run nixfmt

5 files changed, 458 insertions, 268 deletions

diff --git a/hosts/demiurge/default.nix b/hosts/demiurge/default.nix
index 32696c3..50839ae 100644
--- a/hosts/demiurge/default.nix
+++ b/hosts/demiurge/default.nix
@@ -1,28 +1,36 @@
-{ config, home-manager, lib, pkgs, inputs, llama-cpp, ... }:
+{
+  config,
+  home-manager,
+  lib,
+  pkgs,
+  inputs,
+  llama-cpp,
+  ...
+}:
 
 {
-  imports =
-    [
-      ./hardware.nix
-      home-manager.nixosModules.default
-    ];
+  imports = [
+    ./hardware.nix
+    home-manager.nixosModules.default
+  ];
 
   # nixpkgs stuff
   nixpkgs = {
     config = {
       # selectively allow unfree packages
-      allowUnfreePredicate = pkg:
+      allowUnfreePredicate =
+        pkg:
         builtins.elem (lib.getName pkg) [
-/*
-          "cuda_cccl"
-          "cuda_cudart"
-          "cuda_nvcc"
-          "cudnn"
-          "libcublas"
-          "libcufile"
-          "quartus-prime-lite"
-          "quartus-prime-lite-unwrapped"
-*/
+          /*
+                    "cuda_cccl"
+                    "cuda_cudart"
+                    "cuda_nvcc"
+                    "cudnn"
+                    "libcublas"
+                    "libcufile"
+                    "quartus-prime-lite"
+                    "quartus-prime-lite-unwrapped"
+          */
           "steam"
           "steam-unwrapped"
         ];
@@ -40,11 +48,13 @@
       (self: super: {
         invidious = super.invidious.overrideAttrs (old: {
           # try removing shorts by ignoring any videos shorter than 65 seconds
-          postPatch = old.postPatch + ''
-            sed -i '/GROUP BY channel/a\      AND length_seconds > 65' src/invidious/database/channels.cr
-            sed -i 's/\({view_name}\) \(ORDER BY published\)/\1 WHERE length_seconds > 65 \2/' src/invidious/users.cr
-            sed -i 's/\({values})\) \(ORDER BY published\)/\1 AND length_seconds > 65 \2/' src/invidious/users.cr
-          '';
+          postPatch =
+            old.postPatch
+            + ''
+              sed -i '/GROUP BY channel/a\      AND length_seconds > 65' src/invidious/database/channels.cr
+              sed -i 's/\({view_name}\) \(ORDER BY published\)/\1 WHERE length_seconds > 65 \2/' src/invidious/users.cr
+              sed -i 's/\({values})\) \(ORDER BY published\)/\1 AND length_seconds > 65 \2/' src/invidious/users.cr
+            '';
         });
       })
       (self: super: {
@@ -61,11 +71,21 @@
       })
       (self: super: {
         alvr = super.alvr.overrideAttrs (old: {
-          buildInputs = old.buildInputs ++ [ super.android-tools super.usbutils ];
+          buildInputs = old.buildInputs ++ [
+            super.android-tools
+            super.usbutils
+          ];
           nativeBuildInputs = old.nativeBuildInputs ++ [ super.makeWrapper ];
-          postInstall = (old.postInstall or "") + ''
-            wrapProgram $out/bin/alvr_dashboard --prefix PATH : "${super.lib.makeBinPath [ super.android-tools super.usbutils ]}"
-          '';
+          postInstall =
+            (old.postInstall or "")
+            + ''
+              wrapProgram $out/bin/alvr_dashboard --prefix PATH : "${
+                super.lib.makeBinPath [
+                  super.android-tools
+                  super.usbutils
+                ]
+              }"
+            '';
         });
       })
     ];
@@ -94,7 +114,10 @@
       efi.canTouchEfiVariables = true;
     };
 
-    zfs.extraPools = [ "data_wd" "nvme_warm" ];
+    zfs.extraPools = [
+      "data_wd"
+      "nvme_warm"
+    ];
   };
 
   # disable wifi and open some ports
@@ -105,7 +128,11 @@
     wireless.enable = false;
 
     firewall = {
-      allowedTCPPorts = [ 22 80 443 ];
+      allowedTCPPorts = [
+        22
+        80
+        443
+      ];
       allowedUDPPorts = [ 51413 ];
     };
 
@@ -127,11 +154,16 @@
         ip route del 100.100.100.100/32 dev tailscale0
       '';
 
-      peers = [{
-        allowedIPs = [ "0.0.0.0/0" "::0/0" ];
-        endpoint = "45.134.142.206:51820";
-        publicKey = "H5t7PsMDnUAHrR8D2Jt3Mh6N6w43WmCzrOHShlEU+zw=";
-      }];
+      peers = [
+        {
+          allowedIPs = [
+            "0.0.0.0/0"
+            "::0/0"
+          ];
+          endpoint = "45.134.142.206:51820";
+          publicKey = "H5t7PsMDnUAHrR8D2Jt3Mh6N6w43WmCzrOHShlEU+zw=";
+        }
+      ];
     };
   };
 
@@ -145,7 +177,10 @@
   };
 
   # enable flakes and nix cli
-  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+  nix.settings.experimental-features = [
+    "nix-command"
+    "flakes"
+  ];
 
   # Define a user account.
   users.users = {
@@ -229,36 +264,38 @@
     # I prefer doas over sudo for simplicity
     doas = {
       enable = true;
-      extraRules = [{
-        users = ["vin"];
-        keepEnv = true;
-        persist = true;
-      }];
+      extraRules = [
+        {
+          users = [ "vin" ];
+          keepEnv = true;
+          persist = true;
+        }
+      ];
     };
 
     pki.certificates = [
       ''
------BEGIN CERTIFICATE-----
-MIIDMDCCAhigAwIBAgIUcSUafnojcFKod3f436VELfEKoFkwDQYJKoZIhvcNAQEL
-BQAwHTEbMBkGA1UEAwwSZGVtaXVyZ2UuZXBpc3RlbWlhMB4XDTI1MDMwMzEwMjQw
-OVoXDTI2MDMwMzEwMjQwOVowHTEbMBkGA1UEAwwSZGVtaXVyZ2UuZXBpc3RlbWlh
-MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiRlreCXc7f+yWclxR2M
-639g0+Lr/c9HrX7EM2/olavPAtZgCzqqvJsDmXq4AURlwd82wZUZxXjWFwlRji/+
-WViXQBTWwnXVjc9MJlxTq2X2zfU2GIxYsrA1ZQuj0wVHlA+R/66oL0Padc/qQZfv
-sshQnrqnutvGobBWEGJXcCIDiwUGgHlIoelwY9G0GLE/rkVujNjAonyMhVGJHVUv
-lXyc3RNslQHymr4Wl6+lL6V6XfuB1taECJYSLXPx66TvJqod2Io+b7T7cWp+9g9U
-B2jQu1YnPRpwjdPvbOCPjPbOP6UcbyHdbHAidSM0FSL5riVUmugwDwbQKXFFX2gH
-hwIDAQABo2gwZjAfBgNVHREEGDAWghQqLmRlbWl1cmdlLmVwaXN0ZW1pYTATBgNV
-HSUEDDAKBggrBgEFBQcDATAPBgNVHRMECDAGAQH/AgEAMB0GA1UdDgQWBBTjMVhw
-zmkE6P5jFHkLVQE2gNB2ejANBgkqhkiG9w0BAQsFAAOCAQEAWvnwB83vXzQFpObF
-vn/nfZ9wYpNaBsE15ab3Fwd2nDc55KDkDWgBi5Xl8fwN3OhFOU2XXBCYqbCU6asx
-OnSx9glbhJioORO7B5ENbEYrpB97SaWASNXrBQ2KiQT5aC+9xb52K53kkk0tTn2l
-nBb+jyLItzWX99H6EavOq69a4T2BObZaSPQAfpM8FIrKl+UZC3152+bi8wKfG4K4
-FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
-/ek8Rmf6DTLaFBx+raWyDTgMY23lvWTKDTT1+dZnRNcg72bFpIdqHsDrIg/IBjZ0
-3eGfkQ==
------END CERTIFICATE-----
-''
+        -----BEGIN CERTIFICATE-----
+        MIIDMDCCAhigAwIBAgIUcSUafnojcFKod3f436VELfEKoFkwDQYJKoZIhvcNAQEL
+        BQAwHTEbMBkGA1UEAwwSZGVtaXVyZ2UuZXBpc3RlbWlhMB4XDTI1MDMwMzEwMjQw
+        OVoXDTI2MDMwMzEwMjQwOVowHTEbMBkGA1UEAwwSZGVtaXVyZ2UuZXBpc3RlbWlh
+        MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiRlreCXc7f+yWclxR2M
+        639g0+Lr/c9HrX7EM2/olavPAtZgCzqqvJsDmXq4AURlwd82wZUZxXjWFwlRji/+
+        WViXQBTWwnXVjc9MJlxTq2X2zfU2GIxYsrA1ZQuj0wVHlA+R/66oL0Padc/qQZfv
+        sshQnrqnutvGobBWEGJXcCIDiwUGgHlIoelwY9G0GLE/rkVujNjAonyMhVGJHVUv
+        lXyc3RNslQHymr4Wl6+lL6V6XfuB1taECJYSLXPx66TvJqod2Io+b7T7cWp+9g9U
+        B2jQu1YnPRpwjdPvbOCPjPbOP6UcbyHdbHAidSM0FSL5riVUmugwDwbQKXFFX2gH
+        hwIDAQABo2gwZjAfBgNVHREEGDAWghQqLmRlbWl1cmdlLmVwaXN0ZW1pYTATBgNV
+        HSUEDDAKBggrBgEFBQcDATAPBgNVHRMECDAGAQH/AgEAMB0GA1UdDgQWBBTjMVhw
+        zmkE6P5jFHkLVQE2gNB2ejANBgkqhkiG9w0BAQsFAAOCAQEAWvnwB83vXzQFpObF
+        vn/nfZ9wYpNaBsE15ab3Fwd2nDc55KDkDWgBi5Xl8fwN3OhFOU2XXBCYqbCU6asx
+        OnSx9glbhJioORO7B5ENbEYrpB97SaWASNXrBQ2KiQT5aC+9xb52K53kkk0tTn2l
+        nBb+jyLItzWX99H6EavOq69a4T2BObZaSPQAfpM8FIrKl+UZC3152+bi8wKfG4K4
+        FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
+        /ek8Rmf6DTLaFBx+raWyDTgMY23lvWTKDTT1+dZnRNcg72bFpIdqHsDrIg/IBjZ0
+        3eGfkQ==
+        -----END CERTIFICATE-----
+      ''
     ];
 
     sudo.enable = false;
@@ -343,7 +380,11 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
         default_user_preferences = {
           captions = [ "English" ];
           dark_mode = "dark";
-          feed_menu = [ "Popular" "Subscriptions" "Playlists" ];
+          feed_menu = [
+            "Popular"
+            "Subscriptions"
+            "Playlists"
+          ];
           max_results = 100;
           quality = "dash";
           save_player_pos = true;
@@ -420,9 +461,9 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
         };
 
         "sdui.demiurge.epistemia" = {
-#          addSSL = true;
-#          sslCertificate = "/var/demiurge.epistemia.crt";
-#          sslCertificateKey = "/var/demiurge.epistemia.key";
+          #          addSSL = true;
+          #          sslCertificate = "/var/demiurge.epistemia.crt";
+          #          sslCertificateKey = "/var/demiurge.epistemia.key";
           locations."/" = {
             proxyPass = "http://127.0.0.1:7860";
             proxyWebsockets = true;
@@ -623,7 +664,10 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
             name = "free software directory";
             engine = "mediawiki";
             shortcut = "fsd";
-            categories = ["it" "software wikis"];
+            categories = [
+              "it"
+              "software wikis"
+            ];
             base_url = "https://directory.fsf.org/";
             search_type = "title";
             timeout = 5.0;
@@ -637,7 +681,10 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
             name = "gentoo";
             engine = "mediawiki";
             shortcut = "ge";
-            categories = ["it" "software wikis"];
+            categories = [
+              "it"
+              "software wikis"
+            ];
             base_url = "https://wiki.gentoo.org/";
             api_path = "api.php";
             search_type = "text";
@@ -744,7 +791,10 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
             engine = "stackexchange";
             shortcut = "st";
             api_site = "stackoverflow";
-            categories = ["it" "q&a"];
+            categories = [
+              "it"
+              "q&a"
+            ];
           }
 
           {
@@ -752,7 +802,10 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
             engine = "stackexchange";
             shortcut = "ubuntu";
             api_site = "askubuntu";
-            categories = ["it" "q&a"];
+            categories = [
+              "it"
+              "q&a"
+            ];
           }
 
           {
@@ -760,15 +813,21 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
             engine = "stackexchange";
             shortcut = "su";
             api_site = "superuser";
-            categories = ["it" "q&a"];
+            categories = [
+              "it"
+              "q&a"
+            ];
           }
 
-          { 
+          {
             name = "nixos.discourse";
             engine = "discourse";
             shortcut = "dnos";
             base_url = "https://discourse.nixos.org";
-            categories = ["it" "q&a"];
+            categories = [
+              "it"
+              "q&a"
+            ];
           }
 
           {
@@ -786,7 +845,10 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
             url_query = "URL";
             title_query = "Title";
             content_query = "Snippet";
-            categories = ["general" "web"];
+            categories = [
+              "general"
+              "web"
+            ];
             shortcut = "wib";
             about.website = "https://wiby.me/";
           }
@@ -796,7 +858,10 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
             engine = "mediawiki";
             weight = 0.5;
             shortcut = "wb";
-            categories = ["general" "wikimedia"];
+            categories = [
+              "general"
+              "wikimedia"
+            ];
             base_url = "https://{language}.wikibooks.org/";
             search_type = "text";
             about = {
@@ -809,7 +874,10 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
             name = "wiktionary";
             engine = "mediawiki";
             shortcut = "wt";
-            categories = ["dictionaries" "wikimedia"];
+            categories = [
+              "dictionaries"
+              "wikimedia"
+            ];
             base_url = "https://{language}.wiktionary.org/";
             search_type = "text";
             about = {
@@ -823,7 +891,10 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
             engine = "mediawiki";
             weight = 0.5;
             shortcut = "wv";
-            categories = ["general" "wikimedia"];
+            categories = [
+              "general"
+              "wikimedia"
+            ];
             base_url = "https://{language}.wikiversity.org/";
             search_type = "text";
             about = {
@@ -849,7 +920,10 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
             shortcut = "br";
             time_range_support = true;
             paging = true;
-            categories = ["general" "web"];
+            categories = [
+              "general"
+              "web"
+            ];
             brave_category = "search";
           }
 
@@ -858,7 +932,10 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
             engine = "brave";
             network = "brave";
             shortcut = "brimg";
-            categories = ["images" "web"];
+            categories = [
+              "images"
+              "web"
+            ];
             brave_category = "images";
           }
 
@@ -873,7 +950,10 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
             title_xpath = "./h4/a[2]";
             content_xpath = "./p";
             first_page_num = 1;
-            categories = ["it" "repos"];
+            categories = [
+              "it"
+              "repos"
+            ];
             about = {
               website = "https://sr.ht";
               wikidata_id = "Q78514485";
@@ -914,12 +994,12 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
     udev = {
       enable = true;
       extraRules = ''
-      # ST-Link v2.1
-      SUBSYSTEMS=="usb", ATTRS{idVendor}=="0483", ATTRS{idProduct}=="374b", MODE:="0666"
+        # ST-Link v2.1
+        SUBSYSTEMS=="usb", ATTRS{idVendor}=="0483", ATTRS{idProduct}=="374b", MODE:="0666"
 
-      # Oculus Quest 2
-      SUBSYSTEM=="usb", ATTR{idVendor}=="2833", ATTR{idProduct}=="0186", MODE="0660",
-      GROUP="input", SYMLINK+="ocuquest%n"
+        # Oculus Quest 2
+        SUBSYSTEM=="usb", ATTR{idVendor}=="2833", ATTR{idProduct}=="0186", MODE="0660",
+        GROUP="input", SYMLINK+="ocuquest%n"
       '';
     };
 
@@ -928,9 +1008,9 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
     xserver = {
       enable = true;
       autorun = false;
-            displayManager.startx.enable = true;
+      displayManager.startx.enable = true;
       modules = [ pkgs.xf86_input_wacom ];
-            videoDrivers = [ "amdgpu" ];
+      videoDrivers = [ "amdgpu" ];
       wacom.enable = true;
     };
   };
@@ -940,26 +1020,26 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
     services = {
       invidious_token = {
         script = ''
-set -euo pipefail
-
-a="$(${pkgs.podman}/bin/podman run quay.io/invidious/youtube-trusted-session-generator | sed -n 4,5p)"
-visitor_data=$(echo "$a" | sed -n 1p | cut -d' ' -f2)
-po_token=$(echo "$a" | sed -n 2p | cut -d' ' -f2)
-day=$(date +%e | tr -d ' ')
-
-printf '{"visitor_data": "%s",\n"po_token": "%s",\n' \
-       "$visitor_data" "$po_token" \
-       >/run/invidious_settings
-
-if [ $((day % 2)) -eq 0 ]; then
-    printf '"force_resolve": "ipv6"}\n' >>/run/invidious_settings
-else
-    printf '"force_resolve": "ipv4"}\n' >>/run/invidious_settings
-fi
-
-${pkgs.systemd}/bin/systemctl restart invidious-sig-helper
-${pkgs.systemd}/bin/systemctl restart invidious
-      '';
+          set -euo pipefail
+
+          a="$(${pkgs.podman}/bin/podman run quay.io/invidious/youtube-trusted-session-generator | sed -n 4,5p)"
+          visitor_data=$(echo "$a" | sed -n 1p | cut -d' ' -f2)
+          po_token=$(echo "$a" | sed -n 2p | cut -d' ' -f2)
+          day=$(date +%e | tr -d ' ')
+
+          printf '{"visitor_data": "%s",\n"po_token": "%s",\n' \
+                 "$visitor_data" "$po_token" \
+                 >/run/invidious_settings
+
+          if [ $((day % 2)) -eq 0 ]; then
+              printf '"force_resolve": "ipv6"}\n' >>/run/invidious_settings
+          else
+              printf '"force_resolve": "ipv4"}\n' >>/run/invidious_settings
+          fi
+
+          ${pkgs.systemd}/bin/systemctl restart invidious-sig-helper
+          ${pkgs.systemd}/bin/systemctl restart invidious
+        '';
         serviceConfig = {
           Type = "oneshot";
           User = "root";
diff --git a/hosts/demiurge/hardware.nix b/hosts/demiurge/hardware.nix
index b075bb4..21d7ab3 100644
--- a/hosts/demiurge/hardware.nix
+++ b/hosts/demiurge/hardware.nix
@@ -1,53 +1,70 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{ config, lib, pkgs, modulesPath, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}:
 
 {
-  imports =
-    [ (modulesPath + "/installer/scan/not-detected.nix")
-    ];
+  imports = [
+    (modulesPath + "/installer/scan/not-detected.nix")
+  ];
 
-  boot.initrd.availableKernelModules = [ "mpt3sas" "nvme" "xhci_pci" "ahci" "usbhid" "usb_storage" "sd_mod" ];
+  boot.initrd.availableKernelModules = [
+    "mpt3sas"
+    "nvme"
+    "xhci_pci"
+    "ahci"
+    "usbhid"
+    "usb_storage"
+    "sd_mod"
+  ];
   boot.initrd.kernelModules = [ "amdgpu" ];
   boot.kernelModules = [ "kvm-amd" ];
   boot.extraModulePackages = [ ];
 
-  fileSystems."/" =
-    { device = "zroot/root";
-      fsType = "zfs";
-      options = [ "zfsutil" ];
-    };
-
-  fileSystems."/nix" =
-    { device = "zroot/nix";
-      fsType = "zfs";
-      options = [ "zfsutil" ];
-    };
-
-  fileSystems."/var" =
-    { device = "zroot/var";
-      fsType = "zfs";
-      options = [ "zfsutil" ];
-    };
-
-  fileSystems."/home" =
-    { device = "zroot/home";
-      fsType = "zfs";
-      options = [ "zfsutil" ];
-    };
-
-  fileSystems."/data" =
-    { device = "nvme_warm";
-      fsType = "zfs";
-      options = [ "zfsutil" ];
-    };
-
-  fileSystems."/boot" =
-    { device = "/dev/disk/by-uuid/1C01-EE5C";
-      fsType = "vfat";
-      options = [ "fmask=0022" "dmask=0022" ];
-    };
+  fileSystems."/" = {
+    device = "zroot/root";
+    fsType = "zfs";
+    options = [ "zfsutil" ];
+  };
+
+  fileSystems."/nix" = {
+    device = "zroot/nix";
+    fsType = "zfs";
+    options = [ "zfsutil" ];
+  };
+
+  fileSystems."/var" = {
+    device = "zroot/var";
+    fsType = "zfs";
+    options = [ "zfsutil" ];
+  };
+
+  fileSystems."/home" = {
+    device = "zroot/home";
+    fsType = "zfs";
+    options = [ "zfsutil" ];
+  };
+
+  fileSystems."/data" = {
+    device = "nvme_warm";
+    fsType = "zfs";
+    options = [ "zfsutil" ];
+  };
+
+  fileSystems."/boot" = {
+    device = "/dev/disk/by-uuid/1C01-EE5C";
+    fsType = "vfat";
+    options = [
+      "fmask=0022"
+      "dmask=0022"
+    ];
+  };
 
   swapDevices = [ ];
 
diff --git a/hosts/hastur/default.nix b/hosts/hastur/default.nix
index 54e1a06..29260c3 100644
--- a/hosts/hastur/default.nix
+++ b/hosts/hastur/default.nix
@@ -2,14 +2,20 @@
 # your system. Help is available in the configuration.nix(5) man page, on
 # https://search.nixos.org/options and in the NixOS manual (`nixos-help`).
 
-{ config, home-manager, lib, pkgs, inputs, ... }:
+{
+  config,
+  home-manager,
+  lib,
+  pkgs,
+  inputs,
+  ...
+}:
 
 {
-  imports =
-    [
-      ./hardware.nix
-      home-manager.nixosModules.default
-    ];
+  imports = [
+    ./hardware.nix
+    home-manager.nixosModules.default
+  ];
 
   # decrypt agenix secrets
   age.secrets = {
@@ -26,10 +32,12 @@
     zfsSupport = true;
     efiSupport = true;
     efiInstallAsRemovable = true;
-    mirroredBoots = [{
-      devices = [ "nodev" ];
-      path = "/boot";
-    }];
+    mirroredBoots = [
+      {
+        devices = [ "nodev" ];
+        path = "/boot";
+      }
+    ];
   };
 
   # disable wifi and open some ports
@@ -50,10 +58,10 @@
             phase2="auth=MSCHAPv2"
             identity="***REDACTED_EMAIL***"
             password="***REDACTED_PASSWORD***"
-            '';
+          '';
         };
 
-        FloridaPoly_BYOD = {};
+        FloridaPoly_BYOD = { };
 
         iphonebob.pskRaw = "***REDACTED_PSK***";
         Retreat_86WiFi.pskRaw = "***REDACTED_PSK***";
@@ -85,11 +93,16 @@
         ip route del 100.100.100.100/32 dev tailscale0
       '';
 
-      peers = [{
-        allowedIPs = [ "0.0.0.0/0" "::0/0" ];
-        endpoint = "45.134.142.219:51820";
-        publicKey = "FVEKAMJqaJU2AwWn5Mg9TK9IAfJc4XDUmSzEeC/VXGs=";
-      }];
+      peers = [
+        {
+          allowedIPs = [
+            "0.0.0.0/0"
+            "::0/0"
+          ];
+          endpoint = "45.134.142.219:51820";
+          publicKey = "FVEKAMJqaJU2AwWn5Mg9TK9IAfJc4XDUmSzEeC/VXGs=";
+        }
+      ];
     };
   };
 
@@ -103,7 +116,10 @@
   };
 
   # enable flakes and nix cli
-  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+  nix.settings.experimental-features = [
+    "nix-command"
+    "flakes"
+  ];
 
   # Define a user account.
   users.users.vin = {
@@ -128,7 +144,8 @@
   };
 
   # selectively allow unfree packages
-  nixpkgs.config.allowUnfreePredicate = pkg:
+  nixpkgs.config.allowUnfreePredicate =
+    pkg:
     builtins.elem (lib.getName pkg) [
       "quartus-prime-lite"
       "quartus-prime-lite-unwrapped"
@@ -176,27 +193,29 @@
     # I prefer doas over sudo for simplicity
     doas = {
       enable = true;
-      extraRules = [{
-        users = ["vin"];
-        keepEnv = true;
-        persist = true;
-      }];
+      extraRules = [
+        {
+          users = [ "vin" ];
+          keepEnv = true;
+          persist = true;
+        }
+      ];
     };
 
     pki.certificates = [
       ''
------BEGIN CERTIFICATE-----
-MIIBoDCCAUagAwIBAgIRANI8aOT3LE+pzmsQWjcDOIgwCgYIKoZIzj0EAwIwLjER
-MA8GA1UEChMIZGVtaXVyZ2UxGTAXBgNVBAMTEGRlbWl1cmdlIFJvb3QgQ0EwHhcN
-MjUwMjE4MDUzNTA5WhcNMzUwMjE2MDUzNTA5WjAuMREwDwYDVQQKEwhkZW1pdXJn
-ZTEZMBcGA1UEAxMQZGVtaXVyZ2UgUm9vdCBDQTBZMBMGByqGSM49AgEGCCqGSM49
-AwEHA0IABMv8weeXJSDLygVlBxxAHLCvQCdf2COCk0QffNeDaVlIU/NFo3IyPSqG
-E3YtWEWamU/icgsJS999z3BZ5O+cTP6jRTBDMA4GA1UdDwEB/wQEAwIBBjASBgNV
-HRMBAf8ECDAGAQH/AgEBMB0GA1UdDgQWBBRM51S3OgTxXwNhdSSHw6llz0APFzAK
-BggqhkjOPQQDAgNIADBFAiA9alHJ1XHLlKNRUGRL4tdFC3RZYHtoN8BmBHEfDa1S
-LQIhANgsvYmyCp/Nur2RKaV25CDg3kMYVBXED2HVDy8qa+3i
------END CERTIFICATE-----
-''
+        -----BEGIN CERTIFICATE-----
+        MIIBoDCCAUagAwIBAgIRANI8aOT3LE+pzmsQWjcDOIgwCgYIKoZIzj0EAwIwLjER
+        MA8GA1UEChMIZGVtaXVyZ2UxGTAXBgNVBAMTEGRlbWl1cmdlIFJvb3QgQ0EwHhcN
+        MjUwMjE4MDUzNTA5WhcNMzUwMjE2MDUzNTA5WjAuMREwDwYDVQQKEwhkZW1pdXJn
+        ZTEZMBcGA1UEAxMQZGVtaXVyZ2UgUm9vdCBDQTBZMBMGByqGSM49AgEGCCqGSM49
+        AwEHA0IABMv8weeXJSDLygVlBxxAHLCvQCdf2COCk0QffNeDaVlIU/NFo3IyPSqG
+        E3YtWEWamU/icgsJS999z3BZ5O+cTP6jRTBDMA4GA1UdDwEB/wQEAwIBBjASBgNV
+        HRMBAf8ECDAGAQH/AgEBMB0GA1UdDgQWBBRM51S3OgTxXwNhdSSHw6llz0APFzAK
+        BggqhkjOPQQDAgNIADBFAiA9alHJ1XHLlKNRUGRL4tdFC3RZYHtoN8BmBHEfDa1S
+        LQIhANgsvYmyCp/Nur2RKaV25CDg3kMYVBXED2HVDy8qa+3i
+        -----END CERTIFICATE-----
+      ''
     ];
 
     sudo.enable = false;
@@ -273,8 +292,8 @@ LQIhANgsvYmyCp/Nur2RKaV25CDg3kMYVBXED2HVDy8qa+3i
     udev = {
       enable = true;
       extraRules = ''
-      # ST-Link v2.1
-      SUBSYSTEMS=="usb", ATTRS{idVendor}=="0483", ATTRS{idProduct}=="374b", MODE:="0666"
+        # ST-Link v2.1
+        SUBSYSTEMS=="usb", ATTRS{idVendor}=="0483", ATTRS{idProduct}=="374b", MODE:="0666"
       '';
     };
 
@@ -283,8 +302,8 @@ LQIhANgsvYmyCp/Nur2RKaV25CDg3kMYVBXED2HVDy8qa+3i
     xserver = {
       enable = true;
       autorun = false;
-            displayManager.startx.enable = true;
-            videoDrivers = [ "modesetting" ];
+      displayManager.startx.enable = true;
+      videoDrivers = [ "modesetting" ];
     };
   };
 
diff --git a/hosts/hastur/hardware.nix b/hosts/hastur/hardware.nix
index 6a73716..91691b4 100644
--- a/hosts/hastur/hardware.nix
+++ b/hosts/hastur/hardware.nix
@@ -1,47 +1,63 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{ config, lib, pkgs, modulesPath, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}:
 
 {
-  imports =
-    [ (modulesPath + "/installer/scan/not-detected.nix")
-    ];
+  imports = [
+    (modulesPath + "/installer/scan/not-detected.nix")
+  ];
 
-  boot.initrd.availableKernelModules = [ "xhci_pci" "thunderbolt" "nvme" "usb_storage" "sd_mod" "rtsx_pci_sdmmc" ];
+  boot.initrd.availableKernelModules = [
+    "xhci_pci"
+    "thunderbolt"
+    "nvme"
+    "usb_storage"
+    "sd_mod"
+    "rtsx_pci_sdmmc"
+  ];
   boot.initrd.kernelModules = [ ];
   boot.kernelModules = [ "kvm-intel" ];
   boot.extraModulePackages = [ ];
 
-  fileSystems."/" =
-    { device = "zroot/root";
-      fsType = "zfs";
-    };
-
-  fileSystems."/nix" =
-    { device = "zroot/nix";
-      fsType = "zfs";
-    };
-
-  fileSystems."/var" =
-    { device = "zroot/var";
-      fsType = "zfs";
-    };
-
-  fileSystems."/home" =
-    { device = "zroot/home";
-      fsType = "zfs";
-    };
-
-  fileSystems."/boot" =
-    { device = "/dev/disk/by-uuid/BCF1-95FF";
-      fsType = "vfat";
-      options = [ "fmask=0022" "dmask=0022" ];
-    };
-
-  swapDevices =
-    [ { device = "/dev/disk/by-uuid/7e66a653-5438-486f-99c6-0a1a51ef7d96"; }
+  fileSystems."/" = {
+    device = "zroot/root";
+    fsType = "zfs";
+  };
+
+  fileSystems."/nix" = {
+    device = "zroot/nix";
+    fsType = "zfs";
+  };
+
+  fileSystems."/var" = {
+    device = "zroot/var";
+    fsType = "zfs";
+  };
+
+  fileSystems."/home" = {
+    device = "zroot/home";
+    fsType = "zfs";
+  };
+
+  fileSystems."/boot" = {
+    device = "/dev/disk/by-uuid/BCF1-95FF";
+    fsType = "vfat";
+    options = [
+      "fmask=0022"
+      "dmask=0022"
     ];
+  };
+
+  swapDevices = [
+    { device = "/dev/disk/by-uuid/7e66a653-5438-486f-99c6-0a1a51ef7d96"; }
+  ];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's
diff --git a/hosts/saklas/default.nix b/hosts/saklas/default.nix
index 0ea3474..bd738ca 100644
--- a/hosts/saklas/default.nix
+++ b/hosts/saklas/default.nix
@@ -1,4 +1,10 @@
-{ config, lib, pkgs, inputs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  inputs,
+  ...
+}:
 
 {
   imports = [
@@ -38,8 +44,17 @@
     wireless.enable = false;
 
     firewall = {
-      allowedTCPPorts = [ 22 80 443 5222 5269 ];
-      allowedUDPPorts = [ 3478 51820 ];
+      allowedTCPPorts = [
+        22
+        80
+        443
+        5222
+        5269
+      ];
+      allowedUDPPorts = [
+        3478
+        51820
+      ];
     };
   };
 
@@ -52,10 +67,16 @@
         "95.217.18.52/32"
         "2a01:4f9:c010:a653::1/64"
       ];
-      dns = [ "185.12.64.1" "185.12.64.2" ];
+      dns = [
+        "185.12.64.1"
+        "185.12.64.2"
+      ];
       routes = [
         { Destination = "172.31.1.1"; }
-        { Gateway = "172.31.1.1"; GatewayOnLink = true; }
+        {
+          Gateway = "172.31.1.1";
+          GatewayOnLink = true;
+        }
       ];
     };
   };
@@ -70,7 +91,10 @@
   };
 
   # enable flakes and nix cli
-  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+  nix.settings.experimental-features = [
+    "nix-command"
+    "flakes"
+  ];
 
   # user accounts
   users.users.root.openssh.authorizedKeys.keys = [
@@ -133,7 +157,11 @@
 
         "xmpp.vineetk.net" = {
           group = config.services.prosody.group;
-          extraDomainNames = [ "vineetk.net" "muc.vineetk.net" "u.vineetk.net" ];
+          extraDomainNames = [
+            "vineetk.net"
+            "muc.vineetk.net"
+            "u.vineetk.net"
+          ];
           reloadServices = [ "prosody" ];
         };
       };
@@ -142,11 +170,13 @@
     # I prefer doas over sudo for simplicity
     doas = {
       enable = true;
-      extraRules = [{
-        users = [ "vin" ];
-        keepEnv = true;
-        persist = true;
-      }];
+      extraRules = [
+        {
+          users = [ "vin" ];
+          keepEnv = true;
+          persist = true;
+        }
+      ];
     };
 
     sudo.enable = false;
@@ -169,12 +199,36 @@
         dns = {
           base_domain = "epistemia";
           extra_records = [
-            { name = "invidious.demiurge.epistemia"; type = "A"; value = "100.64.0.2"; }
-            { name = "llm.demiurge.epistemia"; type = "A"; value = "100.64.0.2"; }
-            { name = "navidrome.demiurge.epistemia"; type = "A"; value = "100.64.0.2"; }
-            { name = "redlib.demiurge.epistemia"; type = "A"; value = "100.64.0.2"; }
-            { name = "sdui.demiurge.epistemia"; type = "A"; value = "100.64.0.2"; }
-            { name = "searx.demiurge.epistemia"; type = "A"; value = "100.64.0.2"; }
+            {
+              name = "invidious.demiurge.epistemia";
+              type = "A";
+              value = "100.64.0.2";
+            }
+            {
+              name = "llm.demiurge.epistemia";
+              type = "A";
+              value = "100.64.0.2";
+            }
+            {
+              name = "navidrome.demiurge.epistemia";
+              type = "A";
+              value = "100.64.0.2";
+            }
+            {
+              name = "redlib.demiurge.epistemia";
+              type = "A";
+              value = "100.64.0.2";
+            }
+            {
+              name = "sdui.demiurge.epistemia";
+              type = "A";
+              value = "100.64.0.2";
+            }
+            {
+              name = "searx.demiurge.epistemia";
+              type = "A";
+              value = "100.64.0.2";
+            }
           ];
         };
         logtail.enabled = false;
@@ -199,7 +253,7 @@
       ssl.cert = config.security.acme.certs."xmpp.vineetk.net".directory + "/full.pem";
       ssl.key = config.security.acme.certs."xmpp.vineetk.net".directory + "/key.pem";
 
-      muc = [{ domain = "muc.vineetk.net"; }];
+      muc = [ { domain = "muc.vineetk.net"; } ];
       virtualHosts.vineetk = {
         domain = "vineetk.net";
         enabled = true;
@@ -233,7 +287,7 @@
           locations."/" = {
             proxyPass = "http://127.0.0.1:5232/";
             extraConfig = ''
-                proxy_pass_header Authorization;
+              proxy_pass_header Authorization;
             '';
           };
         };
@@ -321,52 +375,56 @@
   mailserver = {
     enable = true;
     fqdn = "mail.vineetk.net";
-    domains = [ "vineetk.net" "vinbiz.ca" "13f0.net" ];
+    domains = [
+      "vineetk.net"
+      "vinbiz.ca"
+      "13f0.net"
+    ];
 
     # A list of all login accounts. To create the password hashes, use
     # nix-shell -p mkpasswd --run 'mkpasswd -sm bcrypt'
     loginAccounts = {
       "vineet@vineetk.net" = {
         hashedPasswordFile = config.age.secrets.email_vineetk.path;
-        aliases = ["@vineetk.net"];
+        aliases = [ "@vineetk.net" ];
       };
 
       "kar@13f0.net" = {
         hashedPasswordFile = config.age.secrets.email_13f0.path;
-        aliases = ["@13f0.net"];
+        aliases = [ "@13f0.net" ];
         sieveScript = ''
-require [ "fileinto", "mailbox" ];
-
-if address :matches [ "to", "cc" ] "announce@openbsd.org" {
-        fileinto :create "openbsd_announce";
-        stop;
-}
-if address :matches [ "to", "cc" ] "arm@openbsd.org" {
-        fileinto :create "openbsd_arm";
-        stop;
-}
-if address :matches [ "to", "cc" ] "misc@openbsd.org" {
-        fileinto :create "openbsd_misc";
-        stop;
-}
-if address :matches [ "to", "cc" ] "misc@opensmtpd.org" {
-        fileinto :create "opensmtpd_misc";
-        stop;
-}
-if address :matches [ "to", "cc" ] "oss-security@lists.openwall.com" {
-        fileinto :create "oss_security";
-        stop;
-}
-if address :matches [ "to", "cc" ] "tuhs@tuhs.org" {
-        fileinto :create "tuhs";
-        stop;
-}
+          require [ "fileinto", "mailbox" ];
+
+          if address :matches [ "to", "cc" ] "announce@openbsd.org" {
+                fileinto :create "openbsd_announce";
+                stop;
+          }
+          if address :matches [ "to", "cc" ] "arm@openbsd.org" {
+                fileinto :create "openbsd_arm";
+                stop;
+          }
+          if address :matches [ "to", "cc" ] "misc@openbsd.org" {
+                fileinto :create "openbsd_misc";
+                stop;
+          }
+          if address :matches [ "to", "cc" ] "misc@opensmtpd.org" {
+                fileinto :create "opensmtpd_misc";
+                stop;
+          }
+          if address :matches [ "to", "cc" ] "oss-security@lists.openwall.com" {
+                fileinto :create "oss_security";
+                stop;
+          }
+          if address :matches [ "to", "cc" ] "tuhs@tuhs.org" {
+                fileinto :create "tuhs";
+                stop;
+          }
         '';
       };
 
       "vineet@vinbiz.ca" = {
         hashedPasswordFile = config.age.secrets.email_vinbiz.path;
-        aliases = ["postmaster@vinbiz.ca"];
+        aliases = [ "postmaster@vinbiz.ca" ];
       };
       "suresh@vinbiz.ca".hashedPasswordFile = config.age.secrets.email_vinbiz.path;
       "revathy@vinbiz.ca".hashedPasswordFile = config.age.secrets.email_vinbiz.path;