'expand'
@@ -182,6 +171,13 @@ in {
         zstyle ':completion:complete:*:options' sort false
         zstyle ':completion:files' sort false
 
+        autoload zmv
+
+        hash -d dl=~/Downloads
+        hash -d ni=~/.config/nixos
+        hash -d de=~/dev
+        hash -d cy=~/Cyber
+
         ${lib.optionalString config.services.gpg-agent.enable ''
           gnupg_path=$(ls $XDG_RUNTIME_DIR/gnupg)
           export SSH_AUTH_SOCK="$XDG_RUNTIME_DIR/gnupg/$gnupg_path/S.gpg-agent.ssh"

home/programs/spicetify/default.nix

@@ -1,41 +0,0 @@
-# Spicetify is a spotify client customizer
-{
-  pkgs,
-  config,
-  lib,
-  inputs,
-  ...
-}: let
-  spicePkgs = inputs.spicetify-nix.legacyPackages.${pkgs.stdenv.hostPlatform.system};
-  accent = "${config.lib.stylix.colors.base0D}";
-  background = "${config.lib.stylix.colors.base00}";
-in {
-  imports = [inputs.spicetify-nix.homeManagerModules.default];
-
-  stylix.targets.spicetify.enable = false;
-
-  programs.spicetify = {
-    enable = true;
-    theme = lib.mkForce spicePkgs.themes.dribbblish;
-
-    colorScheme = "custom";
-
-    customColorScheme = {
-      button = accent;
-      button-active = accent;
-      tab-active = accent;
-      player = background;
-      main = background;
-      sidebar = background;
-    };
-
-    enabledExtensions = with spicePkgs.extensions; [
-      playlistIcons
-      historyShortcut
-      hidePodcasts
-      adblock
-      fullAppDisplay
-      keyboardShortcut
-    ];
-  };
-}

home/programs/spotatui/default.nix

@@ -0,0 +1,104 @@
+# Spotatui is a terminal user interface for Spotify, written in Rust. It allows you to control your Spotify playback and manage your playlists directly from the terminal.
+{
+  config,
+  pkgs-stable,
+  ...
+}: let
+  c = config.lib.stylix.colors;
+  rgb = base: "${c."${base}-rgb-r"}, ${c."${base}-rgb-g"}, ${c."${base}-rgb-b"}";
+in {
+  home.packages = with pkgs-stable; [
+    spotatui
+  ];
+
+  home.file.".config/spotatui/config.yml".text = ''
+    keybindings:
+      back: q
+      next_page: ctrl-d
+      previous_page: ctrl-u
+      jump_to_start: ctrl-a
+      jump_to_end: ctrl-e
+      jump_to_album: a
+      jump_to_artist_album: A
+      jump_to_context: o
+      manage_devices: d
+      decrease_volume: '-'
+      increase_volume: +
+      toggle_playback: space
+      seek_backwards: <
+      seek_forwards: '>'
+      next_track: n
+      previous_track: p
+      force_previous_track: P
+      help: '?'
+      shuffle: ctrl-s
+      repeat: ctrl-r
+      search: /
+      submit: enter
+      copy_song_url: c
+      copy_album_url: C
+      audio_analysis: v
+      lyrics_view: B
+      cover_art_view: G
+      add_item_to_queue: z
+      show_queue: Q
+      open_settings: alt-,
+      save_settings: alt-s
+      listening_party: ctrl-p
+      like_track: F
+    behavior:
+      seek_milliseconds: 5000
+      volume_increment: 10
+      volume_percent: 100
+      tick_rate_milliseconds: 16
+      enable_text_emphasis: true
+      show_loading_indicator: true
+      enforce_wide_search_bar: true
+      enable_global_song_count: false
+      disable_mouse_inputs: false
+      enable_discord_rpc: false
+      discord_rpc_client_id: null
+      enable_announcements: false
+      announcement_feed_url: null
+      seen_announcement_ids:
+      - 2026-05-19-sonos-help-wanted
+      - 2026-02-27-major-refactor-complete
+      shuffle_enabled: false
+      liked_icon: ♥
+      shuffle_icon: 🔀
+      repeat_track_icon: 🔂
+      repeat_context_icon: 🔁
+      playing_icon: ▶
+      paused_icon: ⏸
+      set_window_title: true
+      visualizer_style: Equalizer
+      dismissed_announcements: []
+      relay_server_url: wss://spotatui-party.spotatui.workers.dev/ws
+      stop_after_current_track: false
+      sidebar_width_percent: 20
+      playbar_height_rows: 6
+      library_height_percent: 30
+      startup_behavior: continue
+      disable_auto_update: true
+      auto_update_delay: '0'
+      keepawake_enabled: true
+    theme:
+      preset: Custom
+      active: ${rgb "base0D"}
+      banner: ${rgb "base0C"}
+      error_border: ${rgb "base08"}
+      error_text: ${rgb "base08"}
+      hint: ${rgb "base0A"}
+      hovered: ${rgb "base0E"}
+      inactive: ${rgb "base03"}
+      playbar_background: Reset
+      playbar_progress: ${rgb "base0D"}
+      playbar_progress_text: ${rgb "base05"}
+      playbar_text: Reset
+      selected: ${rgb "base0D"}
+      text: Reset
+      background: Reset
+      header: Reset
+      highlighted_lyrics: ${rgb "base0B"}
+  '';
+}

home/programs/thunar/default.nix

@@ -1,6 +1,6 @@
 # Thunar is a file explorer
 {
-  pkgs,
+  pkgs-stable,
   config,
   lib,
   ...
@@ -8,26 +8,29 @@
   user = config.var.username;
 in {
   # ctrl + m to toggle the menubar
-  home.packages = with pkgs; [
+  home.packages =
-    thunar
+    (with pkgs-stable; [
-    xfconf
+      thunar
-    tumbler
+      xfconf
-    thunar-archive-plugin
+      tumbler
-    thunar-volman
+      thunar-archive-plugin
-    thunar-media-tags-plugin
+      thunar-volman
-    p7zip
+      thunar-media-tags-plugin
-    xarchiver
+      p7zip
-    papirus-icon-theme
+      xarchiver
-    material-icons
+    ])
-    material-design-icons
+    ++ (with pkgs-stable; [
-    material-symbols
+      papirus-icon-theme
-  ];
+      material-icons
+      material-design-icons
+      material-symbols
+    ]);
 
   gtk = {
     enable = true;
     iconTheme = {
       name = "Papirus-Dark";
-      package = pkgs.papirus-icon-theme;
+      package = pkgs-stable.papirus-icon-theme;
     };
 
     # bookmarks for the side pane
@@ -42,7 +45,7 @@ in {
   qt.enable = true;
 
   home.sessionVariables = {
-    XDG_ICON_DIR = "${pkgs.papirus-icon-theme}/share/icons/Papirus";
+    XDG_ICON_DIR = "${pkgs-stable.papirus-icon-theme}/share/icons/Papirus";
     QS_ICON_THEME = "Papirus";
     QT_STYLE_OVERRIDE = lib.mkForce "Fusion";
   };

home/programs/yazi/default.nix

@@ -0,0 +1,129 @@
+{pkgs, pkgs-stable, ...}: {
+  programs.yazi = {
+    enable = true;
+    shellWrapperName = "y";
+
+    plugins = {
+      git = {
+        package = pkgs.yaziPlugins.git;
+        setup = true;
+      };
+      ouch = pkgs.yaziPlugins.ouch;
+      piper = pkgs.yaziPlugins.piper;
+      convert = pkgs.yaziPlugins.convert;
+      "jump-to-char" = pkgs.yaziPlugins."jump-to-char";
+      "wl-clipboard" = pkgs.yaziPlugins."wl-clipboard";
+      "batch-rename-gui" = pkgs.yaziPlugins.mkYaziPlugin {
+        pname = "batch-rename-gui.yazi";
+        version = "0-unstable-2025-07-08";
+        src = pkgs.fetchFromGitHub {
+          owner = "pakhromov";
+          repo = "batch-rename-gui.yazi";
+          rev = "5c2d5aa349948b6ab405a171541faab44751f6a5";
+          hash = "sha256-3RviPY3WOyYi5GWXWRYMWp6VLxCe5cuJX7Kb7AyWxLE=";
+        };
+      };
+    };
+
+    settings.mgr.ratio = [0 4 3];
+
+    settings.plugin = {
+      prepend_fetchers = [
+        {
+          url = "*";
+          run = "git";
+          group = "git";
+        }
+        {
+          url = "*/";
+          run = "git";
+          group = "git";
+        }
+      ];
+      prepend_previewers = [
+        {
+          url = "*.md";
+          run = ''piper -- CLICOLOR_FORCE=1 glow -w=$w -s=dark "$1"'';
+        }
+      ];
+      prepend_openers = [
+        {
+          url = "*.{zip,tar,gz,bz2,xz,7z,rar}";
+          run = "ouch";
+        }
+      ];
+    };
+
+    keymap.mgr.prepend_keymap = [
+      {
+        on = ["C"];
+        run = "plugin ouch";
+        desc = "Compress";
+      }
+      {
+        on = ["X"];
+        run = "plugin ouch --args=extract";
+        desc = "Extract";
+      }
+      {
+        on = ["c" "p"];
+        run = "plugin convert -- --extension='png'";
+        desc = "Convert to PNG";
+      }
+      {
+        on = ["c" "j"];
+        run = "plugin convert -- --extension='jpg'";
+        desc = "Convert to JPG";
+      }
+      {
+        on = ["c" "w"];
+        run = "plugin convert -- --extension='webp'";
+        desc = "Convert to WebP";
+      }
+      {
+        on = ["M"];
+        run = ''shell 'exiftool "$@" | less' --block'';
+        desc = "Show metadata";
+      }
+      {
+        on = ["T"];
+        run = "plugin toggle-parent";
+        desc = "Toggle parent pane";
+      }
+      {
+        on = ["F"];
+        run = "plugin jump-to-char";
+        desc = "Jump to char";
+      }
+      {
+        on = ["Y"];
+        run = "plugin wl-clipboard";
+        desc = "Copy to clipboard (Wayland)";
+      }
+      {
+        on = ["B"];
+        run = "plugin batch-rename-gui";
+        desc = "Batch rename";
+      }
+    ];
+  };
+
+  home.packages = with pkgs-stable; [glow ouch hexyl exiftool wl-clipboard];
+
+  xdg.configFile."yazi/plugins/toggle-parent.yazi/main.lua".text = ''
+    --- @sync entry
+    local RESTORE_WIDTH = 1
+    return {
+      entry = function(st, job)
+        local r = rt.mgr.ratio
+        if r.parent == 0 then
+          rt.mgr.ratio = { st.width or RESTORE_WIDTH, r.current, r.preview }
+        else
+          st.width = r.parent
+          rt.mgr.ratio = { 0, r.current, r.preview }
+        end
+        ya.emit("app:resize", {})
+      end
+    }
+  '';
+}

home/programs/zathura/default.nix

@@ -1,15 +0,0 @@
-# TODO: Misc section with VLC, Zathura etc
-# Zathura is a PDF viewer
-{
-  programs.zathura = {
-    enable = true;
-
-    options = {
-      guioptions = "v";
-      adjust-open = "width";
-      statusbar-basename = true;
-      render-loading = false;
-      scroll-step = 120;
-    };
-  };
-}

home/system/caelestia-shell/appearance.nix

@@ -1,50 +0,0 @@
-{
-  pkgs,
-  config,
-  ...
-}: let
-  rounding = config.theme.rounding + config.theme.gaps-out;
-  inherit (config.stylix) fonts;
-in {
-  home.packages = with pkgs; [
-    papirus-icon-theme
-  ];
-
-  programs.caelestia.settings = {
-    paths.sessionGif = ./session-gif-hacker-cat.gif;
-    background.enabled = false;
-    appearance = {
-      transparency = {
-        enable = true;
-        base = 0.85;
-        layers = 0.4;
-      };
-      font.family = {
-        material = "Material Symbols Rounded";
-        mono = fonts.monospace.name;
-        sans = fonts.sansSerif.name;
-      };
-    };
-    utilities = {
-      enabled = true;
-      maxToasts = 4;
-      toasts = {
-        audioInputChanged = false;
-        audioOutputChanged = false;
-        capsLockChanged = false;
-        chargingChanged = true;
-        configLoaded = false;
-        dndChanged = true;
-        gameModeChanged = true;
-        numLockChanged = false;
-        nowPlaying = false;
-        kbLayoutChanged = false;
-      };
-    };
-    dashboard.showOnHover = false;
-    border = {
-      inherit rounding;
-      thickness = 8;
-    };
-  };
-}

home/system/caelestia-shell/bar.nix

@@ -1,69 +0,0 @@
-{
-  programs.caelestia.settings.bar = {
-    clock.showIcon = false;
-    popouts.activeWindow = false;
-    persistent = true;
-    status = {
-      showBattery = true;
-      showMicrophone = false;
-      showLockStatus = false;
-      showBluetooth = true;
-      showAudio = true;
-      showKbLayout = false;
-      showNetwork = true;
-    };
-    workspaces = {
-      activeIndicator = true;
-      activeLabel = "󰪥 ";
-      activeTrail = false;
-      label = " ";
-      occupiedBg = true;
-      occupiedLabel = "󰪥 ";
-      rounded = true;
-      showWindows = false;
-      shown = 5;
-    };
-    entries = [
-      {
-        id = "logo";
-        enabled = true;
-      }
-      {
-        id = "workspaces";
-        enabled = true;
-      }
-      {
-        id = "spacer";
-        enabled = true;
-      }
-      {
-        id = "activeWindow";
-        enabled = true;
-      }
-      {
-        id = "spacer";
-        enabled = true;
-      }
-      {
-        id = "tray";
-        enabled = true;
-      }
-      {
-        id = "clock";
-        enabled = true;
-      }
-      {
-        id = "statusIcons";
-        enabled = true;
-      }
-      {
-        id = "power";
-        enabled = true;
-      }
-    ];
-    tray = {
-      background = false;
-      recolour = false;
-    };
-  };
-}

home/system/caelestia-shell/default.nix

@@ -1,63 +0,0 @@
-# Caelestia Shell Home Manager Configuration
-# See https://github.com/caelestia-dots/shell
-{
-  pkgs,
-  inputs,
-  ...
-}: {
-  imports = [
-    inputs.caelestia-shell.homeManagerModules.default
-    ./bar.nix
-    ./launcher.nix
-    ./appearance.nix
-    ./scheme.nix
-    ./swappy.nix
-  ];
-
-  programs.caelestia = {
-    enable = true;
-    systemd.enable = false;
-    settings = {
-      services.weatherLocation = "Paris";
-      general = {
-        apps = {
-          terminal = ["ghostty"];
-          audio = ["pavucontrol"];
-          explorer = ["thunar"];
-        };
-        idle = {
-          timeouts = [];
-        };
-      };
-    };
-    cli = {
-      enable = true;
-      settings.theme = {
-        enableTerm = false;
-        enableDiscord = false;
-        enableSpicetify = false;
-        enableBtop = false;
-        enableCava = false;
-        enableHypr = false;
-        enableGtk = false;
-        enableQt = false;
-      };
-    };
-  };
-
-  home.packages = with pkgs; [
-    gpu-screen-recorder
-  ];
-
-  wayland.windowManager.hyprland.settings.exec-once = [
-    "uwsm app -- caelestia resizer -d"
-    "uwsm app -- caelestia shell -d"
-    "caelestia scheme set -n onedark"
-    "caelestia scheme set -n custom"
-  ];
-
-  services.cliphist = {
-    enable = true;
-    allowImages = true;
-  };
-}

home/system/caelestia-shell/launcher.nix

@@ -1,124 +0,0 @@
-{
-  programs.caelestia.settings = {
-    session.commands = {
-      shutdown = ["systemctl" "poweroff"];
-      logout = ["loginctl" "lock-session"];
-      hibernate = ["systemctl" "hibernate"];
-      reboot = ["systemctl" "reboot"];
-    };
-    launcher = {
-      actionPrefix = "/";
-      actions = [
-        {
-          name = "Calculator";
-          icon = "calculate";
-          description = "Do simple math equations (powered by Qalc)";
-          command = ["autocomplete" "calc"];
-          enabled = true;
-          dangerous = false;
-        }
-        {
-          name = "Shutdown";
-          icon = "power_settings_new";
-          description = "Shutdown the system";
-          command = ["systemctl" "poweroff"];
-          enabled = true;
-          dangerous = true;
-        }
-        {
-          name = "Reboot";
-          icon = "cached";
-          description = "Reboot the system";
-          command = ["systemctl" "reboot"];
-          enabled = true;
-          dangerous = true;
-        }
-        {
-          name = "Logout";
-          icon = "exit_to_app";
-          description = "Log out of the current session";
-          command = ["loginctl" "terminate-user" ""];
-          enabled = true;
-          dangerous = true;
-        }
-        {
-          name = "Lock";
-          icon = "lock";
-          description = "Lock the current session";
-          command = ["loginctl" "lock-session"];
-          enabled = true;
-          dangerous = false;
-        }
-        {
-          name = "Sleep";
-          icon = "bedtime";
-          description = "Suspend then hibernate";
-          command = ["systemctl" "suspend-then-hibernate"];
-          enabled = true;
-          dangerous = false;
-        }
-        {
-          name = "Restart caelestia";
-          icon = "cached";
-          description = "Restart caelestia";
-          command = ["hyprctl" "dispatch" "exec" "caelestia-shell kill | sleep 1 | caelestia-shell"];
-          enabled = true;
-          dangerous = false;
-        }
-        {
-          name = "Emoji Picker";
-          icon = "mood";
-          description = "Toggle the emoji picker";
-          command = ["caelestia" "emoji" "-p"];
-          enabled = true;
-          dangerous = false;
-        }
-        {
-          name = "Clipboard History";
-          icon = "content_paste";
-          description = "Toggle the clipboard history";
-          command = ["caelestia" "clipboard"];
-          enabled = true;
-          dangerous = false;
-        }
-        {
-          name = "Delete from Clipboard History";
-          icon = "content_paste_off";
-          description = "Delete a line from the clipboard history";
-          command = ["caelestia" "clipboard"];
-          enabled = true;
-          dangerous = false;
-        }
-        {
-          name = "Night Shift";
-          icon = "moon_stars";
-          description = "Toggle Night Shift, the blue light filter";
-          command = ["nightshift-toggle"];
-          enabled = true;
-          dangerous = false;
-        }
-        {
-          name = "Hyprpicker";
-          icon = "colorize";
-          description = "Pick an hex color";
-          command = ["hyprpicker" "-a"];
-          enabled = true;
-          dangerous = false;
-        }
-      ];
-      dragThreshold = 50;
-      enableDangerousActions = false;
-      maxShown = 7;
-      specialPrefix = "@";
-      useFuzzy = {
-        apps = false;
-        actions = false;
-        schemes = false;
-        variants = false;
-        wallpapers = false;
-      };
-      showOnHover = false;
-      hiddenApps = [];
-    };
-  };
-}

home/system/caelestia-shell/scheme.nix

@@ -1,135 +0,0 @@
-# This Nix module customizes the color scheme of the Caelestia CLI application using the Stylix base16 color palette.
-{
-  pkgs,
-  inputs,
-  config,
-  ...
-}: let
-  colors = config.lib.stylix.colors;
-
-  customSchemeFile = pkgs.writeText "custom-dark.txt" ''
-    primary_paletteKeyColor ${colors.base0D}
-    secondary_paletteKeyColor ${colors.base04}
-    tertiary_paletteKeyColor ${colors.base08}
-    neutral_paletteKeyColor ${colors.base03}
-    neutral_variant_paletteKeyColor ${colors.base03}
-    background ${colors.base00}
-    onBackground ${colors.base05}
-    surface ${colors.base00}
-    surfaceDim ${colors.base00}
-    surfaceBright ${colors.base02}
-    surfaceContainerLowest ${colors.base01}
-    surfaceContainerLow ${colors.base01}
-    surfaceContainer ${colors.base01}
-    surfaceContainerHigh ${colors.base02}
-    surfaceContainerHighest ${colors.base02}
-    onSurface ${colors.base05}
-    surfaceVariant ${colors.base02}
-    onSurfaceVariant ${colors.base04}
-    inverseSurface ${colors.base05}
-    inverseOnSurface ${colors.base00}
-    outline ${colors.base03}
-    outlineVariant ${colors.base02}
-    shadow ${colors.base00}
-    scrim ${colors.base00}
-    surfaceTint ${colors.base0D}
-    primary ${colors.base0D}
-    onPrimary ${colors.base00}
-    primaryContainer ${colors.base0D}
-    onPrimaryContainer ${colors.base05}
-    inversePrimary ${colors.base0D}
-    secondary ${colors.base0C}
-    onSecondary ${colors.base00}
-    secondaryContainer ${colors.base02}
-    onSecondaryContainer ${colors.base0C}
-    tertiary ${colors.base08}
-    onTertiary ${colors.base00}
-    tertiaryContainer ${colors.base08}
-    onTertiaryContainer ${colors.base00}
-    error ${colors.base08}
-    onError ${colors.base00}
-    errorContainer ${colors.base08}
-    onErrorContainer ${colors.base05}
-    primaryFixed ${colors.base0D}
-    primaryFixedDim ${colors.base0D}
-    onPrimaryFixed ${colors.base00}
-    onPrimaryFixedVariant ${colors.base00}
-    secondaryFixed ${colors.base0C}
-    secondaryFixedDim ${colors.base0C}
-    onSecondaryFixed ${colors.base00}
-    onSecondaryFixedVariant ${colors.base02}
-    tertiaryFixed ${colors.base08}
-    tertiaryFixedDim ${colors.base08}
-    onTertiaryFixed ${colors.base00}
-    onTertiaryFixedVariant ${colors.base00}
-    term0 ${colors.base00}
-    term1 ${colors.base08}
-    term2 ${colors.base0B}
-    term3 ${colors.base0A}
-    term4 ${colors.base0D}
-    term5 ${colors.base0E}
-    term6 ${colors.base0C}
-    term7 ${colors.base05}
-    term8 ${colors.base03}
-    term9 ${colors.base08}
-    term10 ${colors.base0B}
-    term11 ${colors.base0A}
-    term12 ${colors.base0D}
-    term13 ${colors.base0E}
-    term14 ${colors.base0C}
-    term15 ${colors.base07}
-    rosewater ${colors.base06}
-    flamingo ${colors.base0F}
-    pink ${colors.base0E}
-    mauve ${colors.base0D}
-    red ${colors.base08}
-    maroon ${colors.base08}
-    peach ${colors.base09}
-    yellow ${colors.base0A}
-    green ${colors.base0B}
-    teal ${colors.base0C}
-    sky ${colors.base0C}
-    sapphire ${colors.base0C}
-    blue ${colors.base0D}
-    lavender ${colors.base0D}
-    klink ${colors.base0D}
-    klinkSelection ${colors.base0D}
-    kvisited ${colors.base0E}
-    kvisitedSelection ${colors.base0E}
-    knegative ${colors.base08}
-    knegativeSelection ${colors.base08}
-    kneutral ${colors.base0A}
-    kneutralSelection ${colors.base0A}
-    kpositive ${colors.base0B}
-    kpositiveSelection ${colors.base0B}
-    text ${colors.base05}
-    subtext1 ${colors.base04}
-    subtext0 ${colors.base03}
-    overlay2 ${colors.base03}
-    overlay1 ${colors.base03}
-    overlay0 ${colors.base02}
-    surface2 ${colors.base02}
-    surface1 ${colors.base01}
-    surface0 ${colors.base01}
-    base ${colors.base00}
-    mantle ${colors.base00}
-    crust ${colors.base00}
-    success ${colors.base0B}
-    onSuccess ${colors.base00}
-    successContainer ${colors.base0B}
-    onSuccessContainer ${colors.base05}
-  '';
-
-  colorsHash = builtins.hashString "sha256" (builtins.toJSON colors);
-
-  customCli = inputs.caelestia-cli.packages.${pkgs.stdenv.hostPlatform.system}.default.overrideAttrs (oldAttrs: {
-    name = "${oldAttrs.name or "caelestia-cli"}-themed-${colorsHash}";
-    postUnpack = ''
-      mkdir -p $sourceRoot/src/caelestia/data/schemes/custom/main
-      cp ${customSchemeFile} $sourceRoot/src/caelestia/data/schemes/custom/main/dark.txt
-      echo "Custom scheme added to source"
-    '';
-  });
-in {
-  programs.caelestia.cli.package = customCli;
-}

home/system/caelestia-shell/swappy.nix

@@ -1,11 +0,0 @@
-{
-  xdg.configFile."swappy/config".text = ''
-    [Default]
-    save_dir=~/Pictures/Screenshots
-    save_filename_format=screenshot-%Y%m%d-%H%M%S.png
-    show_panel=false
-    line_size=5
-    text_size=20
-    text_font=sans-serif
-  '';
-}

home/system/hyprland/bindings.nix

@@ -1,5 +1,6 @@
 {
   pkgs,
+  pkgs-stable,
   lib,
   config,
   ...
@@ -7,9 +8,8 @@
   colors = config.lib.stylix.colors;
 
   mkMenu = menu: let
-    configFile =
+    configFile = pkgs.writeText "config.yaml" (
-      pkgs.writeText "config.yaml"
+      lib.generators.toYAML {} {
-      (lib.generators.toYAML {} {
         anchor = "bottom-right";
         border = "#${colors.base0D}80";
         background = "#${colors.base01}EE";
@@ -19,7 +19,8 @@
         rows_per_column = 5;
 
         inherit menu;
-      });
+      }
+    );
   in
     pkgs.writeShellScriptBin "menu" ''
       exec ${lib.getExe pkgs.wlr-which-key} ${configFile}
@@ -32,7 +33,8 @@ in {
     bind =
       [
         # Applications
-        ("$shiftMod, A, exec, "
+        (
+          "$shiftMod, A, exec, "
           + lib.getExe (mkMenu [
             {
               key = "a";
@@ -50,86 +52,53 @@ in {
               cmd = "${pkgs.proton-vpn}/bin/protonvpn-app";
             }
             {
-              key = "o";
+              key = "c";
-              desc = "Obsidian";
+              desc = "Proton Calendar";
-              cmd = "${pkgs.obsidian}/bin/obsidian";
+              cmd = "${config.programs.helium.package}/bin/helium 'https://calendar.proton.me/'";
-            }
-            {
-              key = "s";
-              desc = "Signal";
-              cmd = "${pkgs.signal-desktop}/bin/signal-desktop";
-            }
-            {
-              key = "t";
-              desc = "TickTick";
-              cmd = "${pkgs.ticktick}/bin/ticktick";
-            }
-            {
-              key = "b";
-              desc = "Brave";
-              cmd = "${pkgs.brave}/bin/brave";
-            }
-            {
-              key = "i";
-              desc = "Brave (Private window)";
-              cmd = "${pkgs.brave}/bin/brave --incognito";
-            }
-          ]))
-
-        # Web links
-        "$mod,B, exec,  uwsm app -- ${pkgs.brave}/bin/brave" # Browser (Brave)
-        ("$shiftMod, B, exec, "
-          + lib.getExe (mkMenu [
-            {
-              key = "h";
-              desc = "Home";
-              cmd = "${pkgs.brave}/bin/brave 'https://home.hadi.icu'";
             }
             {
               key = "m";
               desc = "Proton Mail";
-              cmd = "${pkgs.brave}/bin/brave 'https://mail.proton.me/u/2/inbox'";
+              cmd = "${config.programs.helium.package}/bin/helium 'https://mail.proton.me/'";
             }
             {
-              key = "c";
+              key = "o";
-              desc = "Proton Calendar";
+              desc = "Obsidian";
-              cmd = "${pkgs.brave}/bin/brave 'https://calendar.proton.me/u/2'";
+              cmd = "${pkgs-stable.obsidian}/bin/obsidian";
             }
             {
-              key = "l";
+              key = "s";
-              desc = "Proton Lumo";
+              desc = "Signal";
-              cmd = "${pkgs.brave}/bin/brave 'https://lumo.proton.me/u/2'";
+              cmd = "${pkgs-stable.signal-desktop}/bin/signal-desktop";
             }
             {
-              key = "d";
+              key = "t";
-              desc = "Proton Drive";
+              desc = "TickTick";
-              cmd = "${pkgs.brave}/bin/brave 'https://drive.proton.me/u/2/'";
+              cmd = "${pkgs-stable.ticktick}/bin/ticktick";
             }
             {
-              key = "G";
+              key = "b";
-              desc = "Google Gemini";
+              desc = "Helium";
-              cmd = "${pkgs.brave}/bin/brave 'https://gemini.google.com/'";
+              cmd = "${config.programs.helium.package}/bin/helium";
             }
             {
-              key = "g";
+              key = "i";
-              desc = "Github";
+              desc = "Helium (Incognito)";
-              cmd = "${pkgs.brave}/bin/brave 'https://github.com/'";
+              cmd = "${config.programs.helium.package}/bin/helium --incognito";
             }
-            {
+          ])
-              key = "n";
+        )
-              desc = "MyNixos";
+
-              cmd = "${pkgs.brave}/bin/brave 'https://mynixos.com/'";
+        "$mod,B, exec, uwsm app -- ${config.programs.helium.package}/bin/helium" # Browser
-            }
-          ]))
 
         # Power
-        "$mod, X, global, caelestia:session" # Powermenu
+        (
-        ("$shiftMod, X, exec, "
+          "$mod, X, exec, "
           + lib.getExe (mkMenu [
             {
               key = "l";
               desc = "Lock";
-              cmd = "hyprctl dispatch global caelestia:lock";
+              cmd = "hyprlock";
             }
             {
               key = "s";
@@ -151,25 +120,20 @@ in {
               desc = "Nightshift";
               cmd = "nightshift-toggle";
             }
-            {
+          ])
-              key = "c";
+        )
-              desc = "Restart caelestia";
-              cmd = "hyprctl dispatch exec 'caelestia-shell kill | sleep 1 | caelestia-shell'";
-            }
-          ]))
 
         # Quick launch
         "$mod,RETURN, exec, uwsm app -- ${pkgs.ghostty}/bin/ghostty" # Ghostty (terminal)
-        "$mod,E, exec,  uwsm app -- ${pkgs.thunar}/bin/thunar" # Thunar
+        "$mod,E, exec,  uwsm app -- ${pkgs-stable.thunar}/bin/thunar" # Thunar
-        "$shiftMod, E, exec, pkill fuzzel || caelestia emoji -p" # Emoji picker
+        "$mod, SPACE, exec, tofi-drun" # Launcher
-        "$mod, SPACE, global, caelestia:launcher" # Launcher
+        "$mod, N, exec, swaync-client -t" # Notification center
-        "$mod, N, exec, caelestia shell drawers toggle sidebar" # Sidebar (Notifications, quick actions)
-        "$mod, D, exec, caelestia shell drawers toggle dashboard" # Dashboard
 
         # Windows
         "$mod,Q, killactive," # Close window
         "$mod,F, fullscreen" # Toggle Fullscreen
         "$shiftMod,F, togglefloating," # Toggle Floating
+        "$shiftMod, SPACE, exec, focus-toggle" # Toggle focus mode
 
         # Focus Windows
         "$mod,H, movefocus, l" # Move focus left
@@ -182,18 +146,21 @@ in {
         "$shiftMod,L, focusmonitor, 1" # Focus next monitor
 
         # Utilities
-        "$shiftMod, SPACE, exec, caelestia shell gameMode toggle" # Toggle Focus/Game mode
+        "$shiftMod, S, exec, hyprshot -m region" # Capture region
-        "$shiftMod, S, global, caelestia:screenshotFreeze" # Capture region (freeze)
+        ", Print, exec, hyprshot -m region" # Capture region
-        ", Print, global, caelestia:screenshotFreeze" # Capture region (freeze)
+        "$shiftMod+Alt, S, exec, hyprshot -m output" # Capture screen
-        "$shiftMod+Alt, S, global, caelestia:screenshot" # Capture region
       ]
-      ++ (builtins.concatLists (builtins.genList (i: let
+      ++ (builtins.concatLists (
-          ws = i + 1;
+        builtins.genList (
-        in [
+          i: let
-          "$mod,code:1${toString i}, workspace, ${toString ws}"
+            ws = i + 1;
-          "$mod SHIFT,code:1${toString i}, movetoworkspace, ${toString ws}"
+          in [
-        ])
+            "$mod,code:1${toString i}, workspace, ${toString ws}"
-        9));
+            "$mod SHIFT,code:1${toString i}, movetoworkspace, ${toString ws}"
+          ]
+        )
+        9
+      ));
 
     bindm = [
       "$mod,mouse:272, movewindow" # Move Window (mouse)
@@ -202,32 +169,21 @@ in {
 
     bindl = [
       # Brightness
-      ", XF86MonBrightnessUp, global, caelestia:brightnessUp"
+      ", XF86MonBrightnessUp, exec, bright-up"
-      ", XF86MonBrightnessDown, global, caelestia:brightnessDown"
+      ", XF86MonBrightnessDown, exec, bright-down"
 
       # Media
-      ", XF86AudioPlay, global, caelestia:mediaToggle"
+      ", XF86AudioPlay, exec, playerctl play-pause"
-      ", XF86AudioPause, global, caelestia:mediaToggle"
+      ", XF86AudioPause, exec, playerctl play-pause"
-      ", XF86AudioNext, global, caelestia:mediaNext"
+      ", XF86AudioNext, exec, playerctl next"
-      ", XF86AudioPrev, global, caelestia:mediaPrev"
+      ", XF86AudioPrev, exec, playerctl previous"
-      ", XF86AudioStop, global, caelestia:mediaStop"
+      ", XF86AudioStop, exec, playerctl stop"
 
       # Sound
-      ", XF86AudioMute, exec, wpctl set-mute @DEFAULT_AUDIO_SINK@ toggle"
+      ", XF86AudioMute, exec, vol-mute"
-      ", XF86AudioRaiseVolume, exec, wpctl set-mute @DEFAULT_AUDIO_SINK@ 0; wpctl set-volume -l 1 @DEFAULT_AUDIO_SINK@ 5%+"
+      ", XF86AudioRaiseVolume, exec, vol-up"
-      ", XF86AudioLowerVolume, exec, wpctl set-mute @DEFAULT_AUDIO_SINK@ 0; wpctl set-volume @DEFAULT_AUDIO_SINK@ 5%-"
+      ", XF86AudioLowerVolume, exec, vol-down"
-    ];
+      ", XF86AudioMicMute, exec, mic-mute"
-
-    bindin = [
-      # Launcher
-      "$mod, mouse:272, global, caelestia:launcherInterrupt"
-      "$mod, mouse:273, global, caelestia:launcherInterrupt"
-      "$mod, mouse:274, global, caelestia:launcherInterrupt"
-      "$mod, mouse:275, global, caelestia:launcherInterrupt"
-      "$mod, mouse:276, global, caelestia:launcherInterrupt"
-      "$mod, mouse:277, global, caelestia:launcherInterrupt"
-      "$mod, mouse_up, global, caelestia:launcherInterrupt"
-      "$mod, mouse_down, global, caelestia:launcherInterrupt"
     ];
   };
 }

home/system/hyprland/default.nix

@@ -1,6 +1,7 @@
 # Hyprland is a dynamic tiling Wayland compositor that is highly customizable and performant.
 {
   pkgs,
+  pkgs-stable,
   config,
   lib,
   ...
@@ -19,87 +20,65 @@ in {
     ./animations.nix
     ./bindings.nix
     ./polkitagent.nix
-    ./keyboard-backlight.nix # CHANGEME: This is for omen laptop only
+    ./hyprpaper.nix
   ];
 
-  home.packages = with pkgs; [
+  home.packages =
-    qt5.qtwayland
+    (with pkgs; [
-    qt6.qtwayland
+      qt5.qtwayland
-    libsForQt5.qt5ct
+      qt6.qtwayland
-    qt6Packages.qt6ct
+      libsForQt5.qt5ct
-    xcb-util-cursor
+      qt6Packages.qt6ct
-    libxcb
+      hyprland-qtutils
-    hyprland-qtutils
+    ])
-    adw-gtk3
+    ++ (with pkgs-stable; [
-    hyprshot
+      xcb-util-cursor
-    hyprpicker
+      libxcb
-    swappy
+      adw-gtk3
-    imv
+      hyprshot
-    wf-recorder
+      hyprpicker
-    wlr-randr
+      swappy
-    brightnessctl
+      imv
-    gnome-themes-extra
+      wf-recorder
-    libva
+      wlr-randr
-    dconf
+      brightnessctl
-    wayland-utils
+      gnome-themes-extra
-    wayland-protocols
+      dconf
-    glib
+      wayland-utils
-    direnv
+      wayland-protocols
-    meson
+    ]);
-  ];
 
   wayland.windowManager.hyprland = {
     enable = true;
+    configType = "hyprlang";
     xwayland.enable = true;
-    systemd = {
+    systemd.enable = false;
-      enable = false;
-      variables = [
-        "--all"
-      ]; # https://wiki.hyprland.org/Nix/Hyprland-on-Home-Manager/#programs-dont-work-in-systemd-services-but-do-on-the-terminal
-    };
     package = null;
     portalPackage = null;
 
     settings = {
-      exec-once = [
-        "dbus-update-activation-environment --systemd --all &"
-      ];
-
       monitor = [
-        "eDP-2,highres,0x0,1" # My internal laptop screen
-        "desc:AOC U34G2G1 0x00000E06,3440x1440@99.98,auto,1" # My external monitor
-        "desc:Philips Consumer Electronics Company PHL 221B8L ZV02144013987,highres,0x0,1"
         ",prefered,auto,1" # default
       ];
 
       env = [
         "XDG_CURRENT_DESKTOP,Hyprland"
-        "MOZ_ENABLE_WAYLAND,1"
-        "ANKI_WAYLAND,1"
-        "DISABLE_QT5_COMPAT,0"
-        "NIXOS_OZONE_WL,1"
         "XDG_SESSION_TYPE,wayland"
         "XDG_SESSION_DESKTOP,Hyprland"
+        "ANKI_WAYLAND,1"
+        "DISABLE_QT5_COMPAT,0"
         "QT_AUTO_SCREEN_SCALE_FACTOR,1"
         "QT_QPA_PLATFORM,wayland;xcb"
         "QT_QPA_PLATFORMTHEME,gtk3"
         "QT_WAYLAND_DISABLE_WINDOWDECORATION,1"
         "ELECTRON_OZONE_PLATFORM_HINT,auto"
-        "__GL_GSYNC_ALLOWED,0"
-        "__GL_VRR_ALLOWED,0"
-        "DISABLE_QT5_COMPAT,0"
         "DIRENV_LOG_FORMAT,"
-        "WLR_DRM_NO_ATOMIC,1"
-        "WLR_BACKEND,vulkan"
-        "WLR_RENDERER,vulkan"
-        "WLR_NO_HARDWARE_CURSORS,1"
         "SDL_VIDEODRIVER,wayland"
         "CLUTTER_BACKEND,wayland"
       ];
 
       cursor = {
         no_hardware_cursors = true;
-        default_monitor = "eDP-2";
       };
 
       general = {
@@ -130,18 +109,21 @@ in {
       };
 
       master = {
-        new_status = true;
+        new_status = "slave";
         allow_small_split = true;
         mfact = 0.5;
       };
 
       gesture = "3, horizontal, workspace";
 
+      layerrule = [
+        "match:namespace launcher, animation popin 70%"
+      ];
+
       windowrule = [
         "match:class .*, suppress_event maximize"
-        "match:class brave-browser, suppress_event float"
+        "match:class helium, suppress_event fullscreen"
-
+        "match:class helium, sync_fullscreen false"
-        "match:class brave-browser, sync_fullscreen 0"
 
         "match:class proton-authenticator, float on"
         "match:class proton-authenticator, center on"
@@ -150,6 +132,10 @@ in {
         "match:class protonvpn-app, float on"
         "match:class protonvpn-app, center on"
         "match:class protonvpn-app, size 500 400"
+
+        "match:title run-bg, float on"
+        "match:title run-bg, center on"
+        "match:title run-bg, size 700 80"
       ];
 
       misc = {

home/system/hyprland/hyprpaper.nix

@@ -1,15 +1,15 @@
 # Hyprpaper is used to set the wallpaper on the system
-{lib, ...}: {
+{pkgs-stable, lib, ...}: {
   # The wallpaper is set by stylix
   services.hyprpaper = {
     enable = true;
+    package = pkgs-stable.hyprpaper;
     settings = {
       ipc = "on";
       splash = false;
     };
   };
-  systemd.user.services.hyprpaper.Unit.After =
+  systemd.user.services.hyprpaper.Unit.After = lib.mkForce "graphical-session.target";
-    lib.mkForce "graphical-session.target";
 
   wayland.windowManager.hyprland.settings.exec-once = [
     "systemctl --user enable --now hyprpaper.service"

home/system/hyprland/keyboard-backlight.nix

@@ -1,42 +0,0 @@
-# Turn the keyboard red/off when the battery is low
-# Include this one only if you have a omen laptop with RGB keyboard
-{
-  pkgs,
-  config,
-  ...
-}: let
-  alert-when-low-battery = false;
-  keyboard-backlight = pkgs.writeShellScriptBin "keyboard-backlight" ''
-    function set_keyboard_backlight {
-      local color=$1
-        echo $color > /sys/devices/platform/hp-wmi/rgb_zones/zone00
-        echo $color > /sys/devices/platform/hp-wmi/rgb_zones/zone01
-        echo $color > /sys/devices/platform/hp-wmi/rgb_zones/zone02
-        echo $color > /sys/devices/platform/hp-wmi/rgb_zones/zone03
-    }
-    state="white"
-    set_keyboard_backlight ${config.lib.stylix.colors.base0D}
-    if [ "${toString alert-when-low-battery}" = "false" ]; then
-      exit 0
-    fi
-    while true; do
-      BATTERY_LEVEL=$(cat /sys/class/power_supply/BAT*/capacity)
-      IS_CHARGING=$(cat /sys/class/power_supply/BAT*/status)
-      if [[ $BATTERY_LEVEL -le 10 && $IS_CHARGING != "Charging" ]]; then
-        if [[ $state == "red" ]];then
-          state="white"
-          set_keyboard_backlight "000000"
-        else
-          state="red"
-          set_keyboard_backlight "FF0000"
-        fi
-      else
-        state="white"
-        set_keyboard_backlight ${config.lib.stylix.colors.base0D}
-      fi
-      sleep 2
-    done
-  '';
-
-  command = "bash ${keyboard-backlight}/bin/keyboard-backlight &";
-in {wayland.windowManager.hyprland.settings.exec-once = [command];}

home/system/hyprland/polkitagent.nix

@@ -1,6 +1,6 @@
 # HyprPolkitAgent is a simple polkit agent for wayland compositors
-{pkgs, ...}: {
+{pkgs-stable, ...}: {
-  home.packages = with pkgs; [hyprpolkitagent];
+  home.packages = with pkgs-stable; [hyprpolkitagent];
 
   wayland.windowManager.hyprland.settings.exec-once = ["systemctl --user start hyprpolkitagent"];
 }

home/system/hyprlock/default.nix

@@ -0,0 +1,85 @@
+{config, ...}: let
+  c = config.lib.stylix.colors;
+in {
+  stylix.targets.hyprlock.enable = false;
+
+  programs.hyprlock = {
+    enable = true;
+    settings = {
+      background = [
+        {
+          monitor = "";
+          color = "rgba(${c.base00}FF)";
+        }
+      ];
+
+      label = [
+        {
+          monitor = "";
+          text = ''cmd[update:0] echo "[$USER@$(hostname) ~]"'';
+          color = "rgb(${c.base0D})";
+          font_size = 13;
+          font_family = "Maple Mono NF";
+          position = "48, -48";
+          halign = "left";
+          valign = "top";
+        }
+        {
+          monitor = "";
+          text = ''cmd[update:1000] echo "$(date +'%H:%M:%S')"'';
+          color = "rgb(${c.base05})";
+          font_size = 13;
+          font_family = "Maple Mono NF";
+          position = "48, -70";
+          halign = "left";
+          valign = "top";
+        }
+        {
+          monitor = "";
+          text = ''cmd[update:60000] echo "$(date +'%A %d %B %Y')"'';
+          color = "rgb(${c.base04})";
+          font_size = 13;
+          font_family = "Maple Mono NF";
+          position = "48, -92";
+          halign = "left";
+          valign = "top";
+        }
+        {
+          monitor = "";
+          text = "passwd:";
+          color = "rgb(${c.base0D})";
+          font_size = 13;
+          font_family = "Maple Mono NF";
+          position = "48, -141";
+          halign = "left";
+          valign = "top";
+        }
+      ];
+
+      "input-field" = [
+        {
+          monitor = "";
+          size = "200, 20";
+          outline_thickness = 0;
+          dots_size = 0.3;
+          dots_spacing = 0.2;
+          dots_center = false;
+          outer_color = "rgba(00000000)";
+          inner_color = "rgba(00000000)";
+          font_color = "rgb(${c.base05})";
+          fade_on_empty = false;
+          placeholder_text = "";
+          hide_input = true;
+          rounding = 0;
+          check_color = "rgb(${c.base0B})";
+          fail_color = "rgb(${c.base08})";
+          fail_text = ''<span font_desc="Maple Mono NF 13">auth failed</span>'';
+          capslock_color = "rgb(${c.base0A})";
+          position = "116, -138";
+          halign = "left";
+          valign = "top";
+        }
+      ];
+    };
+  };
+}

home/system/mime/default.nix

@@ -1,27 +1,19 @@
-# Mime type associations for the system.
 {
   lib,
   pkgs,
   ...
-}:
+}: let
-with lib; let
   defaultApps = {
-    # check desktop files here: `ls $(echo $XDG_DATA_DIRS| sed "s/:/ /g")`
+    text = ["nvim-ghostty.desktop"];
-    browser = ["brave.desktop"];
-    text = [
-      # "org.gnome.TextEditor.desktop"
-      "nvim-ghostty.desktop"
-    ];
     code = ["nvim-ghostty.desktop"];
     image = ["imv-dir.desktop"];
-    audio = ["mpv.desktop"];
+    audio = ["vlc.desktop"];
-    video = ["mpv.desktop"];
+    video = ["vlc.desktop"];
     directory = ["thunar.desktop"];
-    office = ["libreoffice.desktop"];
+    office = ["onlyoffice-desktopeditors.desktop"];
-    pdf = ["zathura.desktop"];
+    pdf = ["onlyoffice-desktopeditors.desktop"];
-    terminal = ["ghostty.desktop"];
-    discord = ["discord.desktop"];
     archive = ["xarchiver.desktop"];
+    browser = ["helium.desktop"];
   };
 
   mimeMap = {
@@ -35,7 +27,6 @@ with lib; let
       "text/x-go"
       "text/x-java"
       "text/x-csharp"
-
       "text/x-python"
       "application/x-shellscript"
       "text/javascript"
@@ -43,7 +34,6 @@ with lib; let
       "text/css"
       "text/x-php"
       "text/x-ruby"
-
       "application/json"
       "application/xml"
       "text/xml"
@@ -52,11 +42,8 @@ with lib; let
       "application/toml"
       "text/x-nix"
       "text/markdown"
-
       "text/x-dockerfile"
-      "application/x-yaml"
       "text/x-terraform"
-
       "application/x-perl"
       "text/x-lua"
       "text/x-haskell"
@@ -92,13 +79,6 @@ with lib; let
       "video/x-msvideo"
     ];
     directory = ["inode/directory"];
-    browser = [
-      "text/html"
-      "x-scheme-handler/about"
-      "x-scheme-handler/http"
-      "x-scheme-handler/https"
-      "x-scheme-handler/unknown"
-    ];
     office = [
       "application/vnd.oasis.opendocument.text"
       "application/vnd.oasis.opendocument.spreadsheet"
@@ -112,14 +92,25 @@ with lib; let
       "application/rtf"
     ];
     pdf = ["application/pdf"];
-    terminal = ["terminal"];
     archive = [
       "application/zip"
-      "application/rar"
+      "application/x-rar-compressed"
-      "application/7z"
+      "application/vnd.rar"
-      "application/*tar"
+      "application/x-7z-compressed"
+      "application/x-tar"
+      "application/gzip"
+      "application/x-bzip2"
+      "application/x-xz"
+      "application/x-zstd"
+      "application/x-compressed-tar"
+    ];
+    browser = [
+      "text/html"
+      "application/xhtml+xml"
+      "x-scheme-handler/http"
+      "x-scheme-handler/https"
+      "x-scheme-handler/ftp"
     ];
-    discord = ["x-scheme-handler/discord"];
   };
 
   nvim-ghostty = pkgs.makeDesktopItem {
@@ -131,10 +122,13 @@ with lib; let
     mimeTypes = mimeMap.code ++ mimeMap.text;
   };
 
-  associations = with lists;
+  associations = lib.listToAttrs (
-    listToAttrs (flatten (mapAttrsToList
+    lib.flatten (
-      (key: map (type: attrsets.nameValuePair type defaultApps."${key}"))
+      lib.mapAttrsToList
-      mimeMap));
+      (key: map (type: lib.nameValuePair type defaultApps.${key}))
+      mimeMap
+    )
+  );
 in {
   home.packages = [nvim-ghostty];
 
@@ -143,7 +137,7 @@ in {
     mimeApps = {
       enable = true;
       associations.added = associations;
-      defaultApplications = associations;
+      defaultApplications = lib.mapAttrs (_: lib.mkForce) associations;
     };
   };
 }

home/system/swaync/default.nix

@@ -0,0 +1,412 @@
+{config, ...}: let
+  c = config.lib.stylix.colors;
+  font = config.stylix.fonts.sansSerif.name;
+  monofont = config.stylix.fonts.monospace.name;
+  rounding = config.theme.rounding;
+  border-size = config.theme.border-size;
+  gaps-in = config.theme.gaps-in;
+  opacityToHex = opacity: let
+    val = builtins.floor (opacity * 255);
+    high = val / 16;
+    low = val - high * 16;
+    digits = "0123456789abcdef";
+  in "${builtins.substring high 1 digits}${builtins.substring low 1 digits}";
+  alphaHex = opacityToHex config.theme.inactive-opacity;
+in {
+  services.swaync = {
+    enable = true;
+
+    settings = {
+      positionX = "right";
+      positionY = "top";
+      layer = "overlay";
+      "control-center-layer" = "overlay";
+      cssPriority = "user";
+      "control-center-width" = 450;
+      "control-center-margin-top" = config.theme.gaps-out * 2;
+      "control-center-margin-bottom" = config.theme.gaps-out * 2;
+      "control-center-margin-right" = 0;
+      "fit-to-screen" = true;
+      "notification-window-width" = 400;
+      "notification-icon-size" = 40;
+      "notification-body-image-height" = 500;
+      "notification-body-image-width" = 500;
+      "notification-inline-replies" = true;
+      "notification-2fa-action" = false;
+      timeout = 3;
+      "timeout-low" = 2;
+      "timeout-critical" = 6;
+      "keyboard-shortcuts" = true;
+      "image-visibility" = "when-available";
+      "transition-time" = 200;
+      "hide-on-clear" = false;
+      "hide-on-action" = false;
+      "script-fail-notify" = true;
+      widgets = ["mpris" "volume" "backlight" "dnd" "buttons-grid" "notifications"];
+      "widget-config" = {
+        dnd.text = "Do not disturb";
+        volume = {
+          label = "󰕾";
+          "show-per-app" = false;
+        };
+        backlight = {
+          label = "󰃠";
+          "min" = 0;
+        };
+        mpris = {
+          "image-size" = 100;
+          "image-radius" = 10;
+          autohide = false;
+          blacklist = ["org.mpris.MediaPlayer2.playerctld"];
+        };
+        "buttons-grid" = {
+          actions = [
+            {
+              label = "󰖔";
+              type = "toggle";
+              command = "nightshift-toggle";
+              "update-command" = "pidof hyprsunset > /dev/null && echo true || echo false";
+            }
+            {
+              label = "󰈈";
+              type = "toggle";
+              command = "focus-toggle";
+              "update-command" = "test -f /tmp/hypr-focus-mode && echo true || echo false";
+            }
+            {
+              label = "󰍭";
+              type = "toggle";
+              command = "swayosd-client --input-volume mute-toggle";
+              "update-command" = "wpctl get-volume @DEFAULT_SOURCE@ | grep -q MUTED && echo true || echo false";
+            }
+            {
+              label = "󰌾";
+              command = "swaync-client -cp ; hyprlock";
+            }
+            {
+              label = "󰐥";
+              command = "swaync-client -cp ; systemctl poweroff";
+            }
+          ];
+        };
+      };
+    };
+
+    style = ''
+      @define-color center-bg              #${c.base01}${alphaHex};
+      @define-color notification-bg        #${c.base00}${alphaHex};
+      @define-color center-notification-bg #${c.base01};
+      @define-color background             #${c.base00}${alphaHex};
+      @define-color background-alt         #${c.base01};
+      @define-color text                   #${c.base05};
+      @define-color text-alt               #${c.base03};
+      @define-color selected               #${c.base03}66;
+      @define-color hover                  #${c.base03}28;
+      @define-color urgent                 #${c.base08};
+
+      * {
+        all: unset;
+        font-family: "${font}";
+        font-weight: 700;
+        --border-radius: ${toString rounding}px;
+        --border-radius-s: ${toString gaps-in}px;
+        --border-radius-xl: ${toString (rounding - 2)}px;
+        --shadow: 2px 4px 10px rgba(0,0,0,0.15);
+      }
+
+      .notification { padding: 5px; }
+
+      .notification-row { background: transparent; border: none; box-shadow: none; }
+
+      .control-center .notification { padding: 0; }
+
+      .notification-background {
+        background: @notification-bg;
+        border-radius: var(--border-radius);
+        border: ${toString border-size}px solid @selected;
+        box-shadow: none;
+        outline: none;
+        margin: ${toString gaps-in}px;
+        padding: 0;
+      }
+
+      .notification-background .close-button {
+        margin: 6px;
+        padding: 2px;
+        border-radius: ${toString (gaps-in - 2)}px;
+        background: transparent;
+        color: @text;
+      }
+
+      .notification-background .close-button:hover { background: @hover; }
+
+      .notification.low,
+      .notification.normal { border: none; }
+
+      .notification.critical {
+        border: ${toString border-size}px solid @urgent;
+        border-radius: var(--border-radius);
+      }
+
+      .notification-content {
+        color: @text;
+        margin: 10px;
+        font-weight: 700;
+        border: none;
+      }
+
+      .notification-content .text-box { margin: 0 0 0 15px; }
+
+      .notification-content .time {
+        padding: 2px;
+        font-size: 0.95rem;
+        font-weight: 800;
+      }
+
+      .notification-content .summary {
+        font-size: 1rem;
+        font-weight: 800;
+        padding: 2px 0;
+        margin-bottom: 2px;
+      }
+
+      .notification-content .body {
+        color: @text-alt;
+        font-size: 0.8rem;
+      }
+
+      .notification-row .inline-reply-entry,
+      .notification-row .inline-reply-button {
+        margin: 5px -5px -5px -5px;
+        padding: 10px 15px;
+        border-radius: var(--border-radius);
+        background: @background-alt;
+      }
+
+      .notification-row .inline-reply-entry { margin-right: 10px; }
+      .notification-row .inline-reply-button:hover { background: @selected; }
+
+      .notification-alt-actions { padding: 5px 0; }
+
+      .notification-action {
+        font-weight: 700;
+        border-radius: var(--border-radius);
+        background: @hover;
+        color: @text;
+        margin: 0 5px;
+        padding: 10px 0;
+      }
+
+      .notification-action:hover,
+      .notification-action:active { background: @selected; }
+
+      .control-center {
+        background: @center-bg;
+        border-radius: var(--border-radius) 0 0 var(--border-radius);
+        border-left: ${toString border-size}px solid @selected;
+        margin: 0;
+        padding: 5px 5px 0 5px;
+      }
+
+      .control-center .notification-background {
+        background: @center-notification-bg;
+        box-shadow: var(--shadow);
+      }
+
+      .control-center .notification-background .close-button,
+      .notification-group-close-button { opacity: 0; }
+
+      .notification-group { transition: 200ms; }
+
+      .notification-group:not(.collapsed) { margin: ${toString gaps-in}px; }
+
+      .notification-group-headers,
+      .notification-group-buttons {
+        color: @text;
+        font-weight: bold;
+        background: @background;
+        border-radius: var(--border-radius);
+        padding: 4px 8px;
+      }
+
+      .notification-group-headers > label {
+        margin: 0 3px;
+        font-size: 1rem;
+      }
+
+      .notification-group-icon { color: @text; }
+
+      .notification-group-buttons .image-button {
+        background: transparent;
+        color: @text;
+        padding: 4px;
+        border-radius: var(--border-radius);
+      }
+
+      .notification-group-buttons .image-button:hover { background: @hover; }
+
+      .widget {
+        margin: 5px;
+        color: @text;
+      }
+
+      .widget-mpris-album-art {
+        border-radius: var(--border-radius);
+        margin: 6px 4px;
+      }
+
+      .widget-mpris-title {
+        font-weight: 700;
+        font-size: 1.2rem;
+        margin: 0 3px;
+      }
+
+      .widget-mpris-subtitle {
+        color: @text-alt;
+        font-weight: 700;
+        font-size: 0.9rem;
+        margin: 0 3px;
+      }
+
+      .mpris-background { border-radius: 14px; margin: 3px; }
+
+      .widget-mpris {
+        border-radius: var(--border-radius);
+        box-shadow: var(--shadow);
+      }
+
+      .mpris-overlay {
+        border-radius: var(--border-radius);
+        padding: 10px;
+        background: @background;
+      }
+
+      .mpris-overlay > box:last-child {
+        border-radius: var(--border-radius-xl);
+        padding: 0 5px;
+        background: alpha(@hover, .6);
+      }
+
+      .widget-mpris-player button {
+        padding: 5px;
+        margin: 0 2.5px;
+      }
+
+      .widget-mpris-player button:hover {
+        border-radius: var(--border-radius-s);
+        background: @hover;
+      }
+
+      .widget-volume,
+      .widget-backlight {
+        border-radius: var(--border-radius);
+        padding: 10px 15px;
+        background: @background-alt;
+        box-shadow: var(--shadow);
+        color: @text;
+      }
+
+      .widget-volume > box,
+      .widget-backlight > box {
+        color: @text;
+      }
+
+      .widget-volume label,
+      .widget-backlight label {
+        font-size: 1rem;
+        font-weight: 700;
+        min-width: 1.2rem;
+      }
+
+      .widget-volume slider,
+      .widget-backlight slider {
+        background: @text;
+        border-radius: var(--border-radius-s);
+        min-height: 12px;
+        min-width: 12px;
+      }
+
+      .widget-volume trough,
+      .widget-backlight trough {
+        background: @hover;
+        border-radius: var(--border-radius-s);
+        min-height: 4px;
+      }
+
+      .widget-volume highlight,
+      .widget-backlight highlight {
+        background: @text;
+        border-radius: var(--border-radius-s);
+      }
+
+      .widget-dnd {
+        padding: 10px 15px;
+        border-radius: var(--border-radius);
+        background: @background-alt;
+        box-shadow: var(--shadow);
+        color: @text;
+      }
+
+      .widget-dnd > label {
+        font-size: 1rem;
+        font-weight: 700;
+      }
+
+      .widget-dnd switch {
+        background: @hover;
+        border-radius: var(--border-radius-s);
+        box-shadow: none;
+        padding: 2px;
+        transition: 200ms;
+      }
+
+      .widget-dnd switch slider {
+        background: @text;
+        border-radius: var(--border-radius-s);
+      }
+
+      .widget-dnd switch:hover,
+      .widget-dnd switch:checked { background-color: @selected; }
+
+      .widget-notifications { margin: 0; }
+
+      .widget-buttons-grid {
+        border-radius: var(--border-radius);
+        padding: 5px 15px;
+        margin-bottom: 5px;
+        background: @background-alt;
+        box-shadow: var(--shadow);
+      }
+
+      .widget-buttons-grid button {
+        padding: 10px;
+        margin: 3px;
+        min-width: 2rem;
+        font-family: "${monofont}";
+        background: @hover;
+        border-radius: var(--border-radius);
+        transition: 200ms;
+      }
+
+      .widget-buttons-grid button > label {
+        font-family: "${monofont}";
+        font-size: 18px;
+        font-weight: normal;
+        font-style: normal;
+        color: @text;
+      }
+
+      .widget-buttons-grid button:hover { background: @selected; }
+
+      .widget-buttons-grid button:checked { background-color: @text; }
+
+      .widget-buttons-grid button:checked > label { color: @background; }
+
+      .control-center-list-placeholder { color: @text; }
+
+      .blank-window { background: transparent; }
+    '';
+  };
+
+  stylix.targets.swaync.enable = false;
+}

home/system/tofi/default.nix

@@ -0,0 +1,47 @@
+{
+  config,
+  lib,
+  ...
+}: let
+  c = config.lib.stylix.colors;
+  font = config.stylix.fonts.serif.name;
+  gaps = config.theme.gaps-out;
+  barHeight = config.theme.bar-height;
+  rounding =
+    if config.theme.rounding > barHeight / 2
+    then barHeight / 2
+    else config.theme.rounding;
+in {
+  imports = [./desktop-actions.nix];
+  programs.tofi = {
+    enable = true;
+    settings = {
+      anchor = "top";
+      height = barHeight;
+      margin-top = gaps;
+      margin-left = 350;
+      margin-right = 350;
+
+      horizontal = true;
+      num-results = 8;
+      result-spacing = 20;
+      padding-top = 2;
+      padding-bottom = 2;
+      padding-left = 14;
+      padding-right = 14;
+
+      font = lib.mkForce font;
+      prompt-color = lib.mkForce "#${c.base0D}ff";
+      selection-color = lib.mkForce "#${c.base0D}ff";
+
+      outline-width = 0;
+      border-width = 0;
+      corner-radius = rounding;
+
+      prompt-text = "  ";
+      placeholder-text = "Search...";
+
+      drun-launch = true;
+    };
+  };
+}

home/system/tofi/desktop-actions.nix

@@ -0,0 +1,112 @@
+{...}: {
+  xdg.desktopEntries = {
+    focus-toggle = {
+      name = "Focus Mode";
+      exec = "focus-toggle";
+      icon = "do-not-disturb-symbolic";
+      comment = "Toggle focus mode";
+      categories = ["System"];
+      terminal = false;
+    };
+
+    nightshift-toggle = {
+      name = "Night Shift";
+      exec = "nightshift-toggle";
+      icon = "night-light-symbolic";
+      comment = "Toggle night shift";
+      categories = ["System"];
+      terminal = false;
+    };
+
+    mic-mute = {
+      name = "Mute Microphone";
+      exec = "mic-mute";
+      icon = "microphone-sensitivity-muted-symbolic";
+      comment = "Toggle microphone mute";
+      categories = ["System"];
+      terminal = false;
+    };
+
+    lock = {
+      name = "Lock";
+      exec = "hyprlock";
+      icon = "system-lock-screen-symbolic";
+      comment = "Lock the screen";
+      categories = ["System"];
+      terminal = false;
+    };
+
+    reboot = {
+      name = "Reboot";
+      exec = "systemctl reboot";
+      icon = "system-restart-symbolic";
+      comment = "Restart the system";
+      categories = ["System"];
+      terminal = false;
+    };
+
+    shutdown = {
+      name = "Shutdown";
+      exec = "systemctl poweroff";
+      icon = "system-shutdown-symbolic";
+      comment = "Power off the system";
+      categories = ["System"];
+      terminal = false;
+    };
+
+    hibernate = {
+      name = "Hibernate";
+      exec = "systemctl hibernate";
+      icon = "drive-harddisk-symbolic";
+      comment = "Hibernate the system";
+      categories = ["System"];
+      terminal = false;
+    };
+
+    waybar-toggle = {
+      name = "Toggle Waybar";
+      exec = "waybar-toggle";
+      icon = "panel-applets-symbolic";
+      comment = "Show or hide the status bar";
+      categories = ["System"];
+      terminal = false;
+    };
+
+    wifi-toggle = {
+      name = "Toggle Wi-Fi";
+      exec = "wifi-toggle";
+      icon = "network-wireless-symbolic";
+      comment = "Enable or disable Wi-Fi";
+      categories = ["System"];
+      terminal = false;
+    };
+
+    bluetooth-toggle = {
+      name = "Toggle Bluetooth";
+      exec = "bluetooth-toggle";
+      icon = "bluetooth-symbolic";
+      comment = "Enable or disable Bluetooth";
+      categories = ["System"];
+      terminal = false;
+    };
+
+    logout = {
+      name = "Logout";
+      exec = "hyprctl dispatch exit";
+      icon = "system-log-out-symbolic";
+      comment = "End the current session";
+      categories = ["System"];
+      terminal = false;
+    };
+
+    spotatui = {
+      name = "Spotify";
+      exec = "ghostty -e spotatui";
+      icon = "spotify";
+      comment = "Control Spotify from the terminal";
+      categories = ["Audio" "Music"];
+      terminal = false;
+      settings.Keywords = "spotify;spotatui;music;";
+    };
+  };
+}

home/system/waybar/default.nix

@@ -0,0 +1,28 @@
+{pkgs, ...}: let
+  scripts = import ./scripts.nix {inherit pkgs;};
+in {
+  imports = [
+    ./settings.nix
+    ./style.nix
+  ];
+
+  _module.args.networkScript = scripts.networkScript;
+  _module.args.bluetoothScript = scripts.bluetoothScript;
+
+  programs.waybar.enable = true;
+  stylix.targets.waybar.enable = false;
+
+  home.packages = with pkgs;
+    [
+      playerctl
+      pavucontrol
+      blueman
+      iw
+      hyprsunset
+    ]
+    ++ (with scripts; [vol-up vol-down vol-mute mic-mute bright-up bright-down nightshift-toggle focus-toggle waybar-toggle wifi-toggle bluetooth-toggle]);
+
+  wayland.windowManager.hyprland.settings.exec-once = [
+    "waybar"
+  ];
+}

home/system/waybar/scripts.nix

@@ -0,0 +1,164 @@
+{pkgs}: let
+  updateOsd = ''
+    [ -f /tmp/waybar-osd-pid ] && kill "$(cat /tmp/waybar-osd-pid)" 2>/dev/null
+    printf '%s' "$OSD_TEXT" > /tmp/waybar-osd
+    pkill -RTMIN+8 waybar 2>/dev/null
+    ( sleep 2.5; rm -f /tmp/waybar-osd /tmp/waybar-osd-pid; pkill -RTMIN+8 waybar 2>/dev/null ) &
+    printf '%s' "$!" > /tmp/waybar-osd-pid
+  '';
+
+  volGetText = ''
+    VOL_RAW=$(${pkgs.wireplumber}/bin/wpctl get-volume @DEFAULT_SINK@)
+    VOL=$(printf '%s' "$VOL_RAW" | awk '{printf "%d", $2*100}')
+    if printf '%s' "$VOL_RAW" | grep -q MUTED; then
+      OSD_TEXT="󰝟  $VOL%"
+    elif [ "$VOL" -lt 33 ]; then
+      OSD_TEXT="󰕿  $VOL%"
+    elif [ "$VOL" -lt 66 ]; then
+      OSD_TEXT="󰖀  $VOL%"
+    else
+      OSD_TEXT="󰕾  $VOL%"
+    fi
+  '';
+
+  brightGetText = ''
+    BRIGHT=$(${pkgs.brightnessctl}/bin/brightnessctl -m | awk -F, '{print int($5)}')
+    if [ "$BRIGHT" -lt 33 ]; then
+      OSD_TEXT="󰃞  $BRIGHT%"
+    elif [ "$BRIGHT" -lt 66 ]; then
+      OSD_TEXT="󰃟  $BRIGHT%"
+    else
+      OSD_TEXT="󰃠  $BRIGHT%"
+    fi
+  '';
+in {
+  bluetoothScript = pkgs.writeShellScript "waybar-bluetooth" ''
+    if bluetoothctl show 2>/dev/null | grep -q "Powered: yes"; then
+      device=$(bluetoothctl devices Connected 2>/dev/null | head -1 | cut -d' ' -f3-)
+      if [ -n "$device" ]; then
+        printf '{"text": "%s", "class": "connected", "tooltip": "Bluetooth\\n  %s"}\n' "$device" "$device"
+      else
+        printf '{"text": "󰂰", "class": "on", "tooltip": "Bluetooth on"}\n'
+      fi
+    else
+      printf '{"text": "󰂲", "class": "off", "tooltip": "Bluetooth off"}\n'
+    fi
+  '';
+
+  networkScript = pkgs.writeShellScript "waybar-network" ''
+    for iface in $(${pkgs.iproute2}/bin/ip -br link show | awk '$2 == "UP" {print $1}' | grep -vE '^(lo|tun|proton|wg[0-9]|ppp|vpn|docker|br-|veth|virbr)'); do
+      ip=$(${pkgs.iproute2}/bin/ip addr show "$iface" 2>/dev/null | grep 'inet ' | awk '{print $2}' | cut -d/ -f1 | head -1)
+      if [ -n "$ip" ]; then
+        if [[ "$iface" == wl* ]]; then
+          ssid=$(${pkgs.iw}/bin/iw dev "$iface" link 2>/dev/null | grep SSID | sed 's/.*SSID: //')
+          signal=$(${pkgs.iw}/bin/iw dev "$iface" link 2>/dev/null | grep signal | awk '{print $2}')
+          printf '{"text": "󰤨", "class": "wifi", "tooltip": "  %s\\n  %s dBm"}\n' "$ssid" "$signal"
+        else
+          printf '{"text": "󰛳", "class": "ethernet", "tooltip": "  %s\\n  %s"}\n' "$iface" "$ip"
+        fi
+        exit 0
+      fi
+    done
+    printf '{"text": "󰤭", "class": "disconnected", "tooltip": "Disconnected"}\n'
+  '';
+
+  vol-up = pkgs.writeShellScriptBin "vol-up" ''
+    ${pkgs.wireplumber}/bin/wpctl set-volume @DEFAULT_SINK@ 5%+ --limit 1.0
+    ${volGetText}
+    ${updateOsd}
+  '';
+
+  vol-down = pkgs.writeShellScriptBin "vol-down" ''
+    ${pkgs.wireplumber}/bin/wpctl set-volume @DEFAULT_SINK@ 5%-
+    ${volGetText}
+    ${updateOsd}
+  '';
+
+  vol-mute = pkgs.writeShellScriptBin "vol-mute" ''
+    ${pkgs.wireplumber}/bin/wpctl set-mute @DEFAULT_SINK@ toggle
+    ${volGetText}
+    ${updateOsd}
+  '';
+
+  mic-mute = pkgs.writeShellScriptBin "mic-mute" ''
+    ${pkgs.wireplumber}/bin/wpctl set-mute @DEFAULT_SOURCE@ toggle
+    if ${pkgs.wireplumber}/bin/wpctl get-volume @DEFAULT_SOURCE@ | grep -q MUTED; then
+      OSD_TEXT="󰍭  Muted"
+    else
+      OSD_TEXT="󰍬  Live"
+    fi
+    ${updateOsd}
+  '';
+
+  bright-up = pkgs.writeShellScriptBin "bright-up" ''
+    ${pkgs.brightnessctl}/bin/brightnessctl set 5%+
+    ${brightGetText}
+    ${updateOsd}
+  '';
+
+  bright-down = pkgs.writeShellScriptBin "bright-down" ''
+    ${pkgs.brightnessctl}/bin/brightnessctl set 5%-
+    ${brightGetText}
+    ${updateOsd}
+  '';
+
+  wifi-toggle = pkgs.writeShellScriptBin "wifi-toggle" ''
+    if nmcli radio wifi | grep -q enabled; then
+      nmcli radio wifi off
+    else
+      nmcli radio wifi on
+    fi
+    ${updateOsd}
+  '';
+
+  bluetooth-toggle = pkgs.writeShellScriptBin "bluetooth-toggle" ''
+    if bluetoothctl show | grep -q "Powered: yes"; then
+      bluetoothctl power off
+    else
+      bluetoothctl power on
+    fi
+    ${updateOsd}
+  '';
+
+  waybar-toggle = pkgs.writeShellScriptBin "waybar-toggle" ''
+    if pidof waybar > /dev/null; then
+      pkill waybar
+    else
+      hyprctl dispatch exec waybar
+    fi
+  '';
+
+  nightshift-toggle = pkgs.writeShellScriptBin "nightshift-toggle" ''
+    if pidof "hyprsunset" > /dev/null; then
+      pkill hyprsunset
+      OSD_TEXT="󰖔  Night Shift Off"
+    else
+      ${pkgs.hyprsunset}/bin/hyprsunset -t 4500 &
+      OSD_TEXT="󰖔  Night Shift On"
+    fi
+    ${updateOsd}
+  '';
+
+  focus-toggle = pkgs.writeShellScriptBin "focus-toggle" ''
+    if test -f /tmp/hypr-focus-mode; then
+      rm /tmp/hypr-focus-mode
+      OSD_TEXT="󰈈  Focus Off"
+      ${updateOsd}
+      hyprctl reload
+      hyprctl dispatch exec waybar
+    else
+      touch /tmp/hypr-focus-mode
+      OSD_TEXT="󰈈  Focus On"
+      ${updateOsd}
+      pkill waybar || true
+      hyprctl keyword animations:enabled false
+      hyprctl keyword general:gaps_in 0
+      hyprctl keyword general:gaps_out 0
+      hyprctl keyword decoration:active_opacity 1
+      hyprctl keyword decoration:inactive_opacity 1
+      hyprctl keyword decoration:rounding 0
+    fi
+  '';
+
+  # TODO: Run in background
+}

home/system/waybar/settings.nix

@@ -0,0 +1,146 @@
+{
+  config,
+  networkScript,
+  bluetoothScript,
+  ...
+}: let
+  gaps-out = config.theme.gaps-out;
+  c = config.lib.stylix.colors;
+in {
+  programs.waybar.settings = [
+    {
+      layer = "top";
+      position = "top";
+      height = config.theme.bar-height;
+      margin = "${toString gaps-out} ${toString gaps-out} 0";
+      modules-center = ["custom/osd" "custom/osd-sep" "clock" "tray" "hyprland/workspaces" "custom/network" "custom/bluetooth" "battery"];
+
+      # ── Modules ─────────────────────────────────────────────────────────
+
+      "hyprland/workspaces" = {
+        format = "{id}";
+        all-outputs = true;
+        move-to-monitor = true;
+        ignore-workspaces = ["[5-9]" "[1-9][0-9]+"];
+        on-scroll-down = "hyprctl dispatch workspace e+1";
+        on-scroll-up = "hyprctl dispatch workspace e-1";
+        persistent-workspaces."*" = [1 2 3 4];
+        cursor = true;
+      };
+
+      battery = {
+        bat = "BAT1";
+        interval = 20;
+        full-at = 100;
+        tooltip = true;
+        format-full = "";
+        format = "{icon} ";
+        format-charging = " {icon} ";
+        format-icons = ["" "" "" "" ""];
+        tooltip-format = "{capacity}%  ·  {time}";
+        tooltip-format-full = "Full\n{capacity}%";
+        tooltip-format-charging = "Charging\n{capacity}%  ·  {time}";
+        states = {
+          warning = 30;
+          critical = 15;
+        };
+      };
+
+      "custom/bluetooth" = {
+        exec = "${bluetoothScript}";
+        exec-if = "bluetoothctl show 2>/dev/null | grep -q Controller";
+        return-type = "json";
+        interval = 5;
+        on-click-right = "blueman-manager &";
+        on-click = "bluetooth-toggle";
+      };
+
+      "custom/osd" = {
+        exec = "cat /tmp/waybar-osd";
+        exec-if = "test -f /tmp/waybar-osd";
+        signal = 8;
+        interval = "once";
+        format = "{}";
+      };
+
+      "custom/osd-sep" = {
+        exec = "echo '|'";
+        exec-if = "test -f /tmp/waybar-osd";
+        signal = 8;
+        interval = "once";
+        format = "{}";
+        tooltip = false;
+      };
+
+      pulseaudio = {
+        format = "{icon}";
+        format-bluetooth = "{icon}";
+        tooltip-format = "{volume}%";
+        format-muted = "<span size='12pt'>󰝟</span>";
+        scroll-step = 2;
+        on-click = "vol-mute";
+        on-click-right = "pavucontrol -t 4 &";
+        format-icons = {
+          headphone = "";
+          hands-free = "";
+          headset = "";
+          phone = "";
+          portable = "";
+          car = "";
+          default = [
+            "󰕿"
+            "󰖀"
+            "󰕾"
+          ];
+        };
+      };
+
+      "pulseaudio/slider" = {
+        min = 0;
+        max = 100;
+        cursor = true;
+      };
+
+      "custom/network" = {
+        exec = "${networkScript}";
+        return-type = "json";
+        interval = 10;
+        on-click-right = "ghostty -e wifitui &";
+      };
+
+      tray = {
+        icon-size = 13;
+        spacing = 12;
+        cursor = true;
+      };
+
+      clock = {
+        timezone = config.var.timeZone;
+        tooltip-format = "<tt><small>{calendar}</small></tt>";
+        format = "{:%H:%M}";
+        format-alt = "{:%H:%M %d %B %Y}";
+        calendar = {
+          mode = "month";
+          format = {
+            months = "<span color='#${c.base04}'><b>{}</b></span>";
+            weekdays = "<span color='#${c.base0A}'><b>{}</b></span>";
+            days = "<span color='#${c.base05}'>{}</span>";
+            today = "<span color='#${c.base0D}'><b><u>{}</u></b></span>";
+          };
+        };
+      };
+
+      "custom/arrow-left" = {
+        format = " ";
+        tooltip = false;
+        cursor = true;
+      };
+
+      "custom/arrow-right" = {
+        format = " ";
+        tooltip = false;
+        cursor = true;
+      };
+    }
+  ];
+}

home/system/waybar/style.nix

@@ -0,0 +1,155 @@
+{config, ...}: let
+  c = config.lib.stylix.colors;
+  fg = "#${c.base05}";
+  module-bg = "#${c.base01}";
+  tooltip-bg = "#${c.base01}";
+  red = "#${c.base08}";
+  yellow = "#${c.base0A}";
+  green = "#${c.base0B}";
+  blue = "#${c.base0D}";
+  cyan = "#${c.base0C}";
+  inactive = "#${c.base03}";
+  highlight = "#${c.base02}";
+  font-size = "${toString config.stylix.fonts.sizes.applications}px";
+  font-size-clock = "${toString (config.stylix.fonts.sizes.applications + 2)}px";
+  module-padding = "14px";
+in {
+  programs.waybar.style = ''
+    * {
+        font-family: '${config.stylix.fonts.sansSerif.name}';
+        border: none;
+        border-radius: 0;
+        min-height: 0;
+        margin: 0;
+        padding: 0;
+        text-shadow: none;
+    }
+
+    #waybar {
+        font-weight: 700;
+        background: transparent;
+        font-size: ${font-size};
+        color: ${fg};
+    }
+
+    .modules-center {
+        background: ${module-bg};
+        border-radius: 100px;
+        padding: 6px 14px;
+        box-shadow: none;
+    }
+
+    #clock,
+    #battery,
+    #tray,
+    #workspaces,
+    #custom-osd,
+    #custom-network,
+    #custom-bluetooth {
+        padding: 1px ${module-padding};
+    }
+
+    #custom-osd-sep {
+        padding: 0;
+        color: ${inactive};
+    }
+
+    #clock {
+      font-size: ${font-size-clock};
+    }
+
+    #workspaces button {
+        color: ${fg};
+        font-size: ${font-size};
+        border-radius: 100px;
+        padding: 0 3px;
+        margin: 0;
+    }
+
+    #workspaces button.empty {
+        color: ${inactive};
+    }
+
+    #workspaces button:hover {
+        background: transparent;
+        color: ${fg};
+    }
+
+    #workspaces button.active {
+        color: ${module-bg};
+        background: ${blue};
+        border-radius: 60px;
+        padding: 0 8px;
+        margin: 0;
+    }
+
+    #battery {
+        color: ${green};
+    }
+
+    #battery.charging,
+    #battery.full {
+        color: ${green};
+    }
+
+    #battery.critical,
+    #custom-network.disconnected {
+        color: ${red};
+    }
+
+    #battery.warning {
+        color: ${yellow};
+    }
+
+    #custom-network.ethernet,
+    #custom-network.wifi {
+        color: ${cyan};
+    }
+
+    #custom-bluetooth {
+        color: ${blue};
+    }
+
+    #custom-bluetooth.off {
+        color: ${inactive};
+    }
+
+    #custom-osd {
+        font-weight: 700;
+        color: ${fg};
+    }
+
+    tooltip {
+        border-radius: 15px;
+        background: ${tooltip-bg};
+    }
+
+    tooltip label {
+        padding: 3px 10px;
+        color: ${fg};
+        font-weight: 700;
+    }
+
+    .popup * {
+        box-shadow: none;
+        outline: none;
+        border-radius: 10px;
+    }
+
+    menu {
+        border-radius: 10px;
+        font-weight: 700;
+        color: ${fg};
+        background: ${tooltip-bg};
+    }
+
+    menu > * {
+        padding: 3px 0px;
+    }
+
+    menu > *:hover {
+        border-radius: 10px;
+        background-color: ${highlight};
+    }
+  '';
+}

hosts/laptop/configuration.nix

@@ -8,12 +8,12 @@
     ../../nixos/home-manager.nix
     ../../nixos/nix.nix
     ../../nixos/systemd-boot.nix
-    ../../nixos/sddm.nix
+    ../../nixos/tuigreet.nix
     ../../nixos/users.nix
     ../../nixos/utils.nix
     ../../nixos/hyprland.nix
-    ../../nixos/docker.nix
+    ../../nixos/usbguard.nix
-    ../../nixos/clamav.nix
+    ../../home/programs/helium/system.nix # I hate browser's configuration..
 
     ../../nixos/omen.nix # CHANGEME: For my laptop only, remove this (OMEN 16)
 
@@ -22,8 +22,37 @@
     ./variables.nix
   ];
 
+  # USBGuard:
+  # Allow all USB devices until a proper policy is configured.
+  # Run `sudo usbguard generate-policy` with your devices plugged in,
+  # then set rules = "<output>" and switch implicitPolicyTarget to "block".
+  # services.usbguard.implicitPolicyTarget = lib.mkForce "allow";
+
+  services.usbguard.rules = ''
+    allow id 1d6b:0002 serial "0000:05:00.3" name "xHCI Host Controller" hash "4a4NgfdUaJO43rkCzmWRSeHHR/uUh5+SNsXnhosm9qs=" parent-hash "ldMchY4Tt4GPUYo30eNGvai+Fs/EdnVY3vMyxJUq4Nk=" with-interface 09:00:00 with-connect-type ""
+    allow id 1d6b:0003 serial "0000:05:00.3" name "xHCI Host Controller" hash "d+DNGWARDtv9nEK2ZvnNOCtFernuMu5/e/oZ7kCppqQ=" parent-hash "ldMchY4Tt4GPUYo30eNGvai+Fs/EdnVY3vMyxJUq4Nk=" with-interface 09:00:00 with-connect-type ""
+    allow id 1d6b:0002 serial "0000:05:00.4" name "xHCI Host Controller" hash "icotY3rI59mWiKsGxc59BGZZeBjfbuH0b4NUByj3cbQ=" parent-hash "tHvBfznK5rpQn+oa0PEEjHa29EAEvGyCcZixsfwA6W0=" with-interface 09:00:00 with-connect-type ""
+    allow id 1d6b:0003 serial "0000:05:00.4" name "xHCI Host Controller" hash "UbEoCZW8HT2ldc3qDeiK+IiQlGeaBC7F63681OwmKhI=" parent-hash "tHvBfznK5rpQn+oa0PEEjHa29EAEvGyCcZixsfwA6W0=" with-interface 09:00:00 with-connect-type ""
+    allow id 1d6b:0002 serial "0000:07:00.3" name "xHCI Host Controller" hash "pz29Oo0RhQ+5+7LgOZR4v3OlcsVv3m9kCgGsGUnoUjI=" parent-hash "DRyV2/31MYHdzkIEfbPQeb/1w4/PjOW6GqWrXkftf2I=" with-interface 09:00:00 with-connect-type ""
+    allow id 1d6b:0003 serial "0000:07:00.3" name "xHCI Host Controller" hash "O6iOpcl9StImWT62SrbeXacqbG6N/mTIipTRc0ipCGM=" parent-hash "DRyV2/31MYHdzkIEfbPQeb/1w4/PjOW6GqWrXkftf2I=" with-interface 09:00:00 with-connect-type ""
+    allow id 1d6b:0002 serial "0000:07:00.4" name "xHCI Host Controller" hash "Hp8B0Enf+ACRT2tyy0EqXj7eNsFDAnTRZadzuh/Iqd4=" parent-hash "l2vhvC+VGVKlkBUUK/usFu8jHJ/5bWOnJG6WzRexpt4=" with-interface 09:00:00 with-connect-type ""
+    allow id 1d6b:0003 serial "0000:07:00.4" name "xHCI Host Controller" hash "rJ3LKdvkCK3SUrCU3lV8qVbmPjA+r9Fe5106x2HlgK4=" parent-hash "l2vhvC+VGVKlkBUUK/usFu8jHJ/5bWOnJG6WzRexpt4=" with-interface 09:00:00 with-connect-type ""
+    allow id 0bda:c85c serial "00e04c000001" name "Bluetooth Radio" hash "Q/wlToV8WQgEYHBW/UIhnSwCCusCGqAR2D5gspSCImQ=" parent-hash "4a4NgfdUaJO43rkCzmWRSeHHR/uUh5+SNsXnhosm9qs=" with-interface { e0:01:01 e0:01:01 e0:01:01 e0:01:01 e0:01:01 e0:01:01 e0:01:01 e0:01:01 } with-connect-type "hardwired"
+    allow id 30c9:009f serial "01.00.00" name "HP True Vision FHD Camera" hash "eYW5fqReJd29tfHXkEktKC63dGfDpmlRMo5uMGUWwME=" parent-hash "icotY3rI59mWiKsGxc59BGZZeBjfbuH0b4NUByj3cbQ=" with-interface { 0e:01:01 0e:02:01 0e:02:01 0e:02:01 0e:02:01 0e:02:01 0e:02:01 0e:02:01 0e:02:01 0e:02:01 0e:02:01 0e:02:01 0e:02:01 fe:01:01 } with-connect-type "hardwired"
+    allow id 03f0:036b serial "" name "HP USB-C Dock G5" hash "iPFGrgGz0sWgKQjWD/F8eNOhkeR728dTG8JJtkUSvuM=" parent-hash "Hp8B0Enf+ACRT2tyy0EqXj7eNsFDAnTRZadzuh/Iqd4=" via-port "7-1" with-interface { 09:00:01 09:00:02 } with-connect-type "hotplug"
+    allow id 03f0:066b serial "" name "HP USB-C Dock G5" hash "JHDjLFApQNqijjmuKdJSWH5+1oLL7S6LQ9QHTAk5fTk=" parent-hash "rJ3LKdvkCK3SUrCU3lV8qVbmPjA+r9Fe5106x2HlgK4=" via-port "8-1" with-interface 09:00:00 with-connect-type "hotplug"
+    allow id 03f0:056b serial "201604140001" name "USB Audio" hash "OxQ8HQenW3/4HSGEBOSYFS15rXDTOaNDnjMbICweHgw=" parent-hash "iPFGrgGz0sWgKQjWD/F8eNOhkeR728dTG8JJtkUSvuM=" with-interface { 01:01:00 01:02:00 01:02:00 01:02:00 01:02:00 03:00:00 } with-connect-type "unknown"
+    allow id 03f0:086b serial "" name "USB2734" hash "MSXcPAlZqkpTyZQylOhSIB8eMfST2AzVHV9EbrBGTWc=" parent-hash "iPFGrgGz0sWgKQjWD/F8eNOhkeR728dTG8JJtkUSvuM=" via-port "7-1.3" with-interface { 09:00:01 09:00:02 } with-connect-type "unknown"
+    allow id 03f0:046b serial "11AD1D0A89EA2D08310E0B00" name "HP USB-C Dock G5" hash "DEGeuj1u4lwqrzp0UksFX7mSEY9JnGLxg7yxGbglAKE=" parent-hash "iPFGrgGz0sWgKQjWD/F8eNOhkeR728dTG8JJtkUSvuM=" with-interface { 11:00:00 ff:03:00 03:00:00 } with-connect-type "unknown"
+    allow id 03f0:076b serial "" name "USB5734" hash "BshoqybYo0IKgoDORYPRtbhhlmQrYAxPQb2EAm1JsWA=" parent-hash "JHDjLFApQNqijjmuKdJSWH5+1oLL7S6LQ9QHTAk5fTk=" via-port "8-1.3" with-interface 09:00:00 with-connect-type "unknown"
+    allow id 0bda:8153 serial "000001000000" name "USB 10/100/1000 LAN" hash "utEnXKJ57kRUbPcGUaNWhEyoOEbLOYAFxvlsyC0PZkk=" parent-hash "JHDjLFApQNqijjmuKdJSWH5+1oLL7S6LQ9QHTAk5fTk=" with-interface { ff:ff:00 02:06:00 0a:00:00 0a:00:00 } with-connect-type "unknown"
+    allow id 046d:0ab7 serial "2046BAB04T68" name "Blue Microphones" hash "cC6AQ2e1Q/BeFeostpbf1mH2WpoUmt6bhau4NlA3niU=" parent-hash "MSXcPAlZqkpTyZQylOhSIB8eMfST2AzVHV9EbrBGTWc=" with-interface { 01:01:00 01:02:00 01:02:00 01:02:00 01:02:00 01:02:00 01:02:00 03:00:00 } with-connect-type "unknown"
+    allow id 1532:02a1 serial "" name "Razer Ornata V3" hash "wfuIjBhhGuge8gflyA526SKqKoy8rHJZQZ+2o6usMiE=" parent-hash "MSXcPAlZqkpTyZQylOhSIB8eMfST2AzVHV9EbrBGTWc=" via-port "7-1.3.3" with-interface { 03:01:01 03:00:01 03:00:02 } with-connect-type "unknown"
+    allow id 13fd:5900 serial "50026B76861EE752    " name "External" hash "l/QvVV5hzZj1z6OUwB/kWl+WnH/7awrdMBoiNVx660M=" parent-hash "MSXcPAlZqkpTyZQylOhSIB8eMfST2AzVHV9EbrBGTWc=" with-interface { 08:06:50 08:06:62 } with-connect-type "unknown"
+  '';
+
   home-manager.users."${config.var.username}" = import ./home.nix;
 
   # Don't touch this
-  system.stateVersion = "24.05";
+  system.stateVersion = "26.05";
 }

hosts/laptop/flake.nix

@@ -0,0 +1,21 @@
+{
+  inputs,
+  nixpkgs,
+  ...
+}:
+nixpkgs.lib.nixosSystem {
+  modules = [
+    {
+      nixpkgs.overlays = [
+        inputs.nur.overlays.default
+      ];
+      _module.args = {inherit inputs;};
+    }
+    inputs.nixos-hardware.nixosModules.omen-16-n0005ne
+    inputs.home-manager.nixosModules.home-manager
+    inputs.stylix.nixosModules.stylix
+    inputs.nix-index-database.nixosModules.default
+    inputs.helium-browser.nixosModules.default
+    ./configuration.nix
+  ];
+}

hosts/laptop/hardware-configuration.nix

@@ -11,7 +11,13 @@
     (modulesPath + "/installer/scan/not-detected.nix")
   ];
 
-  boot.initrd.availableKernelModules = ["nvme" "xhci_pci" "uas" "usbhid" "sd_mod"];
+  boot.initrd.availableKernelModules = [
+    "nvme"
+    "xhci_pci"
+    "uas"
+    "usbhid"
+    "sd_mod"
+  ];
   boot.initrd.kernelModules = [];
   boot.kernelModules = ["kvm-amd"];
   boot.extraModulePackages = [];
@@ -24,7 +30,10 @@
   fileSystems."/boot" = {
     device = "/dev/disk/by-uuid/5251-9B85";
     fsType = "vfat";
-    options = ["fmask=0077" "dmask=0077"];
+    options = [
+      "fmask=0077"
+      "dmask=0077"
+    ];
   };
 
   swapDevices = [];

hosts/laptop/home.nix

@@ -1,34 +1,34 @@
-{
+{config, ...}: {
-  pkgs,
-  config,
-  inputs,
-  ...
-}: {
   imports = [
     # Programs
-    ../../home/programs/brave
+    ../../home/programs/helium
     ../../home/programs/proton
     ../../home/programs/proton/auto-start-vpn.nix
     ../../home/programs/ghostty
     ../../home/programs/nvf
     ../../home/programs/shell
-    ../../home/programs/fetch
     ../../home/programs/git
     ../../home/programs/git/lazygit.nix
-    ../../home/programs/git/signing.nix # Change the key or remove this file
+    ../../home/programs/git/signing.nix # CHANGEME: Change the key or remove this file
-    ../../home/programs/spicetify
     ../../home/programs/thunar
-    ../../home/programs/discord
     ../../home/programs/nixy
-    ../../home/programs/zathura
-    ../../home/programs/nightshift
-    ../../home/programs/group/cybersecurity.nix
     ../../home/programs/nix-utils
+    ../../home/programs/spotatui
+    ../../home/programs/yazi
+    ../../home/programs/desktop-actions # TODO:
+
+    ../../home/programs/group/basic-apps.nix
+    ../../home/programs/group/cybersecurity.nix
+    ../../home/programs/group/dev.nix
+    ../../home/programs/group/misc.nix
 
     # System (Desktop environment like stuff)
+    ../../home/system/hyprlock
     ../../home/system/hyprland
-    ../../home/system/caelestia-shell
+    ../../home/system/waybar
-    ../../home/system/hyprpaper
+    ../../home/system/swaync
+    ../../home/system/swayosd
+    ../../home/system/tofi
     ../../home/system/mime
     ../../home/system/udiskie
 
@@ -37,62 +37,30 @@
   ];
 
   home = {
-    packages = with pkgs; [
-      # Apps
-      vlc # Video player
-      blanket # White-noise app
-      obsidian # Note taking app
-      textpieces # Manipulate texts
-      resources # Ressource monitor
-      gnome-clocks # Clocks app
-      gnome-text-editor # Basic graphic text editor
-      mpv # Video player
-      ticktick # Todo app
-      session-desktop # Session app, private messages
-      signal-desktop # Signal app, private messages
-      stirling-pdf # PDF Editor
-      calibre # Ebooks
-      swappy # Screenshot tool
-      pinta # Image editor
-      notesnook
-      element-desktop
-      clamtk
-
-      # Dev
-      go
-      bun
-      inputs.bun2nix.packages.${stdenv.hostPlatform.system}.default
-      docker
-      nodejs
-      python3
-      jq
-      just
-      air
-      duckdb
-      lazydocker
-      claude-code
-
-      # Just cool
-      peaclock
-      cbonsai
-      pipes
-      cmatrix
-      fastfetch
-    ];
-
     inherit (config.var) username;
     homeDirectory = "/home/" + config.var.username;
-
+    file.".face" = {
-    # Import a profile picture, used by the caelestia dashboard
+      source = ./profile_picture.png;
-    file.".face" = {source = ./profile_picture.png;};
+    };
 
     sessionVariables = {
       AQ_DRM_DEVICES = "/dev/dri/card2:/dev/dri/card1"; # CHANGEME: Related to the GPU
     };
 
     # Don't touch this
-    stateVersion = "24.05";
+    stateVersion = "26.05";
   };
 
-  programs.home-manager.enable = true;
+  wayland.windowManager.hyprland.settings.monitor = [
+    "eDP-2,highres,0x0,1" # My internal laptop screen
+    "desc:AOC U34G2G1 0x00000E06,3440x1440@99.98,auto,1" # My external monitor
+  ];
+
+  programs = {
+    home-manager.enable = true;
+    nixy = {
+      enable = true;
+      configDirectory = config.var.configDirectory;
+    };
+  };
 }

hosts/laptop/secrets/default.nix

@@ -1,29 +1,42 @@
 # Those are my secrets, encrypted with sops
 # You shouldn't import this file, unless you edit it
 {
-  pkgs,
   inputs,
+  pkgs,
+  lib,
+  config,
   ...
-}: {
+}: let
+  home = config.home.homeDirectory;
+in {
   imports = [inputs.sops-nix.homeManagerModules.sops];
 
   sops = {
-    age.keyFile = "/home/hadi/.config/sops/age/keys.txt";
+    age.keyFile = "${home}/.config/sops/age/keys.txt";
     defaultSopsFile = ./secrets.yaml;
     secrets = {
-      sshconfig = {path = "/home/hadi/.ssh/config";};
+      ssh-config = {
-      github-key = {path = "/home/hadi/.ssh/github";};
+        path = "${home}/.ssh/config";
-      gitlab-key = {path = "/home/hadi/.ssh/gitlab";};
+      };
-      netrc = {path = "/home/hadi/.netrc";};
+      github-key = {
-      jack-key = {path = "/home/hadi/.ssh/jack";};
+        path = "${home}/.ssh/github";
-      signing-key = {path = "/home/hadi/.ssh/key";};
+      };
-      signing-pub-key = {path = "/home/hadi/.ssh/key.pub";};
+      jack-key = {
+        path = "${home}/.ssh/jack";
+      };
+      signing-key = {
+        path = "${home}/.ssh/key";
+      };
+      signing-pub-key = {
+        path = "${home}/.ssh/key.pub";
+      };
     };
   };
 
   home.file.".config/nixos/.sops.yaml".text = ''
     keys:
       - &primary age12yvtj49pfh3fqzqflscm0ek4yzrjhr6cqhn7x89gdxnlykq0xudq5c7334
+      - &work age1c8pawdsxptfslgrz2c56s39mrtnjzc5mm3hfzgr2wdwu2v6vfsdsupjsq6
     creation_rules:
       - path_regex: hosts/laptop/secrets/secrets.yaml$
         key_groups:
@@ -33,10 +46,19 @@
         key_groups:
           - age:
             - *primary
+      - path_regex: hosts/work/secrets/secrets.yaml$
+        key_groups:
+          - age:
+            - *work
   '';
 
   systemd.user.services.mbsync.Unit.After = ["sops-nix.service"];
-  home.packages = with pkgs; [sops age];
+  home.packages = with pkgs; [
+    sops
+    age
+  ];
 
-  wayland.windowManager.hyprland.settings.exec-once = ["systemctl --user start sops-nix"];
+  wayland.windowManager.hyprland.settings.exec-once = [
+    "systemctl --user start sops-nix"
+  ];
 }

hosts/laptop/secrets/secrets.yaml

@@ -1,8 +1,5 @@
-pia: ENC[AES256_GCM,data:0bnhHeVqKSLHVimd78a94ShHlO3+LUoZ4oiKD3cnBYkaZsw=,iv:S+/IChlFlqdI+PyFF+Ti4AJUkch2MS0qKiqHL1Q3RMk=,tag:+v2kV70ou84eIc01dKnAhA==,type:str]
+ssh-config: ENC[AES256_GCM,data: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,iv:1UJQU4eBZE1BMVnJY2CQTDH8jXSMlrv3gGU3cKTOvdU=,tag:OzLQRkTAKG2KQXv+Vh7Msw==,type:str]
-sshconfig: ENC[AES256_GCM,data:+r4RpeGsAGjgwsWMgwQmZnSxwoPLGDQG0hgasm1/xGMA655Q6tLGDOvTD4ypZ6d5TI67cWENJHr1pORzHVdZYB/uS/S7Ejp3VaVEZDRuLtKuq+2mDnp87HH8caE3jmijWSJis+1GM8lgxdyX8sDMz6b/zu76SrZlusf+kMFwQA7svxlA1iHP/wBAN8CFu2XOaGrjXT/Ydwd9GNAXA3VHLf6r9yEzcT1y944/eKGAQdlDFIVEe/bhv5Qxul1AH8TJT/ERMuYdS/OpbqnRLyZHHkREr8y1TllTWdMnGz2sRB7QnZ99ULpyR/h2Qc4XdCiC+qYn0yinXsnPO+NW7ulFn+5lNoyekDveI5pmsv021rnOtJU1SnlEm9xx3dafVdmLpFy6Y8xeJFUeF+nbU3Oc6IHMKHQZoL1ucCsF9qNO38bnyTwVX+wO9g16fcNzR2EfjDCGHj7O8YxdAVzPWvbExKk+2iamkzXrI/P/BdAvy/+QagstPoMz4TxZvw1ir7gd5emk13+t9Cy2vrutbxbouXOAuXKA2021WP7V+aDrwsY1jSGO6oiBFYBwe3wCZ2rPM3+oHxrnyzohhxGRgwN0td//,iv:Wln9pc4ptH7aN2VnBRgO12fKDZiITkIjOJseUW1MZPQ=,tag:BNrMyiDsbu72A9ljdQd3Wg==,type:str]
-netrc: ENC[AES256_GCM,data:cTaDDI8b9QbUI3zKzraF2R6v1/x+6h8KEQJbqIgdfKnpvIvg816eFhcMqn4rart4Adtayt0GQOYheR0Q9DfR+TtbL0ne/drdlAABOQxc6PUJdLo+O5kx4f5QJbJ4,iv:aZ+nt9qcmIRWyOhq3HfIU3qYHFnf8EjXOp0c0vQ2fQc=,tag:H6ncweCaKMDxq9VHt51qlw==,type:str]
 github-key: ENC[AES256_GCM,data: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,iv:GEJsAs5NriwENYTV/VShgJF6iMmrtTwNiXOvfXyEP8E=,tag:nfZgsFqaet075GjQAoVZxQ==,type:str]
-gitlab-key: ENC[AES256_GCM,data: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,iv:g4X2GC/9+je4qkvUT4UJl40+r/FzFY88XtYkthiwGVY=,tag:XFfEzXJEeKXB/QJt2fT4Qw==,type:str]
 jack-key: ENC[AES256_GCM,data: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,iv:oC1xU5Tu3The105VYRmxIw4kEwDoqe8T/EH6mmqpqwQ=,tag:Pu8c536u6W7ALrqjRsvXDw==,type:str]
 signing-key: ENC[AES256_GCM,data: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,iv:KNQUlMPaiR4x1Fw+HZe/EOmh/gfsrqlefpq23uflz/8=,tag:illu42HKunQXnijjsUIvnQ==,type:str]
 signing-pub-key: ENC[AES256_GCM,data:XuokZmCsnaNQ0rvVa3k81T4vtxw//r63xp1yHDLaNAMwA2r2bh6addl9WoAmm76g1rweqZrAAIw1PXDb90ubPaBP1iEHSkGZpwUpy/tOTePRdHMW2WtVvidpHQ==,iv:auB/bA89cJK6DnQi1BK2uldXRPyJfo+r7nl5qOLefUk=,tag:/I3kB6El1yesBMGOjJ+oHA==,type:str]
@@ -17,7 +14,7 @@ sops:
             cmVxVC8rVDlWMUdZaGw3bmdOaWZGS1EKYahBlc8XpB5UdKZQkvxbLcKQ/xkFJjWo
             FSfQWnjhe/a7BJtJEcKZkjOQU0mYqlSu+uT2RA9diCQeRUJPRF+nAw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-03-30T15:43:41Z"
+    lastmodified: "2026-04-25T11:23:30Z"
-    mac: ENC[AES256_GCM,data:fAn9R6YyyWD/WjA38Me0YLdzSzcuclAr4EkKM4De8Hd7sVrhl7FFI+Smoy3QagwljuUwjc9g8U5K6DYQB+Syu0re8ODCQmpzUKyQHsnN7OHHQk5dhrentC4GhTaEXjb+VGnPVGVjlLBo4ulw5faqu5A7iLHwViT0MjpGfq5egqA=,iv:1rP6wrHzjZvZGei4UljSR//6kL/1qzLskAUVCMA+HqI=,tag:QuhLq3ncHRxKyvHPDnH7VA==,type:str]
+    mac: ENC[AES256_GCM,data:ZnLSwtyhaiMIcXxzlwhtk0dWVnOkn0avfeRezPPNBUXd0oyJY+krBsLXJdSNPHV/X/L58476okYjUzfIQzEAkrL9Fb7v/Jt0aw4SDrxbF+qbcfdvsWPUjFDJIPovuf3ee3o7iXGU2ItGTaJa2eFACoyd37KVc7jZd6gvYYAyULA=,iv:7IKqe0c5CTgJrS7OgCQWhtxaCVKo+UWEibttFUVCWGM=,tag:OfCrKPzrPBZThCR1j7IB7A==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.12.2

hosts/laptop/variables.nix

@@ -5,20 +5,16 @@
 }: {
   imports = [
     # Choose your theme here:
-    ../../themes/zen.nix
+    ../../themes/nixy.nix
   ];
 
   config.var = {
-    hostname = "nixy";
+    hostname = "h-laptop";
     username = "hadi";
-    configDirectory =
+    configDirectory = "/home/" + config.var.username + "/.config/nixos"; # The path of the nixos configuration directory
-      "/home/"
-      + config.var.username
-      + "/.config/nixos"; # The path of the nixos configuration directory
 
     keyboardLayout = "fr";
 
-    location = "Paris";
     timeZone = "Europe/Paris";
     defaultLocale = "en_US.UTF-8";
     extraLocale = "fr_FR.UTF-8";

hosts/pph/configuration.nix

@@ -1,25 +0,0 @@
-{config, ...}: {
-  imports = [
-    # Mostly system related configuration
-    ../../nixos/audio.nix
-    ../../nixos/bluetooth.nix
-    ../../nixos/fonts.nix
-    ../../nixos/home-manager.nix
-    ../../nixos/nix.nix
-    ../../nixos/systemd-boot.nix
-    ../../nixos/sddm.nix
-    ../../nixos/users.nix
-    ../../nixos/utils.nix
-    ../../nixos/hyprland.nix
-    ../../nixos/docker.nix
-
-    # You should let those lines as is
-    ./hardware-configuration.nix
-    ./variables.nix
-  ];
-
-  home-manager.users."${config.var.username}" = import ./home.nix;
-
-  # Don't touch this
-  system.stateVersion = "24.05";
-}

hosts/pph/hardware-configuration.nix

@@ -1,31 +0,0 @@
-# Do not modify this file!  It was generated by ‘nixos-generate-config’
-# and may be overwritten by future invocations.  Please make changes
-# to /etc/nixos/configuration.nix instead.
-{ config, lib, pkgs, modulesPath, ... }:
-
-{
-  imports =
-    [ (modulesPath + "/installer/scan/not-detected.nix")
-    ];
-
-  boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usb_storage" "usbhid" "sd_mod" ];
-  boot.initrd.kernelModules = [ ];
-  boot.kernelModules = [ "kvm-intel" ];
-  boot.extraModulePackages = [ ];
-
-  fileSystems."/" =
-    { device = "/dev/disk/by-uuid/5dbf85d3-d236-4af8-b489-d6066bfe1eb7";
-      fsType = "ext4";
-    };
-
-  fileSystems."/boot" =
-    { device = "/dev/disk/by-uuid/043E-1755";
-      fsType = "vfat";
-      options = [ "fmask=0077" "dmask=0077" ];
-    };
-
-  swapDevices = [ ];
-
-  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
-  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
-}

hosts/pph/home.nix

@@ -1,78 +0,0 @@
-{
-  pkgs,
-  config,
-  ...
-}: {
-  imports = [
-    # Programs
-    ../../home/programs/brave
-    ../../home/programs/ghostty
-    ../../home/programs/nvf
-    ../../home/programs/shell
-    ../../home/programs/fetch
-    ../../home/programs/git
-    ../../home/programs/git/lazygit.nix
-    ../../home/programs/thunar
-    ../../home/programs/nixy
-    ../../home/programs/zathura
-    ../../home/programs/nightshift
-    ../../home/programs/group/cybersecurity.nix
-    ../../home/programs/proton
-    ../../home/programs/nix-utils
-
-    # System (Desktop environment like stuff)
-    ../../home/system/hyprland
-    ../../home/system/caelestia-shell
-    ../../home/system/hyprpaper
-    ../../home/system/mime
-    ../../home/system/udiskie
-
-    ./variables.nix # Mostly user-specific configuration
-    ./secrets
-  ];
-
-  home = {
-    packages = with pkgs; [
-      # Apps
-      vlc # Video player
-      blanket # White-noise app
-      obsidian # Note taking app
-      textpieces # Manipulate texts
-      resources # Ressource monitor
-      gnome-clocks # Clocks app
-      gnome-text-editor # Basic graphic text editor
-      mpv # Video player
-      swappy # Screenshot tool
-      pinta # Image editor
-      libreoffice
-      notesnook
-
-      # Dev
-      go
-      bun
-      docker
-      nodejs
-      python3
-      jq
-      just
-      air
-      duckdb
-      lazydocker
-
-      # Just cool
-      peaclock
-      cbonsai
-      pipes
-      cmatrix
-      fastfetch
-    ];
-
-    inherit (config.var) username;
-    homeDirectory = "/home/" + config.var.username;
-
-    # Don't touch this
-    stateVersion = "24.05";
-  };
-
-  programs.home-manager.enable = true;
-}

hosts/pph/secrets/secrets.yaml

@@ -1,18 +0,0 @@
-ssh-config: ENC[AES256_GCM,data:jtot9nSlaS/zmVqGEDACG4HarHFnpw3QMLdYGOvHI1rzjFm+FuIw+MXtPBaDT2rWO59XKchp31X2rik6igNoY9iuQ/uncFWonkb8RTOV6zG/BC32cFf08nNmp75slr1y/YA8rc2kM4An81Zq27g0e9AKyRVRqmvI3HEQq/1mpWF8OJpSfdggCIylGQezB2Vy3Ik2hJyoJaf7BSaikN1/jPzaImpPi2OOrREydePuZjX8D0DqM2xm+LUSsUpXutsKWDaaeuMAqWfjH1svOvT4+oyMBoqrp2+ijP7vRjFeuYrxaU858YzDi0+bTdzn8umlAr6rjLZW+9JUKDog5Fja5j/WvIk1PClqfXCX1+hCX4GlAdV3FYTn,iv:vQuRDKuidQFl4u7bQlAEAf3s8kYBdNwmXO6JbcRV32k=,tag:yv7NHfncDwjy9OGrTZI57A==,type:str]
-github-key: ENC[AES256_GCM,data:GmZfleQssslbVIiqyzhszhsfXHZcuBgkCREna7AHtP95lyG2F/0u8LUmliQePxwMirJLHCMnl5z0QIvAIsOtXsb6oKEk+Zc9BRapE/d+vmaKqWH06ip5TIEkGHOzxPziR1KmaLPw6RpgyC84p00jiNy6uNPq8iEibdsLA/YPSxfiYCon+i3qZ4qEDws2ZBacEvYCt6A/vyXSTpv3mZCpAUP2Ageghy4mYioIxjt/AG/QwJaN3excyoPPITZ7kMrnJ1t/6vSu0rb15i0sWULFIuOLaniTpp3N3mw7A9t5W+z9POBUIoL9L/m3DMRKsl6Fck8s/Fp+5XvpkSCTZIqG+lJVz/eemZcsr/mR9rvsFmCKNjS7Fa54WZ8O/yABWjIV2e4DCdMgUnq/MlOePmPWJROTqjIjRACrgzco2s9KwCvBAfZJIOenc0sMIhgn0VA1gnxTHC1ycJp5T5awTfTVTImxCACnUZK8nChCEpiK1QGSpnxTD3a9RoaHiE3pBiINmYVK7eU3VWqVh1K9wvIODfTK1zASr3ere8Rvx3xmIiK6NKx5GFQ4DazZsyv1zDZYb/kOVu33sSlmGuoMvJ9QadN0+fu8sTj0hi9OBH6qpTIrSw9SWhJnX4fXMN6mbwC2QJB+jJYrh/G10J3xAZwxlrujVz9t7fFzv31Xitk8zSkvFpfJFbJWcGZArvyvTP4xPDh/2+eXqK01nQ002puv7XIIEJaF0kOcASR0w7qjDXG598IGBwypFyj+oljBWluMkjNV+M9Gc+YhbsDYSyI56fqqraC3Vqek8dXK8PmNFfQ62zZtZ3OMBzMjwe+tq0Q6LKdzaJR3N4pF2wqj9df37S/onJFCpU3+XkU5Ur9fk94bs8McvY5Y5k0r6TZNbz6Ye08yHVZa/MzPQG9dXpc38hHdfldDj6gz87XkHQDbABzqQ+j1RL0N7NUMsa9tR3hJZPV2lZYm5TNQYfAa8jDnuO2NwhGrGoD/jFycVElulyHV2F1goMag9MRGK7obpoVUN2RtnSj1eYlH0E6uGuCwBe8GAjhIVCnXQIn5hErJjh7VWeeastdfMlw5z3JzKMaTPXusLY0BoGejDIvRh8NE+R9vv4kO4PDJk/dTYTGfBhgcjdD+nD/uf1mdpzlV/ojaGbH2JxylQ8LkWVd7rwIhS4skLwcE+9NHuBVTkc2eP9i0FnTxsJOlX1RWQn3OewxrcnNuVaGMnZisIk/hXz4Qj1I32+5vD1w5vzRZyXy9QZBGlED6ggbj7SDuSBKze6KYq2saIf4d0n8pScyiziSjGzaKdjW9k7T15XOg6O4kbwuG+fOQSOLGB0lY173gA5P5hy4SRF12Yyk4fK1N/T80SudI/DTy5Zj+e1uvPcBseAw0EGDUoyWeqSTCMSdk4q+B6mdvFPx3002EuhVKE6saNMzTZ/5CweLQlYFSp4fmIVhkih7XKcNSOamjsUFFVjjg5QNY9lDuvJ25DTIhvD9xhr7VHgyVSV6CoyUUkOpOA0GWW4Qx+xvv+NrDjsVVlmKUlGRsX7HNPZIyS4RiR7ikP/jLVNYYig63vXqvuIqXeLLAdyrO6DwfcnM51u0Q6Dpsb9OJbNR1zjxK9MSyVyHMP6RNs1oQgPfypa67eQMJ7Tw9JEHIH/VMVL/Ha7dfThB3mkAM5HRbnUA6eSMkwYdBjRF27ERXLSywCitIVx9xsN//FcR8yg0iDQvmp+HPWQkL4zJo6lPLblIhgNWsp7i23F554G4KpbosKZU6RwG7xNaqMF0ATAxt2l0oIU7DGmO6iH7W1kyiLmBBAqFOR+43ikSZOqgJh/PjlFLE0hdoDzL3jerFPA7CCU4bmcspBO3afS/wLO1AaQ6i9rLlRpjY+8HRpB6PKEPOVUrAoaef88vICQDN39/Z3a4IfUIqJ6bEYZRhoVrMJF0FXGDpO7hk0cfXabj3VKG7n0LtDFD6vzydhfh2E3sIY6sSUNtSWJ9DOWk0MtrVhuZoHB9XPiXPShm25BitaHJsB6tin+8AUMhLz1kfDO1Qo6FUpNKnFXBVuYL05J2nqG7RRYwXZq9mqwhHLmsUtVjhndpwHK929WeQ/PR1A2OOJPuXWARjp2XhhBlrbrYy1RnY528joLc8wWtQGQVx4LmJKA8lxFtdb3Ina57N8R/U1Vvf//vBBb1blfgYY7w6zfwxeAjtbqnGVhWb3pdM2hAou/5M9rMOJxE+CyUtLibahO7sfZ9nnMb4gltQfKmN4LnwXPmaILz0xx0eJvsbN/yV+CLnmBqJ8D+dJg6ANGrTbMSveWvgIifr3NIIy1t2l6hQyYRava8XhoRCW7xmxTNzQzUh3xY17Z4cw5YJ4ac139Le836mzCKl9yscI5R2a97g7tnGOruQP/PCu6DIUaLRoitfpnEorZBLuVwUU00QW1RUb4ooKrvGap5/GjqglsVdiZQJrml+REmZyJRtoBT29zXU/JI6UYZrwRvXhRu4mWaxrLEmrrqQ5ABqpwy4ednuxQbHZPY3Hy1tXEtc3zeloT877cLgmgJ5CaYHnyXindpHzQBtPBMmbE8zHHs1lyZ11Jz1hfGc5h48U5YjyrXQqpbLSf6DC53ysXDl/JE4lD0WElqUmq15VpTZ2Ue43CEfasbXbP4mAZ7ixQXj3qVZZNz1tZ8Y5MZYqvtZC1YDn/tAWtd0SuUwK5qdq7mRo7d/dLASnkTGQfdg7QD2+EsWPtT2wtmVsPVQyatP3isM6wLO8LY+h/1hZyPyyJ6X9LXbac+/SGXECP6nvxbDkhzbcwQBZDHNopAeVbLQ9TyruvIxqDlyOjBgygigJlOiWA2zihf7ujn+bBjQVV/wNROfFS9IrKgITgWgeInGeWs0fXW4KoJNMqI7ftk7VWcKBonoNItanEHin2pwDRZM+v5xxjbjA5K4ZOqSMnwIPMr7WceKy14OMZN0o1MRmFOV9i128KkcppZAKt5++CmndtLsHfJ4sl+AfoYhLJcX9JTPLMD9sKqtZl086I+dI+rS3RAFkKdzgkY2BMXaOCWg33fC3S8olno4y8qFTnI+6UT/M+EZtsIoh1rG2MX3TdVNH1yppPK+1UluYxmPZxNSLJajUmFgAixq7AqFd40ULrHs/nCozoIgs772ttzo55Ri/7BCO+INtnyBp0MeNCHWC8g+UOwH/vGqdsRIQE28udwrmDIdt3Bh+tK9r5+6GvZN8gC89ZaorI+5uaLxFsjwMM3pNpIMfilahN47tbfcqXKRWpOSNbWo75L9bv0I1U2YPQ5JpKTjPveM5gL5l/8dMARrGfQ7qLB54x7kQRG6HCQmAnQr3t6HWU5bTKL1NKbb4HlqUai11k4/yAAPu8JrJjvDkIcNXILKQkN8wNQYZE91ALo/EsvnFO57+ev9jy1bYfkJkwp+qbirh7w/150qGZpADIWU4u8sirPofqj0aTZQI/53iPiuvhV8B50ZATCL8So3dFV8iQjfHp4jJdjoc6HatQMfuAsSi4PUBDv9Deh7NXRdfjXGwjvDZj03EnTty13qUE/caYxKKcUwbxzlmxLU/BxWL4/Zn6/MK9fCjcT4EBvSQQPNvYgmLUZrAEzL46X4sO7dKaZxvEelHzO2SeNbeW9fYUqL2tQ4ChnC46oKvIF+XT5xfGS1er7Mske6Y2JVs7loOMNpDfzIHZEWNA3iSmFGnhGU51itsWP3DmJAE+/dVRA/lkPiQmP/XofZtuLPyY3JKD/CHmKMvkuDrB+Q6ZZjUONfH7KZcTrBPM0RcNze2xJEk8xjUtL6XQm5tUYyy2RDYl7yVPDn5a1olgATkv+4BroxOLBpQ0HkQpnsj549sa+40IEMOZUDNoExjvs6ukEgax4/Fi8slTc++vRCv7kyMGl6DeFV3oAVzvkTK/vQfG0C8yXwuYG9wN9Ihn9GSgPejXBb4uxuZoFpa0/BfJBa5xYM1c+ewf7qIQA5I0Tnm3W9YXqZ6XHK+TaduqJ6xQcD9MrD79sJpeR7GoMIi7vHGEJU8ZN8AGX1/qpM5dwbB4CfgYk0AQauHhdaVzgYym2AueywyUaaRzit2dn9oIvDfksHqXV+QVfXXBuLbt6x5O7KNGZwuQhaRamPHl/SckxW5Tm+tZjsizs3hB2f+JWCO+BuboxDbO0YfolasX2YUDBfrvtqeCZ/WAt+VQYLJ3fzXtmVafeIWDWmNhi6FfkuZ1gCwmubQzSBMYG4Usc2T6OTUN51cbSx/IGSCIBeJ+goOWCc1hpjyqrvaoH+brTgR0gwbczI5h5ukfi1ZrXuL5Bwqj9mwyK1vkLYBcF2uNL2KDrRTgGBVMbHwc2/5KdCnMTmjmghDtRJxzFkaSsHODjapW8or7wJpMYDDaTLQgGWQ+weUDNrilhWau3HWo2T/V8SlyFRcrGvs2WLhF2o5/4a5lpnZZGcnp22iX5GVU4jBaqraSd9W5DuXIxXGRLCkONrxz82Vw3rzB3hop362O1zSS2ygFLxF/QPk3tspWWNyMMKlXByLne6oqmVRK5etxoNbqYeOiO80fWqXNv7FAG8zjIj+gpQfIQEGQsmpeufKAVgQlczPzglzpR0hcA=,iv:7SuHnThyDeOMpDMZ5/LCiyxsFvzkNwEV8xpL56FI/qw=,tag:4CLUrclfHQU+2M1OxLtw7w==,type:str]
-gitlab-key: ENC[AES256_GCM,data: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,iv:IKHMuKQt7rsbUfzosTloCS5YF8Xt9RhCaw5qM9wt0HE=,tag:cgMQRQzix3HnO0lEwh4Q2g==,type:str]
-sops:
-    age:
-        - recipient: age1c8pawdsxptfslgrz2c56s39mrtnjzc5mm3hfzgr2wdwu2v6vfsdsupjsq6
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvelBDQ2FYR3dvRHl6dUc4
-            UmwyZXhKL3JyS09JSUxZUFEzdmlTQk4xZFJRCm9vQmlzUzlZelZCWlVTVzJEN3N1
-            MXV1RGZSTHN2KzBRVDdvQURGTE1PZUUKLS0tIEp6UlZsZlFORUVSb0w0ZERsQ1pB
-            Szd1TDFqQ016WWd1SFowN0ptcGlyRGcKRH424S/7enLTuACcJyFUdbIgsUl0U/5i
-            6WRrU0kHesh0gcxU1QMvLKiUZdYwo+pFoDWZiocNUKlEt49isncMrQ==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-03-16T08:42:01Z"
-    mac: ENC[AES256_GCM,data:RbYlNcntZ9k4t469eq5AO4CJQ2zSWetFYz3K14sN4vwAvYgErkvVZSQvzaTPuBpfNCFxTnfSH/d73EZvqTskfBElef6TgPK6EiDV5hMfz5sdnZmc97+le+Uvzs0c6Y38faKfs4ZrqtbMRIH1YuWpnLKfJmfCPIFayeEoockgbTs=,iv:P32AWbPLsV68Ee4G+AiBkDdKHm3vZngtJGz0D+lz58Y=,tag:AQYyAoxY+CpT6GawCQw+xw==,type:str]
-    unencrypted_suffix: _unencrypted
-    version: 3.11.0

hosts/server/configuration.nix

@@ -6,7 +6,6 @@
     ../../nixos/systemd-boot.nix
     ../../nixos/users.nix
     ../../nixos/utils.nix
-    ../../nixos/docker.nix
     ../../nixos/amd-graphics.nix
 
     # NixOS server modules
@@ -16,17 +15,18 @@
     ../../server-modules/glance
     ../../server-modules/adguardhome.nix
     ../../server-modules/arr.nix
-    # ../../server-modules/eleakxir.nix
     ../../server-modules/blog.nix
     ../../server-modules/awesome-wallpapers.nix
+    ../../server-modules/iknowyou.nix
     ../../server-modules/stirling-pdf.nix
     ../../server-modules/cyberchef.nix
     ../../server-modules/mazanoke.nix
-    ../../server-modules/nginx.nix
+    ../../server-modules/kernel-hardening.nix
     ../../server-modules/fail2ban.nix
     ../../server-modules/default-creds.nix
     ../../server-modules/umami.nix
     ../../server-modules/gitea.nix
+    ../../server-modules/mealie.nix
 
     # You should let those lines as is
     ./hardware-configuration.nix

hosts/server/flake.nix

@@ -0,0 +1,17 @@
+{
+  inputs,
+  nixpkgs,
+  ...
+}:
+nixpkgs.lib.nixosSystem {
+  modules = [
+    {_module.args = {inherit inputs;};}
+    inputs.home-manager.nixosModules.home-manager
+    inputs.stylix.nixosModules.stylix
+    inputs.sops-nix.nixosModules.sops
+    inputs.nixarr.nixosModules.default
+    inputs.nix-index-database.nixosModules.default
+    inputs.default-creds.nixosModules.default
+    ./configuration.nix
+  ];
+}

hosts/server/hardware-configuration.nix

@@ -9,7 +9,14 @@
   ...
 }: {
   imports = [(modulesPath + "/installer/scan/not-detected.nix")];
-  boot.initrd.availableKernelModules = ["xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod"];
+  boot.initrd.availableKernelModules = [
+    "xhci_pci"
+    "ahci"
+    "nvme"
+    "usbhid"
+    "usb_storage"
+    "sd_mod"
+  ];
   boot.initrd.kernelModules = ["dm-snapshot"];
   boot.kernelModules = ["kvm-amd"];
   boot.extraModulePackages = [];
@@ -20,12 +27,18 @@
   fileSystems."/boot" = {
     device = "/dev/disk/by-uuid/DD15-1125";
     fsType = "vfat";
-    options = ["fmask=0077" "dmask=0077"];
+    options = [
+      "fmask=0077"
+      "dmask=0077"
+    ];
   };
   fileSystems."/mnt/data" = {
     device = "/dev/disk/by-uuid/0b055155-0134-448c-b1ca-e81030ff064e";
     fsType = "btrfs";
-    options = ["subvol=/" "compress=zstd"]; # adapte selon si t'as des subvolumes
+    options = [
+      "subvol=/"
+      "compress=zstd"
+    ]; # adapte selon si t'as des subvolumes
   };
   swapDevices = [];
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
@@ -35,6 +48,5 @@
   networking.useDHCP = lib.mkDefault true;
   # networking.interfaces.enp3s0.useDHCP = lib.mkDefault true;
   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
-  hardware.cpu.amd.updateMicrocode =
+  hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
-    lib.mkDefault config.hardware.enableRedistributableFirmware;
 }

hosts/server/home.nix

@@ -1,8 +1,4 @@
-{
+{config, ...}: {
-  pkgs,
-  config,
-  ...
-}: {
   imports = [
     # Mostly user-specific configuration
     ./variables.nix
@@ -10,38 +6,27 @@
     # Programs
     ../../home/programs/nvf
     ../../home/programs/shell
-    ../../home/programs/fetch
     ../../home/programs/git
     ../../home/programs/git/lazygit.nix
     ../../home/programs/nixy
     ../../home/programs/nix-utils
+    ../../home/programs/yazi
+
+    ../../home/programs/group/dev.nix
   ];
 
   home = {
     inherit (config.var) username;
     homeDirectory = "/home/" + config.var.username;
 
-    packages = with pkgs; [
-      # Dev
-      go
-      nodejs
-      python3
-      jq
-      just
-      pnpm
-      wireguard-tools
-      duckdb
-
-      # Utils
-      zip
-      unzip
-      btop
-      fastfetch
-    ];
-
     # Don't touch this
     stateVersion = "24.05";
   };
 
   programs.home-manager.enable = true;
+
+  programs.nixy = {
+    enable = true;
+    configDirectory = config.var.configDirectory;
+  };
 }

hosts/server/secrets/default.nix

@@ -26,5 +26,8 @@
     };
   };
 
-  environment.systemPackages = with pkgs; [sops age];
+  environment.systemPackages = with pkgs; [
+    sops
+    age
+  ];
 }

hosts/server/secrets/secrets.yaml

@@ -1,7 +1,7 @@
 umami-secret: ENC[AES256_GCM,data:tImpd4sD92Omf/YFB8YE4gxAu+g801wQNR+k5rhY6AbzIIYOzpVmQL4XGjfp9Teky3olii4s3XTcmTyuMoxMWg==,iv:QFAEzYnAnxOOtrHWiM2IkvSs0Aqk3s1T5X7j5WC+tO8=,tag:FIbgHLfRVMJ2qZ6dOJ8zLw==,type:str]
 sshconfig: ENC[AES256_GCM,data:R54HVxqAyj9yGO/AYL8p6cnXgYxkQKW9XveHlBMTnDXBJ7r/4HgnefdymprnXmdlbNWcWrRqmaLEuzJs/0BfixXfMvmGTUrmJ0ASVuDrz9k6rOLADAKFikQh0dib7NU4JmPgmUzMncXc2WuCd3BCG3kwBQ==,iv:Ro9FA+MzTAp+ERQMT88z8ioCox/dTj2vWcqCDOSLag4=,tag:5XiXIyz5/pjGFOB5ZjdOVg==,type:str]
 github-key: ENC[AES256_GCM,data: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,iv:wl+RG24mXYMklD8CBGXVD36DMhlWT/7zh8ZMvr7vgOk=,tag:OJhqF8PoXotr7IsyFW6q1g==,type:str]
-adguard-pwd: ENC[AES256_GCM,data:dOFEyLRG3yG9h74J,iv:S/TpCjqakvK5NgSzDukDyI58Y6SLl7NkuutUOY/SrY8=,tag:I9Rv3XYBG8T492ozHoCOWQ==,type:str]
+adguard-pwd: ENC[AES256_GCM,data:CAmZFpKN6FFRlCk=,iv:cz45T/z2ZYHNC46FNVp2YHmdhXD4ERhM31+Jo+9PkSk=,tag:GTUvzkYSP4flXs/HUNGYhw==,type:str]
 recyclarr: ENC[AES256_GCM,data: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,iv:HT3a2YnFy0cF9qUO671kwqxuzFfNnfqynCUVGHf+3dM=,tag:nrA++7fsnc4Cx0OPSDKaRw==,type:str]
 wireguard-pia: ENC[AES256_GCM,data:2IvJARGhesMuH9RdWzsyrwA7eqrhLyacQqZ1RNEkGOPUkQGX4uimKBSzkxXRy/haZ4V2k73JdLSaB9rAuI0n65GmWHmarwZekOyhRZSNb+zvFgw5BPZmywG1wR2HiTGR/qILovAaz47q/VnohUnjbbMCUvarC4PytWGxMUH96GIgZar8HjHFtK8grCSxlvpHKiDeKx8VSXnY/Pxj1EplBtIqwmtAeZdf/VjtwOL0nY54doPwHdIAvJ0B8Cu0a1zJIGEbV1NlKIHEJ1YA7rmv1ODkBnbXbIHMxAR3jeqR/UDqhDmXe41KujhiJI7nNeO7FKo2v92jK3fSbxYKatLrzXktHpE9JsMYVBXzTK7yAXPgoDdgLXzWH0OrJGBSisPrvqmxUko7MPreuwVYfFlKpll6JLifk8sML4A+94UPR8b89guXn7kBkLg1Y1oIAyguCdKpNOD31nXBMFF0nTcmCwyshDySaGTfJDgox65/77AiN1wH,iv:cdu6lBjLnEEfSFmWMC4Vn2sLKsvpCaatzXlgRNkEMeA=,tag:y1rAeNPB+DNGTpnP94iQrA==,type:str]
 signing-key: ENC[AES256_GCM,data:FrJzuTgH/ooZkcnYL55uQcc4u+QzNnFvNVs2wDSE4nnwku+EuCJBlb8pd/6W0KPwIXzcki/8CY0YfRcRrzjExMgMa4hwxrlxS9bk3LNPzJsrRK5RJgPg3iA8L791f1zcDxNf8RuWatIqm1TCK+Vhdk/p+221zy1Gcq1dW8X+o4XzbPBzHdLagcIdB0wpjYTtIoGP2X8GoL/NJpuzIiQBK1HdGNKvUI2+ztqCQZOsxm+Fki57NteX3/Llw8AwABjdZvviOBZ62OvJ/SsOQ9NYAvKfAkog5zCn8DLvaqAPGSxRBQEYWM8GyL2imgs54YfEsOpGa4DzMiv4Sc5m398E/asaPq357eksUqh3EYpzoKZ5bIbd5+Vs3KBWKHltUCzXLHaLrIX0CuJFQFi7DCxEbYqlb04x5t3jc/c+/7uwqBHv1Y5gwAjd8JswDWmE7Q3xSk96Za57SCxWPYTo2ErsA2XdL+yxXdhmqkhDZKtUzrcHExhnYe7YLpSlBEclJ/G2BeTOFIWoAmN+1y4rh21R,iv:VaZrv5/41ZyIax702Yae4QmFKpcEaWwPmTo2Mxao3bU=,tag:HC0eqDNit7jQKeeDAKWXKg==,type:str]
@@ -18,7 +18,7 @@ sops:
             TEc5d01RaVFGNXc3dlljM0FTTHpENjQKOqwI+pl8UxVIVl43glnOYvW660/PsDGY
             yefODJGVtHrOm3yeXC2xlTi3sFW+c5wUl2yPqddbvcBt5Ud/yd4iXQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-03-25T19:14:13Z"
+    lastmodified: "2026-04-12T18:24:10Z"
-    mac: ENC[AES256_GCM,data:x1OqP6JxTExZm+J75hbLsbZ3X2/WO/ncAF0U+vvI7da+ft+yjT7zf7+nGlaTL3Aus1QBrDBI0WElyemILsRlLZ6dN5tZNBPivsec1HCoJ9wb5hKtM3poZiQWYZDyFUqbFvBiXShJZI8gC7wPKxkycPe8IFLzpJhf2B/WPCBKjUc=,iv:oUZb8hZkEX3APUMllJEZ6c1wdVUJaOuZT4M7ZjW1bZY=,tag:sF/gB8qizWJRliR8PWAoMA==,type:str]
+    mac: ENC[AES256_GCM,data:D7gWC1fxZkpG8dCr7aWhcyLT92NK1OefS4SIAq5ZImMYRJzzvhXtyJM9tzUYVWPU0ojhgOJyawlWEFk1P/DWjOrafBsBHdxUl5FtZrRb4Z/rquODhR8OT8UYFVKyAmjSfomUEDzYetJdXdAxhX3eNlT+eKI51IjqD9y1dYqcjMw=,iv:ZPIkMf/fUETeUYQdqu4TpS/ZE752079jIW9BlehhWlw=,tag:Z3i/Zc0zkEF5rsNnkmUB9A==,type:str]
     unencrypted_suffix: _unencrypted
-    version: 3.12.1
+    version: 3.12.2

hosts/server/variables.nix

@@ -5,20 +5,16 @@
 }: {
   imports = [
     # Choose your theme here:
-    ../../themes/rose-pine.nix
+    ../../themes/nixy.nix
   ];
 
   config.var = {
     hostname = "jack";
     username = "hadi";
-    configDirectory =
+    configDirectory = "/home/" + config.var.username + "/.config/nixos"; # The path of the nixos configuration directory
-      "/home/"
-      + config.var.username
-      + "/.config/nixos"; # The path of the nixos configuration directory
 
     keyboardLayout = "fr";
 
-    location = "Paris";
     timeZone = "Europe/Paris";
     defaultLocale = "en_US.UTF-8";
     extraLocale = "fr_FR.UTF-8";
@@ -33,6 +29,7 @@
 
     domain = "hadi.icu";
     tunnelId = "a1dfa315-7fc3-4a65-8c02-8387932c35c3";
+    networkInterface = "enp3s0";
   };
 
   # Let this here

hosts/work/configuration.nix

@@ -0,0 +1,40 @@
+{config, ...}: {
+  imports = [
+    # Mostly system related configuration
+    ../../nixos/audio.nix
+    ../../nixos/fonts.nix
+    ../../nixos/home-manager.nix
+    ../../nixos/nix.nix
+    ../../nixos/systemd-boot.nix
+    ../../nixos/tuigreet.nix
+    ../../nixos/usbguard.nix
+    ../../nixos/users.nix
+    ../../nixos/utils.nix
+    ../../nixos/hyprland.nix
+    ../../home/programs/helium/system.nix # I hate browser's configuration..
+
+    # You should let those lines as is
+    ./hardware-configuration.nix
+    ./variables.nix
+  ];
+
+  home-manager.users."${config.var.username}" = import ./home.nix;
+
+  # USBGuard:
+  # Allow all USB devices until a proper policy is configured.
+  # Run `sudo usbguard generate-policy` with your devices plugged in,
+  # then set rules = "<output>" and switch implicitPolicyTarget to "block".
+  # services.usbguard.implicitPolicyTarget = lib.mkForce "allow";
+  services.usbguard.rules = ''
+    allow id 1d6b:0002 serial "0000:00:14.0" name "xHCI Host Controller" hash "jEP/6WzviqdJ5VSeTUY8PatCNBKeaREvo2OqdplND/o=" parent-hash "rV9bfLq7c2eA4tYjVjwO4bxhm+y6GgZpl9J60L0fBkY=" with-interface 09:00:00 with-connect-type ""
+    allow id 1d6b:0003 serial "0000:00:14.0" name "xHCI Host Controller" hash "prM+Jby/bFHCn2lNjQdAMbgc6tse3xVx+hZwjOPHSdQ=" parent-hash "rV9bfLq7c2eA4tYjVjwO4bxhm+y6GgZpl9J60L0fBkY=" with-interface 09:00:00 with-connect-type ""
+    allow id 17ef:608d serial "" name "Lenovo USB Optical Mouse" hash "klpDZuv1jhWGNqZLOl+KXF+75Ir3PfBm6D6ncjoLRBU=" parent-hash "jEP/6WzviqdJ5VSeTUY8PatCNBKeaREvo2OqdplND/o=" via-port "1-7" with-interface 03:01:02 with-connect-type "hotplug"
+    allow id 17ef:6190 serial "" name "Lenovo Calliope USB Keyboard G2" hash "CfZ9R/aoXGm7BN/ojVEzKQwVoxCUtRWMuACrE7BL/5Y=" parent-hash "jEP/6WzviqdJ5VSeTUY8PatCNBKeaREvo2OqdplND/o=" via-port "1-10" with-interface { 03:01:01 03:00:00 } with-connect-type "hotplug"
+    allow id 0781:5581 name " SanDisk 3.2Gen1"
+  '';
+
+  networking.firewall.allowedTCPPorts = [9001];
+
+  # Don't touch this
+  system.stateVersion = "24.05";
+}

hosts/work/flake.nix

@@ -0,0 +1,20 @@
+{
+  inputs,
+  nixpkgs,
+  ...
+}:
+nixpkgs.lib.nixosSystem {
+  modules = [
+    {
+      nixpkgs.overlays = [
+        inputs.nur.overlays.default
+      ];
+      _module.args = {inherit inputs;};
+    }
+    inputs.home-manager.nixosModules.home-manager
+    inputs.stylix.nixosModules.stylix
+    inputs.nix-index-database.nixosModules.default
+    inputs.helium-browser.nixosModules.default
+    ./configuration.nix
+  ];
+}

hosts/work/hardware-configuration.nix

@@ -0,0 +1,45 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{
+  config,
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}: {
+  imports = [
+    (modulesPath + "/installer/scan/not-detected.nix")
+  ];
+
+  boot.initrd.availableKernelModules = [
+    "xhci_pci"
+    "ahci"
+    "nvme"
+    "usb_storage"
+    "usbhid"
+    "sd_mod"
+  ];
+  boot.initrd.kernelModules = [];
+  boot.kernelModules = ["kvm-intel"];
+  boot.extraModulePackages = [];
+
+  fileSystems."/" = {
+    device = "/dev/disk/by-uuid/5dbf85d3-d236-4af8-b489-d6066bfe1eb7";
+    fsType = "ext4";
+  };
+
+  fileSystems."/boot" = {
+    device = "/dev/disk/by-uuid/043E-1755";
+    fsType = "vfat";
+    options = [
+      "fmask=0077"
+      "dmask=0077"
+    ];
+  };
+
+  swapDevices = [];
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}