1 files changed, 185 insertions, 105 deletions

diff --git a/hosts/demiurge/default.nix b/hosts/demiurge/default.nix
index 32696c3..50839ae 100644
--- a/hosts/demiurge/default.nix
+++ b/hosts/demiurge/default.nix
@@ -1,28 +1,36 @@
-{ config, home-manager, lib, pkgs, inputs, llama-cpp, ... }:
+{
+  config,
+  home-manager,
+  lib,
+  pkgs,
+  inputs,
+  llama-cpp,
+  ...
+}:
 
 {
-  imports =
-    [
-      ./hardware.nix
-      home-manager.nixosModules.default
-    ];
+  imports = [
+    ./hardware.nix
+    home-manager.nixosModules.default
+  ];
 
   # nixpkgs stuff
   nixpkgs = {
     config = {
       # selectively allow unfree packages
-      allowUnfreePredicate = pkg:
+      allowUnfreePredicate =
+        pkg:
         builtins.elem (lib.getName pkg) [
-/*
-          "cuda_cccl"
-          "cuda_cudart"
-          "cuda_nvcc"
-          "cudnn"
-          "libcublas"
-          "libcufile"
-          "quartus-prime-lite"
-          "quartus-prime-lite-unwrapped"
-*/
+          /*
+                    "cuda_cccl"
+                    "cuda_cudart"
+                    "cuda_nvcc"
+                    "cudnn"
+                    "libcublas"
+                    "libcufile"
+                    "quartus-prime-lite"
+                    "quartus-prime-lite-unwrapped"
+          */
           "steam"
           "steam-unwrapped"
         ];
@@ -40,11 +48,13 @@
       (self: super: {
         invidious = super.invidious.overrideAttrs (old: {
           # try removing shorts by ignoring any videos shorter than 65 seconds
-          postPatch = old.postPatch + ''
-            sed -i '/GROUP BY channel/a\      AND length_seconds > 65' src/invidious/database/channels.cr
-            sed -i 's/\({view_name}\) \(ORDER BY published\)/\1 WHERE length_seconds > 65 \2/' src/invidious/users.cr
-            sed -i 's/\({values})\) \(ORDER BY published\)/\1 AND length_seconds > 65 \2/' src/invidious/users.cr
-          '';
+          postPatch =
+            old.postPatch
+            + ''
+              sed -i '/GROUP BY channel/a\      AND length_seconds > 65' src/invidious/database/channels.cr
+              sed -i 's/\({view_name}\) \(ORDER BY published\)/\1 WHERE length_seconds > 65 \2/' src/invidious/users.cr
+              sed -i 's/\({values})\) \(ORDER BY published\)/\1 AND length_seconds > 65 \2/' src/invidious/users.cr
+            '';
         });
       })
       (self: super: {
@@ -61,11 +71,21 @@
       })
       (self: super: {
         alvr = super.alvr.overrideAttrs (old: {
-          buildInputs = old.buildInputs ++ [ super.android-tools super.usbutils ];
+          buildInputs = old.buildInputs ++ [
+            super.android-tools
+            super.usbutils
+          ];
           nativeBuildInputs = old.nativeBuildInputs ++ [ super.makeWrapper ];
-          postInstall = (old.postInstall or "") + ''
-            wrapProgram $out/bin/alvr_dashboard --prefix PATH : "${super.lib.makeBinPath [ super.android-tools super.usbutils ]}"
-          '';
+          postInstall =
+            (old.postInstall or "")
+            + ''
+              wrapProgram $out/bin/alvr_dashboard --prefix PATH : "${
+                super.lib.makeBinPath [
+                  super.android-tools
+                  super.usbutils
+                ]
+              }"
+            '';
         });
       })
     ];
@@ -94,7 +114,10 @@
       efi.canTouchEfiVariables = true;
     };
 
-    zfs.extraPools = [ "data_wd" "nvme_warm" ];
+    zfs.extraPools = [
+      "data_wd"
+      "nvme_warm"
+    ];
   };
 
   # disable wifi and open some ports
@@ -105,7 +128,11 @@
     wireless.enable = false;
 
     firewall = {
-      allowedTCPPorts = [ 22 80 443 ];
+      allowedTCPPorts = [
+        22
+        80
+        443
+      ];
       allowedUDPPorts = [ 51413 ];
     };
 
@@ -127,11 +154,16 @@
         ip route del 100.100.100.100/32 dev tailscale0
       '';
 
-      peers = [{
-        allowedIPs = [ "0.0.0.0/0" "::0/0" ];
-        endpoint = "45.134.142.206:51820";
-        publicKey = "H5t7PsMDnUAHrR8D2Jt3Mh6N6w43WmCzrOHShlEU+zw=";
-      }];
+      peers = [
+        {
+          allowedIPs = [
+            "0.0.0.0/0"
+            "::0/0"
+          ];
+          endpoint = "45.134.142.206:51820";
+          publicKey = "H5t7PsMDnUAHrR8D2Jt3Mh6N6w43WmCzrOHShlEU+zw=";
+        }
+      ];
     };
   };
 
@@ -145,7 +177,10 @@
   };
 
   # enable flakes and nix cli
-  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+  nix.settings.experimental-features = [
+    "nix-command"
+    "flakes"
+  ];
 
   # Define a user account.
   users.users = {
@@ -229,36 +264,38 @@
     # I prefer doas over sudo for simplicity
     doas = {
       enable = true;
-      extraRules = [{
-        users = ["vin"];
-        keepEnv = true;
-        persist = true;
-      }];
+      extraRules = [
+        {
+          users = [ "vin" ];
+          keepEnv = true;
+          persist = true;
+        }
+      ];
     };
 
     pki.certificates = [
       ''
------BEGIN CERTIFICATE-----
-MIIDMDCCAhigAwIBAgIUcSUafnojcFKod3f436VELfEKoFkwDQYJKoZIhvcNAQEL
-BQAwHTEbMBkGA1UEAwwSZGVtaXVyZ2UuZXBpc3RlbWlhMB4XDTI1MDMwMzEwMjQw
-OVoXDTI2MDMwMzEwMjQwOVowHTEbMBkGA1UEAwwSZGVtaXVyZ2UuZXBpc3RlbWlh
-MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiRlreCXc7f+yWclxR2M
-639g0+Lr/c9HrX7EM2/olavPAtZgCzqqvJsDmXq4AURlwd82wZUZxXjWFwlRji/+
-WViXQBTWwnXVjc9MJlxTq2X2zfU2GIxYsrA1ZQuj0wVHlA+R/66oL0Padc/qQZfv
-sshQnrqnutvGobBWEGJXcCIDiwUGgHlIoelwY9G0GLE/rkVujNjAonyMhVGJHVUv
-lXyc3RNslQHymr4Wl6+lL6V6XfuB1taECJYSLXPx66TvJqod2Io+b7T7cWp+9g9U
-B2jQu1YnPRpwjdPvbOCPjPbOP6UcbyHdbHAidSM0FSL5riVUmugwDwbQKXFFX2gH
-hwIDAQABo2gwZjAfBgNVHREEGDAWghQqLmRlbWl1cmdlLmVwaXN0ZW1pYTATBgNV
-HSUEDDAKBggrBgEFBQcDATAPBgNVHRMECDAGAQH/AgEAMB0GA1UdDgQWBBTjMVhw
-zmkE6P5jFHkLVQE2gNB2ejANBgkqhkiG9w0BAQsFAAOCAQEAWvnwB83vXzQFpObF
-vn/nfZ9wYpNaBsE15ab3Fwd2nDc55KDkDWgBi5Xl8fwN3OhFOU2XXBCYqbCU6asx
-OnSx9glbhJioORO7B5ENbEYrpB97SaWASNXrBQ2KiQT5aC+9xb52K53kkk0tTn2l
-nBb+jyLItzWX99H6EavOq69a4T2BObZaSPQAfpM8FIrKl+UZC3152+bi8wKfG4K4
-FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
-/ek8Rmf6DTLaFBx+raWyDTgMY23lvWTKDTT1+dZnRNcg72bFpIdqHsDrIg/IBjZ0
-3eGfkQ==
------END CERTIFICATE-----
-''
+        -----BEGIN CERTIFICATE-----
+        MIIDMDCCAhigAwIBAgIUcSUafnojcFKod3f436VELfEKoFkwDQYJKoZIhvcNAQEL
+        BQAwHTEbMBkGA1UEAwwSZGVtaXVyZ2UuZXBpc3RlbWlhMB4XDTI1MDMwMzEwMjQw
+        OVoXDTI2MDMwMzEwMjQwOVowHTEbMBkGA1UEAwwSZGVtaXVyZ2UuZXBpc3RlbWlh
+        MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiRlreCXc7f+yWclxR2M
+        639g0+Lr/c9HrX7EM2/olavPAtZgCzqqvJsDmXq4AURlwd82wZUZxXjWFwlRji/+
+        WViXQBTWwnXVjc9MJlxTq2X2zfU2GIxYsrA1ZQuj0wVHlA+R/66oL0Padc/qQZfv
+        sshQnrqnutvGobBWEGJXcCIDiwUGgHlIoelwY9G0GLE/rkVujNjAonyMhVGJHVUv
+        lXyc3RNslQHymr4Wl6+lL6V6XfuB1taECJYSLXPx66TvJqod2Io+b7T7cWp+9g9U
+        B2jQu1YnPRpwjdPvbOCPjPbOP6UcbyHdbHAidSM0FSL5riVUmugwDwbQKXFFX2gH
+        hwIDAQABo2gwZjAfBgNVHREEGDAWghQqLmRlbWl1cmdlLmVwaXN0ZW1pYTATBgNV
+        HSUEDDAKBggrBgEFBQcDATAPBgNVHRMECDAGAQH/AgEAMB0GA1UdDgQWBBTjMVhw
+        zmkE6P5jFHkLVQE2gNB2ejANBgkqhkiG9w0BAQsFAAOCAQEAWvnwB83vXzQFpObF
+        vn/nfZ9wYpNaBsE15ab3Fwd2nDc55KDkDWgBi5Xl8fwN3OhFOU2XXBCYqbCU6asx
+        OnSx9glbhJioORO7B5ENbEYrpB97SaWASNXrBQ2KiQT5aC+9xb52K53kkk0tTn2l
+        nBb+jyLItzWX99H6EavOq69a4T2BObZaSPQAfpM8FIrKl+UZC3152+bi8wKfG4K4
+        FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
+        /ek8Rmf6DTLaFBx+raWyDTgMY23lvWTKDTT1+dZnRNcg72bFpIdqHsDrIg/IBjZ0
+        3eGfkQ==
+        -----END CERTIFICATE-----
+      ''
     ];
 
     sudo.enable = false;
@@ -343,7 +380,11 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
         default_user_preferences = {
           captions = [ "English" ];
           dark_mode = "dark";
-          feed_menu = [ "Popular" "Subscriptions" "Playlists" ];
+          feed_menu = [
+            "Popular"
+            "Subscriptions"
+            "Playlists"
+          ];
           max_results = 100;
           quality = "dash";
           save_player_pos = true;
@@ -420,9 +461,9 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
         };
 
         "sdui.demiurge.epistemia" = {
-#          addSSL = true;
-#          sslCertificate = "/var/demiurge.epistemia.crt";
-#          sslCertificateKey = "/var/demiurge.epistemia.key";
+          #          addSSL = true;
+          #          sslCertificate = "/var/demiurge.epistemia.crt";
+          #          sslCertificateKey = "/var/demiurge.epistemia.key";
           locations."/" = {
             proxyPass = "http://127.0.0.1:7860";
             proxyWebsockets = true;
@@ -623,7 +664,10 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
             name = "free software directory";
             engine = "mediawiki";
             shortcut = "fsd";
-            categories = ["it" "software wikis"];
+            categories = [
+              "it"
+              "software wikis"
+            ];
             base_url = "https://directory.fsf.org/";
             search_type = "title";
             timeout = 5.0;
@@ -637,7 +681,10 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
             name = "gentoo";
             engine = "mediawiki";
             shortcut = "ge";
-            categories = ["it" "software wikis"];
+            categories = [
+              "it"
+              "software wikis"
+            ];
             base_url = "https://wiki.gentoo.org/";
             api_path = "api.php";
             search_type = "text";
@@ -744,7 +791,10 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
             engine = "stackexchange";
             shortcut = "st";
             api_site = "stackoverflow";
-            categories = ["it" "q&a"];
+            categories = [
+              "it"
+              "q&a"
+            ];
           }
 
           {
@@ -752,7 +802,10 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
             engine = "stackexchange";
             shortcut = "ubuntu";
             api_site = "askubuntu";
-            categories = ["it" "q&a"];
+            categories = [
+              "it"
+              "q&a"
+            ];
           }
 
           {
@@ -760,15 +813,21 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
             engine = "stackexchange";
             shortcut = "su";
             api_site = "superuser";
-            categories = ["it" "q&a"];
+            categories = [
+              "it"
+              "q&a"
+            ];
           }
 
-          { 
+          {
             name = "nixos.discourse";
             engine = "discourse";
             shortcut = "dnos";
             base_url = "https://discourse.nixos.org";
-            categories = ["it" "q&a"];
+            categories = [
+              "it"
+              "q&a"
+            ];
           }
 
           {
@@ -786,7 +845,10 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
             url_query = "URL";
             title_query = "Title";
             content_query = "Snippet";
-            categories = ["general" "web"];
+            categories = [
+              "general"
+              "web"
+            ];
             shortcut = "wib";
             about.website = "https://wiby.me/";
           }
@@ -796,7 +858,10 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
             engine = "mediawiki";
             weight = 0.5;
             shortcut = "wb";
-            categories = ["general" "wikimedia"];
+            categories = [
+              "general"
+              "wikimedia"
+            ];
             base_url = "https://{language}.wikibooks.org/";
             search_type = "text";
             about = {
@@ -809,7 +874,10 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
             name = "wiktionary";
             engine = "mediawiki";
             shortcut = "wt";
-            categories = ["dictionaries" "wikimedia"];
+            categories = [
+              "dictionaries"
+              "wikimedia"
+            ];
             base_url = "https://{language}.wiktionary.org/";
             search_type = "text";
             about = {
@@ -823,7 +891,10 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
             engine = "mediawiki";
             weight = 0.5;
             shortcut = "wv";
-            categories = ["general" "wikimedia"];
+            categories = [
+              "general"
+              "wikimedia"
+            ];
             base_url = "https://{language}.wikiversity.org/";
             search_type = "text";
             about = {
@@ -849,7 +920,10 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
             shortcut = "br";
             time_range_support = true;
             paging = true;
-            categories = ["general" "web"];
+            categories = [
+              "general"
+              "web"
+            ];
             brave_category = "search";
           }
 
@@ -858,7 +932,10 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
             engine = "brave";
             network = "brave";
             shortcut = "brimg";
-            categories = ["images" "web"];
+            categories = [
+              "images"
+              "web"
+            ];
             brave_category = "images";
           }
 
@@ -873,7 +950,10 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
             title_xpath = "./h4/a[2]";
             content_xpath = "./p";
             first_page_num = 1;
-            categories = ["it" "repos"];
+            categories = [
+              "it"
+              "repos"
+            ];
             about = {
               website = "https://sr.ht";
               wikidata_id = "Q78514485";
@@ -914,12 +994,12 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
     udev = {
       enable = true;
       extraRules = ''
-      # ST-Link v2.1
-      SUBSYSTEMS=="usb", ATTRS{idVendor}=="0483", ATTRS{idProduct}=="374b", MODE:="0666"
+        # ST-Link v2.1
+        SUBSYSTEMS=="usb", ATTRS{idVendor}=="0483", ATTRS{idProduct}=="374b", MODE:="0666"
 
-      # Oculus Quest 2
-      SUBSYSTEM=="usb", ATTR{idVendor}=="2833", ATTR{idProduct}=="0186", MODE="0660",
-      GROUP="input", SYMLINK+="ocuquest%n"
+        # Oculus Quest 2
+        SUBSYSTEM=="usb", ATTR{idVendor}=="2833", ATTR{idProduct}=="0186", MODE="0660",
+        GROUP="input", SYMLINK+="ocuquest%n"
       '';
     };
 
@@ -928,9 +1008,9 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
     xserver = {
       enable = true;
       autorun = false;
-            displayManager.startx.enable = true;
+      displayManager.startx.enable = true;
       modules = [ pkgs.xf86_input_wacom ];
-            videoDrivers = [ "amdgpu" ];
+      videoDrivers = [ "amdgpu" ];
       wacom.enable = true;
     };
   };
@@ -940,26 +1020,26 @@ FQsOJMjIvhTm2IiOS8xIaZz7EJORxFjtOkLEIGGZBNK6QcnD714/nYbHSrQx4eNM
     services = {
       invidious_token = {
         script = ''
-set -euo pipefail
-
-a="$(${pkgs.podman}/bin/podman run quay.io/invidious/youtube-trusted-session-generator | sed -n 4,5p)"
-visitor_data=$(echo "$a" | sed -n 1p | cut -d' ' -f2)
-po_token=$(echo "$a" | sed -n 2p | cut -d' ' -f2)
-day=$(date +%e | tr -d ' ')
-
-printf '{"visitor_data": "%s",\n"po_token": "%s",\n' \
-       "$visitor_data" "$po_token" \
-       >/run/invidious_settings
-
-if [ $((day % 2)) -eq 0 ]; then
-    printf '"force_resolve": "ipv6"}\n' >>/run/invidious_settings
-else
-    printf '"force_resolve": "ipv4"}\n' >>/run/invidious_settings
-fi
-
-${pkgs.systemd}/bin/systemctl restart invidious-sig-helper
-${pkgs.systemd}/bin/systemctl restart invidious
-      '';
+          set -euo pipefail
+
+          a="$(${pkgs.podman}/bin/podman run quay.io/invidious/youtube-trusted-session-generator | sed -n 4,5p)"
+          visitor_data=$(echo "$a" | sed -n 1p | cut -d' ' -f2)
+          po_token=$(echo "$a" | sed -n 2p | cut -d' ' -f2)
+          day=$(date +%e | tr -d ' ')
+
+          printf '{"visitor_data": "%s",\n"po_token": "%s",\n' \
+                 "$visitor_data" "$po_token" \
+                 >/run/invidious_settings
+
+          if [ $((day % 2)) -eq 0 ]; then
+              printf '"force_resolve": "ipv6"}\n' >>/run/invidious_settings
+          else
+              printf '"force_resolve": "ipv4"}\n' >>/run/invidious_settings
+          fi
+
+          ${pkgs.systemd}/bin/systemctl restart invidious-sig-helper
+          ${pkgs.systemd}/bin/systemctl restart invidious
+        '';
         serviceConfig = {
           Type = "oneshot";
           User = "root";