hyprland: migrated from hyprlang to lua

- all hyprlandScripts were migrated to lua functions
- hyprland.nix just handles the host specific and replacing the
  placeholders from hyprland.lua

.github/workflows/sync-main.yml

@@ -49,20 +49,30 @@ jobs:
               exit 1
               ;;
           esac
+      - name: Check for changes
+        run: |
+          git fetch origin main "${{ steps.branch.outputs.source }}"
+          HAS_CHANGES=true
+          if git diff --quiet \
+            "origin/main...origin/${{ steps.branch.outputs.source }}"; then
+            HAS_CHANGES=false
+          fi
 
       - name: Check for existing PR
         id: existing
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          PR_NUMBER=$(gh pr list \
-            --base main \
-            --head "${{ steps.branch.outputs.source }}" \
-            --state open \
-            --json number \
-            --jq '.[0].number // empty')
+          if $HAS_CHANGES; then
+            PR_NUMBER=$(gh pr list \
+              --base main \
+              --head "${{ steps.branch.outputs.source }}" \
+              --state open \
+              --json number \
+              --jq '.[0].number // empty')
 
-          echo "number=$PR_NUMBER" >> "$GITHUB_OUTPUT"
+            echo "number=$PR_NUMBER" >> "$GITHUB_OUTPUT"
+          fi
 
       - name: Create PR
         id: create
@@ -70,28 +80,31 @@ jobs:
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          gh pr create \
-            --base main \
-            --head "${{ steps.branch.outputs.source }}" \
-            --title "Weekly sync: ${{ steps.branch.outputs.source }} → main" \
-            --body "This pull request was created automatically by GitHub Actions."
+          if $HAS_CHANGES; then
+            gh pr create \
+              --base main \
+              --head "${{ steps.branch.outputs.source }}" \
+              --title "Weekly sync: ${{ steps.branch.outputs.source }} → main" \
+              --body "This pull request was created automatically by GitHub Actions."
 
-          PR_NUMBER=$(gh pr list \
-            --base main \
-            --head "${{ steps.branch.outputs.source }}" \
-            --state open \
-            --json number \
-            --jq '.[0].number')
-
-          echo "number=$PR_NUMBER" >> "$GITHUB_OUTPUT"
+            PR_NUMBER=$(gh pr list \
+              --base main \
+              --head "${{ steps.branch.outputs.source }}" \
+              --state open \
+              --json number \
+              --jq '.[0].number')
 
+            echo "number=$PR_NUMBER" >> "$GITHUB_OUTPUT"
+          fi
       - name: Determine PR number
         id: pr
         run: |
-          if [ -n "${{ steps.existing.outputs.number }}" ]; then
-            echo "number=${{ steps.existing.outputs.number }}" >> "$GITHUB_OUTPUT"
-          else
-            echo "number=${{ steps.create.outputs.number }}" >> "$GITHUB_OUTPUT"
+          if $HAS_CHANGES; then
+            if [ -n "${{ steps.existing.outputs.number }}" ]; then
+              echo "number=${{ steps.existing.outputs.number }}" >> "$GITHUB_OUTPUT"
+            else
+              echo "number=${{ steps.create.outputs.number }}" >> "$GITHUB_OUTPUT"
+            fi
           fi
 
       - name: Enable auto-merge
@@ -99,7 +112,9 @@ jobs:
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          gh pr merge \
-            "${{ steps.pr.outputs.number }}" \
-            --auto \
-            --merge
+          if $HAS_CHANGES; then
+            gh pr merge \
+              "${{ steps.pr.outputs.number }}" \
+              --auto \
+              --merge
+          fi

flake.lock

@@ -1,5 +1,30 @@
 {
   "nodes": {
+    "agenix": {
+      "inputs": {
+        "darwin": "darwin",
+        "home-manager": [
+          "home-manager"
+        ],
+        "nixpkgs": [
+          "nixpkgs"
+        ],
+        "systems": "systems"
+      },
+      "locked": {
+        "lastModified": 1770165109,
+        "narHash": "sha256-9VnK6Oqai65puVJ4WYtCTvlJeXxMzAp/69HhQuTdl/I=",
+        "owner": "ryantm",
+        "repo": "agenix",
+        "rev": "b027ee29d959fda4b60b57566d64c98a202e0feb",
+        "type": "github"
+      },
+      "original": {
+        "owner": "ryantm",
+        "repo": "agenix",
+        "type": "github"
+      }
+    },
     "caelestia-cli": {
       "inputs": {
         "caelestia-shell": [
@@ -11,11 +36,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1781239472,
-        "narHash": "sha256-WFL8jZMWNH1tx3UwaJ9aa9NN25uOEJ9mbKPRNQJY/xM=",
+        "lastModified": 1786071436,
+        "narHash": "sha256-/CQJ781dRGWWUMrJ34vIj1PQnNEEWgnEEuod0r5LKGk=",
         "owner": "caelestia-dots",
         "repo": "cli",
-        "rev": "3f3229aed4f36752a02fd870fd6cad94bd76555f",
+        "rev": "751fbc555a83faba5dd589270d14eeb22afab174",
         "type": "github"
       },
       "original": {
@@ -34,11 +59,11 @@
         "quickshell": "quickshell"
       },
       "locked": {
-        "lastModified": 1781408632,
-        "narHash": "sha256-kYVf3Jye4UhyBrtubYcSrmVyFv9uqOY2JvjmElFiZHE=",
+        "lastModified": 1786238888,
+        "narHash": "sha256-pnO0u0UUYwkr72pJR5Giu93LZfU/fhTKJZYa1xeM7Po=",
         "owner": "caelestia-dots",
         "repo": "shell",
-        "rev": "f86c359cd90530bacc800e94e35ffbebecd3f58f",
+        "rev": "817a220e8e87c4df9f3681033a0d8a8054cdaa30",
         "type": "github"
       },
       "original": {
@@ -47,6 +72,28 @@
         "type": "github"
       }
     },
+    "darwin": {
+      "inputs": {
+        "nixpkgs": [
+          "agenix",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1744478979,
+        "narHash": "sha256-dyN+teG9G82G+m+PX/aSAagkC+vUv0SgUw3XkPhQodQ=",
+        "owner": "lnl7",
+        "repo": "nix-darwin",
+        "rev": "43975d782b418ebf4969e9ccba82466728c2851b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "lnl7",
+        "ref": "master",
+        "repo": "nix-darwin",
+        "type": "github"
+      }
+    },
     "disko": {
       "inputs": {
         "nixpkgs": [
@@ -72,12 +119,12 @@
         "nixpkgs-lib": "nixpkgs-lib"
       },
       "locked": {
-        "lastModified": 1778716662,
-        "narHash": "sha256-m1Yf0wZ8j1OHjTc2UwHwyQRSnNeSgLJOd7q5Y45hzi4=",
-        "rev": "f7c1a2d347e4c52d5fb8d10cb4d94b5884e546fb",
-        "revCount": 475,
+        "lastModified": 1785627969,
+        "narHash": "sha256-4dtXQk/NMePegK/nWp5NSeuZKLATItOq61lpEvmXqGw=",
+        "rev": "427bf4bd9435fdf21321c8cc628c24efc14c0f7a",
+        "revCount": 483,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/hercules-ci/flake-parts/0.1.475%2Brev-f7c1a2d347e4c52d5fb8d10cb4d94b5884e546fb/019e2533-0324-7e90-93eb-29b02e1a61cd/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/hercules-ci/flake-parts/0.1.483%2Brev-427bf4bd9435fdf21321c8cc628c24efc14c0f7a/019fc124-5bcc-79d1-a1e4-306df724dc0a/source.tar.gz"
       },
       "original": {
         "type": "tarball",
@@ -86,7 +133,7 @@
     },
     "flake-utils": {
       "inputs": {
-        "systems": "systems"
+        "systems": "systems_2"
       },
       "locked": {
         "lastModified": 1731533236,
@@ -108,11 +155,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1781319724,
-        "narHash": "sha256-ZGuxexEMo4Xv28KJ0dX/m/PHN4oZIOnxHZpNTyrvx4M=",
+        "lastModified": 1785119570,
+        "narHash": "sha256-Rgs2xKnGLFWQscxUaXX07oyZeuMDOHEbqDOsgliLFGM=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "8355f0a16b2dbb06a97959a918af5b239bbe05ae",
+        "rev": "d4fd24667c8cbef124bb70a20380cab75ec8474d",
         "type": "github"
       },
       "original": {
@@ -124,11 +171,11 @@
     },
     "import-tree": {
       "locked": {
-        "lastModified": 1778781969,
-        "narHash": "sha256-Jjuz5CmSkur8KvLDoGa+vylEp+RkQtv4mt/qcMznpH0=",
+        "lastModified": 1784254960,
+        "narHash": "sha256-iI88R3wHz8wTKQb5orvpc51L/Xr64AJyxid/0MKa/b8=",
         "owner": "vic",
         "repo": "import-tree",
-        "rev": "d321337efd0f23a9eb14a42adb7b2c29313ab274",
+        "rev": "4ebb10ae17d5f1ad366e7aef5b92cb8eecf24f69",
         "type": "github"
       },
       "original": {
@@ -164,11 +211,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1781373243,
-        "narHash": "sha256-CpZ5FEU1BtW6K4FywtCCE2wJs6R/Ifps3etRDh8NJ9w=",
+        "lastModified": 1786462419,
+        "narHash": "sha256-A7Q3UIyzDg1O54E0W6HOQIzvsVJq/rMuelJR+ELLRvI=",
         "owner": "tomasriveral",
         "repo": "nix-git-cherry-picker",
-        "rev": "9865dba535620831ae7cab395bf404f8f464df0e",
+        "rev": "aec69257dc9b68d875333ec9f4a7b310d878abd1",
         "type": "github"
       },
       "original": {
@@ -179,11 +226,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1781216227,
-        "narHash": "sha256-9mUW6gNwoN2SWc/l0fW4svPNOulXLl8ijqKyeSOGgJE=",
+        "lastModified": 1786535285,
+        "narHash": "sha256-rG5HKMAgAhMgydvKGtco6rqTxRq4EDZQCx9USLvVqYw=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "a0374025a863d007d98e3297f6aa46cc3141c2f0",
+        "rev": "9f78f44a87948854445dae0b6bf82b2e87e4efb5",
         "type": "github"
       },
       "original": {
@@ -195,11 +242,11 @@
     },
     "nixpkgs-lib": {
       "locked": {
-        "lastModified": 1777168982,
-        "narHash": "sha256-GOkGPcboWE9BmGCRMLX3worL4EMnsnG8MyKmXNeYuhQ=",
+        "lastModified": 1785031560,
+        "narHash": "sha256-OmshNvn2vupOFpYinLUu+1Dnpu4n7Q5N3ggGVNHpkUI=",
         "owner": "nix-community",
         "repo": "nixpkgs.lib",
-        "rev": "f5901329dade4a6ea039af1433fb087bd9c1fe14",
+        "rev": "0e79af5e3d4dcfcd676ab5ba3f95d2e3352e078c",
         "type": "github"
       },
       "original": {
@@ -218,11 +265,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1781273662,
-        "narHash": "sha256-50dd7Cs1mUHq1srw7UojdzCYOB4TfrIXMv7XHHPU9zw=",
+        "lastModified": 1785077063,
+        "narHash": "sha256-rJxX9Mq16TOiIlf+nNR4SaLsWf1yII8xsQpJUNio3Yg=",
         "owner": "tomasriveral",
         "repo": "nixpkgs-notifier",
-        "rev": "12183f26e8b196d9906f82dc05f9672793c61038",
+        "rev": "39a89ffbdc49cc9ab6f67bc4be7ea2f7d3e2b38c",
         "type": "github"
       },
       "original": {
@@ -233,11 +280,11 @@
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1781328464,
-        "narHash": "sha256-j9uBlHI0eJ9zWU9IlF6SlBBPdeJu30hcvar31IRKHpw=",
+        "lastModified": 1786534138,
+        "narHash": "sha256-fBJMdnKUTUDtfi/BYLr71HLaC9dG382arxLF2Egg2uo=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "5a722a7155bfc9fbe657f28d26b71860d95324bc",
+        "rev": "044bfe75bfe4c7bbe043dc17b5e42ea823b84a09",
         "type": "github"
       },
       "original": {
@@ -257,11 +304,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1780908812,
-        "narHash": "sha256-syxEJP0NNgVZYHp/zRVuz32VYf+ULD9itZk7V06SCos=",
+        "lastModified": 1786346006,
+        "narHash": "sha256-PDM9fB1zBhqVVE75WxRM7vIo3QhL2LGKKdd6N+hTGlg=",
         "owner": "tomasriveral",
         "repo": "notewrapper",
-        "rev": "e670ef935f0dd87dc8a8c6982147a9b8dce7565e",
+        "rev": "689c3074c03328e2086dc032a2fc3de00bbef466",
         "type": "github"
       },
       "original": {
@@ -281,11 +328,11 @@
         "rust-overlay": "rust-overlay"
       },
       "locked": {
-        "lastModified": 1781158593,
-        "narHash": "sha256-zxlheX4o1MK00dkYzoXm7Srj5SD9iOCSp4N7f1iShr0=",
+        "lastModified": 1786270331,
+        "narHash": "sha256-GRhNuYIXR/0WWBya4CHfTKyCbL3wuFPJC5yBh5pHU8s=",
         "owner": "r14dd",
         "repo": "patent",
-        "rev": "68772d068088d62a030619090959165af5e71ed1",
+        "rev": "d852cea921124a8b9002db9beb2af2d935af8130",
         "type": "github"
       },
       "original": {
@@ -302,11 +349,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1781053488,
-        "narHash": "sha256-P4WEBaKgl8flRckHxXGHzT0potPvB3x8ZFIp9gLEAMY=",
+        "lastModified": 1785704021,
+        "narHash": "sha256-eQtczKMAS4ItlB4pr1B3MqBZiyRVl2nkqNdtyRSQMa8=",
         "ref": "refs/heads/master",
-        "rev": "d99d87d5e5ec4e696815348692fdaaf0b6be1b2c",
-        "revCount": 822,
+        "rev": "28771c7c74b42e20afca0b1b63980cb46515537c",
+        "revCount": 835,
         "type": "git",
         "url": "https://git.outfoxxed.me/outfoxxed/quickshell"
       },
@@ -317,6 +364,7 @@
     },
     "root": {
       "inputs": {
+        "agenix": "agenix",
         "caelestia-shell": "caelestia-shell",
         "disko": "disko",
         "flake-parts": "flake-parts",
@@ -369,6 +417,21 @@
         "repo": "default",
         "type": "github"
       }
+    },
+    "systems_2": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
     }
   },
   "root": "root",

flake.nix

@@ -47,6 +47,11 @@
       url = "github:nix-community/disko";
       inputs.nixpkgs.follows = "nixpkgs";
     };
+    agenix = {
+      url = "github:ryantm/agenix";
+      inputs.nixpkgs.follows = "nixpkgs";
+      inputs.home-manager.follows = "home-manager";
+    };
     /*
       microPlugins-vivify = {
       url = "git+https://codeberg.org/gibbert/micro-vivify";

modules/applications/hyprlandScripts.nix

@@ -1,99 +0,0 @@
-_: {
-  # for some reason perSystem can't expose pkgs-unstable so we need to expose it here
-  # -----------------------------------------------------
-  # Here are a bunch of scripts that interact with hyprland
-  # Some are still used. Some are broken. Some are deprecated. But I do still keep them in case I want to go back to old tools
-  # -----------------------------------------------------
-  perSystem = {pkgs, ...}: let
-    wallpaper1 = ../../assets/wallpaper1.jpg;
-    wallpaper2 = ../../assets/wallpaper2.jpg;
-    wallpaper3 = ../../assets/wallpaper3.jpg;
-    wallpaper4 = ../../assets/wallpaper4.jpg;
-    wallpaper5 = ../../assets/wallpaper5.jpg;
-  in {
-    # kills the app, but when it's steam or custom-pomodoro
-    packages.custom-dontkillsteam = pkgs.writeShellApplication {
-      name = "custom-dontkillsteam";
-      runtimeInputs = with pkgs; [
-        hyprland
-        jq
-      ];
-      text = ''
-              class=$(hyprctl activewindow -j | jq -r ".class")
-        if [[ "$class" == "Steam" || "$class" == "custom-pomodoro" ]]; then
-        	hyprctl dispatch movetoworkspacesilent special
-        else
-        	hyprctl dispatch killactive ""
-        fi
-
-      '';
-    };
-    packages.custom-killall = pkgs.writeShellApplication {
-      name = "custom-killall";
-      runtimeInputs = [
-        pkgs.hyprland # for some reason pkgs-unstable doesn't work here
-        pkgs.jq
-      ];
-      text = ''
-        active_workspace_id=$(hyprctl activeworkspace -j | jq -r '.id')
-
-        hyprctl clients -j |
-          jq -r ".[]
-            | select(.workspace.id==''${active_workspace_id})
-            | select(.focusHistoryID!=0)
-            | .pid" |
-          xargs -r kill
-      '';
-    };
-    packages.custom-wallpaper = pkgs.writeShellApplication {
-      name = "custom-wallpaper";
-      runtimeInputs = with pkgs; [
-        socat
-        awww
-      ];
-      text = ''
-        handle() {
-          case $1 in
-            workspace*)
-              str=$1
-              i=$((''${#str}-1))
-              workspace="''${str:$i:1}"
-              case $workspace in
-                1 | 6)
-                  awww img -t none ${wallpaper1}
-                  ;;
-                2 | 7)
-                  awww img  -t none ${wallpaper2}
-                  ;;
-                3 | 8)
-                  awww img  -t none ${wallpaper3}
-                  ;;
-                4 | 9)
-                  awww img  -t none ${wallpaper4}
-                  ;;
-                5 | 10 | 0)
-                  awww img  -t none ${wallpaper5}
-                  ;;
-              esac
-              ;;
-          esac
-        }
-
-        socat -U - UNIX-CONNECT:"$XDG_RUNTIME_DIR"/hypr/"$HYPRLAND_INSTANCE_SIGNATURE"/.socket2.sock | while read -r line; do handle "$line"; done
-      '';
-    };
-    packages.custom-launch = pkgs.writeShellApplication {
-      # used for the terminal autostart. Needs to get cleared and recall fastfetch so that the bar from oh-my-zsh get resized
-      # unused
-      name = "custom-launch";
-      runtimeInputs = with pkgs; [
-        zsh
-      ];
-      text = ''
-        sleep 2
-        clear
-        zsh
-      '';
-    };
-  };
-}

modules/applications/tmux.nix

@@ -1,5 +1,4 @@
 _: {
-
   flake.homeModules.tmux = _: {
     programs.tmux = {
       enable = true;

modules/applications/zsh.nix

@@ -50,7 +50,7 @@ _: {
             command cat "$@"
           fi
         }
-          
+              
         custom-eza() { # behaves differently if we just call it or if we pipe initContent
           if [[ -t 1 ]]; then
             eza -hlF -aa --color=always --hyperlink --group-directories-first --show-symlinks --icons=always --git --no-permissions "$@"
@@ -88,6 +88,7 @@ _: {
         nnvim = "nvim";
         nvvim = "nvim";
         nviim = "nvim";
+        hledger-ui = "puffin";
       };
     };
   };

modules/hardware/hardwareUtils.nix

@@ -2,8 +2,8 @@ _: {
   flake.nixosModules.hardwareUtils-laptop = {pkgs, ...}: {
     environment.systemPackages = with pkgs; [
       # used for the framework 16 laptop
-      framework-tool
-      framework-tool-tui
+      #framework-tool
+      #framework-tool-tui
       vial # Open-source GUI and QMK fork for configuring your keyboard in real time
     ];
   };

modules/hardware/onxyboox.nix

@@ -0,0 +1,10 @@
+_: {
+  flake.nixosModules.onxyboox = {pkgs, ...}: {
+    services.gvfs.enable = true;
+    environment.systemPackages = with pkgs; [
+      gvfs
+      calibre
+      kdePackages.kio-extras
+    ];
+  };
+}

modules/hosts/desktop.nix

@@ -44,7 +44,7 @@
       notifications
       nvidia
       office
-      ollama
+      #ollama
       otherUtils
       performance-desktop
       printer
@@ -133,7 +133,7 @@
     home.homeDirectory = "/home/tomasr";
 
     home.sessionVariables = {
-      EDITOR = "neovim";
+      EDITOR = "nvim";
       TERMINAL = "kitty";
     };
 

modules/hosts/laptop.nix

@@ -9,6 +9,8 @@
       inherit (self) pkgs-unstable pkgs-local pkgs-master;
     };
     modules = with self.nixosModules; [
+      inputs.agenix.nixosModules.default
+      agenix
       # important do not remove
       home-manager-laptop
       laptop
@@ -18,7 +20,7 @@
       audioAndMedia
       autoCleanup-laptop
       autoUpdate-laptop
-      battery-laptop
+      #battery-laptop
       bluetooth
       bootloader
       browsers
@@ -45,6 +47,7 @@
       nixUtils
       notifications
       office
+      onxyboox
       #ollama
       otherUtils
       printer
@@ -129,7 +132,7 @@
     home.homeDirectory = "/home/tomasr";
 
     home.sessionVariables = {
-      EDITOR = "neovim";
+      EDITOR = "nvim";
       TERMINAL = "kitty";
       SYSTEMD_PAGER = "cat";
       PAGER = "cat";

modules/utilities/autoUpdate.nix

@@ -19,6 +19,9 @@
       description = "NixOS flake auto update";
 
       serviceConfig = {
+        Environment = [
+          "NTFY_SECRET=${config.age.secrets.ntfy.path}"
+        ];
         Type = "oneshot";
 
         ExecStart = "/run/current-system/sw/bin/custom-autoupdate";
@@ -73,6 +76,9 @@
       description = "NixOS flake auto update";
 
       serviceConfig = {
+        Environment = [
+          "NTFY_SECRET=${config.age.secrets.ntfy.path}"
+        ];
         Type = "oneshot";
 
         ExecStart = "/run/current-system/sw/bin/custom-autoupdate";
@@ -112,8 +118,9 @@
       runtimeInputs = with pkgs; [
         git
         nixos-rebuild
-        matrix-commander-rs
+        curl
         libnotify
+        nix
       ];
 
       text = ''
@@ -135,7 +142,7 @@
         # update lock only
         nix flake update --flake "$FLAKE_DIR"
 
-        if sudo /run/current-system/sw/bin/nixos-rebuild switch --flake "$FLAKE" 2> "$ERROR_FILE"; then # use /run/.../bin/ uses the sudoless rule
+        if /run/wrappers/bin/sudo ${pkgs.nixos-rebuild}/bin/nixos-rebuild switch --flake "$FLAKE" 2> "$ERROR_FILE"; then # use /run/.../bin/ uses the sudoless rule
 
           if ! git -C "$FLAKE_DIR" diff --quiet -- flake.lock; then
             git -C "$FLAKE_DIR" add flake.lock
@@ -180,11 +187,14 @@
       runtimeInputs = with pkgs; [
         git
         nixos-rebuild
-        matrix-commander-rs
         libnotify
+        curl
+        nix
       ];
 
       text = ''
+        # shellcheck disable=SC1090
+        source "$NTFY_SECRET"
         set -e
 
         FLAKE_DIR="/home/tomasr/nixos"
@@ -201,7 +211,7 @@
         # update lock only
         nix flake update --flake "$FLAKE_DIR"
 
-        if sudo /run/current-system/sw/bin/nixos-rebuild switch --flake "$FLAKE" 2> "$ERROR_FILE"; then # use /run/.../bin/ uses the sudoless rule
+        if /run/wrappers/bin/sudo /run/current-system/sw/bin/nixos-rebuild switch --flake "$FLAKE" 2> "$ERROR_FILE"; then # use /run/.../bin/ uses the sudoless rule
 
           if ! git -C "$FLAKE_DIR" diff --quiet -- flake.lock; then
             git -C "$FLAKE_DIR" add flake.lock

modules/utilities/budget.nix

@@ -2,9 +2,9 @@ _: {
   flake.nixosModules.hledger = {pkgs, ...}: {
     environment.systemPackages = with pkgs; [
       hledger
-      hledger-ui
       hledger-web
       asciinema # used for some hledger demos
+      puffin
     ];
   };
   flake.nixosModules.hledger-laptop = _: {

modules/utilities/development.nix

@@ -48,11 +48,17 @@
           "configFetchTime": 1,
           "localNotify": true,
           "matrix": {
-            "enable": true,
+            "enable": false,
             "room": "!BXRRokBmEdNOyYdfOF:matrix.org",
             "ping": true,
             "userPing": "@notificationbot_0000",
             "userPingServer": "matrix.org"
+          },
+          "ntfy": {
+            "enable": true,
+            "auth": ":$NTFY_TOKEN",
+            "server": "$NTFY_SERVER",
+            "topic": "Alerts"
           }
         }
       '';

modules/utilities/networking.nix

@@ -16,7 +16,15 @@ _: {
     networking.networkmanager.enable = true;
 
     # Enable the OpenSSH daemon.
-    # services.openssh.enable = true;
+    services.openssh = {
+      enable = true;
+      hostKeys = [
+        {
+          path = "/etc/ssh/ssh_host_ed25519_key";
+          type = "ed25519";
+        }
+      ];
+    };
 
     # Open ports in the firewall.
     # networking.firewall.allowedTCPPorts = [ ... ];

other/hyprland/README.md

@@ -0,0 +1 @@
+Migrating from hyprlang to lua is really difficult with home-manager. I tried to do it, but a some point half my keybinds stopped working and the nix language made everything much more difficult to debug. So what we will do is have a hyprland.lua which will import a host.lua (for laptop/desktop specific configuration). Both of them will be copied by home-manager. For the migration from .conf to .lua we will use some publicly available [website](https://eiontusk.github.io/hyprlang2lua/).

other/hyprland/hyprland.conf

@@ -0,0 +1,299 @@
+exec-once = /nix/store/8kih8alkk4qzgjchg5501r1c3a8a71aw-dbus-1.16.2/bin/dbus-update-activation-environment --systemd DISPLAY HYPRLAND_INSTANCE_SIGNATURE WAYLAND_DISPLAY XDG_CURRENT_DESKTOP XDG_SESSION_TYPE && systemctl --user stop hyprland-session.target && systemctl --user start hyprland-session.target
+$browser=kitty --class "custom-browserprofiles" --name "Select browser profile" --hold custom-browserprofiles
+$editor=nvim
+$file=dolphin
+$mod=SUPER
+$notes=kitty --class "custom-obsidianvaults" --name "Select Obsidian vault" --hold custom-obsidianvaults
+$term=kitty
+animations {
+  bezier=wind, 0.05, 0.9, 0.1, 1.05
+  bezier=winIn, 0.1, 1.1, 0.1, 1.1
+  bezier=winOut, 0.3, -0.3, 0, 1
+  bezier=liner, 1, 1, 1, 1
+  animation=windows, 1, 6, wind, slide
+  animation=windowsIn, 1, 6, winIn, slide
+  animation=windowsOut, 1, 5, winOut, slide
+  animation=windowsMove, 1, 5, wind, slide
+  animation=border, 1, 1, liner
+  animation=borderangle, 1, 30, liner, loop
+  animation=fade, 1, 10, default
+  animation=workspaces, 1, 5, wind
+  enabled=true
+}
+
+bind=$mod, W, togglefloating
+bind=$mod, G, togglegroup
+bind=Alt, Return, fullscreen
+bind=$mod, Left, movefocus, l
+bind=$mod, Right, movefocus, r
+bind=$mod, Up, movefocus, u
+bind=$mod, Down, movefocus, d
+bind=Alt, Tab, movefocus, d
+bind=$mod, 1, workspace, 1
+bind=$mod, 2, workspace, 2
+bind=$mod, 3, workspace, 3
+bind=$mod, 4, workspace, 4
+bind=$mod, 5, workspace, 5
+bind=$mod, 6, workspace, 6
+bind=$mod, 7, workspace, 7
+bind=$mod, 8, workspace, 8
+bind=$mod, 9, workspace, 9
+bind=$mod, 0, workspace, 10
+bind=$mod+Ctrl, Right, workspace, r+1
+bind=$mod+Ctrl, Left, workspace, r-1
+bind=$mod+Ctrl, Doown, workspace, empty
+bind=$mod+Shift, 1, movetoworkspace, 1
+bind=$mod+Shift, 2, movetoworkspace, 2
+bind=$mod+Shift, 3, movetoworkspace, 3
+bind=$mod+Shift, 4, movetoworkspace, 4
+bind=$mod+Shift, 5, movetoworkspace, 5
+bind=$mod+Shift, 6, movetoworkspace, 6
+bind=$mod+Shift, 7, movetoworkspace, 7
+bind=$mod+Shift, 8, movetoworkspace, 8
+bind=$mod+Shift, 9, movetoworkspace, 9
+bind=$mod+Shift, 0, movetoworkspace, 10
+bind=$mod+Ctrl+Alt, Right, movetoworkspace, r+1
+bind=$mod+Ctrl+Alt, Left, movetoworkspace, r-1
+bind=$mod, Backspace, exec, caelestia shell drawers toggle session
+bind=$mod+Shift+Ctrl, Left, movewindow, l
+bind=$mod+Shift+Ctrl, Right, movewindow, r
+bind=$mod+Shift+Ctrl, Up, movewindow, u
+bind=$mod+Shift+Ctrl, Down, movewindow, d
+bind=$mod, mouse_down, workspace, e+1
+bind=$mod, mouse_up, workspace, e-1
+bind=$mod, V, exec, cliphist list | rofi -dmenu| cliphist decode | wl-copy
+bind=$mod, B, exec, hyprkeys -bkr | rofi -dmenu
+bind=$mod, S, togglespecialworkspace,
+bind=Alt+$mod, S, movetoworkspace, special
+bind=$mod, A, layoutmsg, move -col
+bind=$mod, D, layoutmsg, move +col
+bind=$mod, T, exec, $term
+bind=$mod, E, exec, $file
+bind=$mod, F, exec, $browser
+bind=$mod, N, exec, $notes
+bind=$mod+Shift, A, exec, caelestia shell drawers toggle launcher
+bind=$mod, Q, exec, custom-dontkillsteam
+bind=Ctrl+Alt, W, exec, caelestia shell drawers toggle sidebar
+bind=$mod, L, exec, caelestia shell lock lock
+bind=, F11, exec, caelestia screenshot
+bind=$mod_SHIFT, S, exec, caelestia shell picker open
+bind=Ctrl+$mod, 6, exec, custom-killall
+bind=Ctrl+Alt, 7, exec, custom-performance
+bind=Ctrl+Alt, 1, exec, caelestia shell drawers toggle sidebar
+bind=Ctrl+$mod, 4, exec, caelestia shell notifs toggleDnd
+bind=Ctrl+$mod, 3, exec, pavucontrol
+bind=Ctrl+Shift+Alt, 0, exec, kitty --hold --class "custom-changeAudioOutput" --name "Select audio output" zsh -c "custom-changeAudioOutput"
+bind=Ctrl+$mod, 5, exec, gnome-characters
+bind=Ctrl+Alt, 8, exec, hyprpicker | tee >(wl-copy) | cliphist store
+bind=Ctrl+Alt, 0, exec, custom-tomato
+bind=Ctrl+Alt, 2, exec, custom-bottom
+bind=Ctrl+Alt, 9, exec, anki
+
+binde=$mod+Shift, Right, resizeactive, 30 0
+binde=$mod+Shift, Left, resizeactive, -30, 0
+binde=$mod+Shift, Up, resizeactive, 0 -30
+binde=$mod+Shift, Down, resizeactive,m 0 30
+
+bindel=, F2, exec, pactl set-sink-volume @DEFAULT_SINK@ -10%
+bindel=, F3, exec, pactl set-sink-volume @DEFAULT_SINK@ +10%
+bindel=, F7, exec, brightnessctl s 10%-
+bindel=, F8, exec, brightnessctl s +10%
+
+bindl=, F1, exec, pactl set-sink-mute @DEFAULT_SINK@ toggle
+bindl=, F5, exec, playerctl play-pause
+bindl=, F4, exec, playerctl previous
+bindl=, F6, exec, playerctl next
+
+bindm=$mod, mouse:272, movewindow
+bindm=$mod, mouse:273, resizewindow
+bindm=$mod, Z, movewindow
+bindm=$mod, X, resizewindow
+
+decoration {
+  blur {
+    enabled=true
+    ignore_opacity=true
+    new_optimizations=true
+    passes=2
+    size=4
+    special=true
+  }
+  dim_special=0.300000
+  rounding=18
+}
+
+dwindle {
+  preserve_split=true
+}
+
+env=PATH, $PATH:$scrPath
+env=XDG_CURRENT_DESKTOP,Hyprland
+env=XDG_SESSION_TYPE,wayland
+env=XDG_SESSION_DESKTOP,Hyprland
+env=QT_QPA_PLATFORM,wayland;xcb
+env=QT_QPAPLATFORMTHEME,qt6ct
+env=QT_WAYLAND_DISABLE_WINDOWDECORATION,1
+env=MOZ_ENABLE_WAYLAND,1
+env=GDK_SCALE,1
+
+exec-once=qtbatticon
+exec-once=source /run/agenix/ntfy && nixpkgs-notifier listen
+exec-once=dbus-update-activation-environment --systemd WAYLAND_DISPLAY XDG_CURRENT_DESKTOP
+exec-once=dbus-update-activation-environment --systemd --all
+exec-once=systemctl --user import-environment WAYLAND_DISPLAY XDG_CURRENT_DESKTOP
+exec-once=systemctl --user start xdg-desktop-portal-wlr.service
+exec-once=blueman-applet
+exec-once=udiskie --no-automount --smart-tray
+exec-once=nm-applet --indicator
+exec-once=rm -rf ~/.cache/cliphist/ && wl-paste --type text --watch cliphist store & wl-paste --type image --watch cliphist store
+exec-once=custom-batterynotify
+exec-once=custom-batterywarning
+exec-once=awww img /nix/store/30py8zav0pbsbcvcll5017hwz07fxmr0-wallpaper1.jpg
+exec-once=awww-daemon
+exec-once=sleep 1 && custom-wallpaper
+exec-once=custom-checkKdrive && custom-mountkdrive
+exec-once=custom-gitnotify
+exec-once=sleep 4 & caelestia-shell
+exec-once=sleep 20 && ngcp pull --automatic
+
+general {
+  border_size=4
+  col.active_border=rgba(ca6702ff) rgba(ecd3a0ff) 45deg
+  col.inactive_border=rgba(f1dca7d9) rgba(ffe1a8d9) 45deg
+  gaps_in=5
+  gaps_out=15
+  layout=dwindle
+  resize_on_border=true
+}
+
+gesture=3, right, move, +col
+gesture=3, left, move, -col
+
+group {
+  col.border_active=rgba(ca6702ff) rgba(ecd3a0ff) 45deg
+  col.border_inactive=rgba(f1dca7d9) rgba(ffe1a8d9) 45deg
+  col.border_locked_active=rgba(ca6702ff) rgba(ecd3a0ff) 45deg
+  col.border_locked_inactive=rgba(f1dca7d9) rgba(ffe1a8d9) 45deg
+}
+
+input {
+  kb_layout=ch
+  follow_mouse=1
+  force_no_accel=1
+  sensitivity=0
+}
+
+layerrule=blur on, ignore_alpha 0, match:namespace rofi
+layerrule=blur on, ignore_alpha 0, match:namespace notifications
+layerrule=blur on, ignore_alpha 0, match:namespace swaync-notification-window
+layerrule=blur on, ignore_alpha 0, match:namespace swaync-control-center
+layerrule=blur on, match:namespace logout_dialog
+
+misc {
+  force_default_wallpaper=0
+  vrr=0
+}
+
+monitor=eDP-1, highres@highrr, 0x0, 1
+monitor=HDMI-A-1, highres2highrr, auto-left, 1
+
+plugin:dynamic-cursors {
+  rotate {
+    length=20
+    offset=0
+  }
+
+  shake {
+    base=4.000000
+    effects=true
+    enabled=true
+    influence=0.000000
+    ipc=false
+    limit=0.000000
+    nearest=true
+    speed=4.000000
+    threshold=4
+    timeout=2000
+  }
+  enabled=true
+  mode=rotate
+  threshold=2
+}
+
+plugin:overview {
+  disableBlur=true
+  disableGestures=true
+  showEmptyWorkspace=true
+  workspaceActiveBorder=rgb(ab7746)
+}
+
+scrolling {
+  column_width=0.450000
+}
+
+windowrule=opacity 0.90 0.90, match:class ^(firefox)$
+windowrule=opacity 0.90 0.90, match:class ^(Brave-browser)$
+windowrule=opacity 0.80 0.80, match:class ^(code-oss)$
+windowrule=opacity 0.80 0.80, match:class ^(Code)$
+windowrule=opacity 0.80 0.80, match:class ^(code-url-handler)$
+windowrule=opacity 0.80 0.80, match:class ^(code-insiders-url-handler)$
+windowrule=opacity 0.75 0.75, match:class ^(kitty)$
+windowrule=opacity 0.80 0.80, match:class ^(org.kde.dolphin)$
+windowrule=opacity 0.80 0.80, float on, match:class ^(org.kde.ark)$
+windowrule=opacity 0.80 0.80, float on, match:class ^(nwg-look)$
+windowrule=opacity 0.80 0.80, float on, match:class ^(qt5ct)$
+windowrule=opacity 0.80 0.80, float on, match:class ^(qt6ct)$
+windowrule=opacity 0.80 0.80, float on, match:class ^(kvantummanager)$
+windowrule=opacity 0.80 0.70, float on, match:class ^(org.pulseaudio.pavucontrol)$
+windowrule=opacity 0.80 0.70, float on, match:class ^(blueman-manager)$
+windowrule=opacity 0.80 0.70, float on, match:class ^(nm-applet)$
+windowrule=opacity 0.80 0.70, float on, match:class ^(nm-connection-editor)$
+windowrule=opacity 0.80 0.70, float on, match:class ^(org.kde.polkit-kde-authentication-agent-1)$
+windowrule=opacity 0.80 0.70, match:class ^(polkit-gnome-authentication-agent-1)$
+windowrule=opacity 0.80 0.70, match:class ^(org.freedesktop.impl.portal.desktop.gtk)$
+windowrule=opacity 0.80 0.70, match:class ^(org.freedesktop.impl.portal.desktop.hyprland)$
+windowrule=opacity 0.70 0.70, match:class ^([Ss]team)$
+windowrule=opacity 0.70 0.70, match:class ^(steamwebhelper)$
+windowrule=opacity 0.70 0.70, match:class ^(Spotify)$
+windowrule=opacity 0.70 0.70, match:initial_title ^(Spotify Free)$
+windowrule=opacity 0.90 0.90, float on, match:class ^(com.github.rafostar.Clapper)$
+windowrule=opacity 0.80 0.80, match:class ^(com.github.tchx84.Flatseal)$
+windowrule=opacity 0.80 0.80, match:class ^(hu.kramo.Cartridges)$
+windowrule=opacity 0.80 0.80, match:class ^(com.obsproject.Studio)$
+windowrule=opacity 0.80 0.80, match:class ^(gnome-boxes)$
+windowrule=opacity 0.80 0.80, match:class ^(discord)$
+windowrule=opacity 0.80 0.80, match:class ^(WebCord)$
+windowrule=opacity 0.80 0.80, match:class ^(ArmCord)$
+windowrule=opacity 0.80 0.80, float on, match:class ^(app.drey.Warp)$
+windowrule=opacity 0.80 0.80, float on, match:class ^(net.davidotek.pupgui2)$
+windowrule=opacity 0.80 0.80, float on, match:class ^(yad)$
+windowrule=opacity 0.80 0.80, float on, match:class ^(Signal)$
+windowrule=opacity 0.80 0.80, float on, match:class ^(io.github.alainm23.planify)$
+windowrule=opacity 0.80 0.80, float on, match:class ^(io.gitlab.theevilskeleton.Upscaler)$
+windowrule=opacity 0.80 0.80, float on, match:class ^(com.github.unrud.VideoDownloader)$
+windowrule=opacity 0.80 0.80, float on, match:class ^(io.gitlab.adhami3310.Impression)$
+windowrule=opacity 0.80 0.80, float on, match:class ^(io.missioncenter.MissionCenter)$
+windowrule=opacity 0.80 0.80, match:class ^(io.github.flattool.Warehouse)$
+windowrule=float on, match:class ^(org.kde.dolphin)$, match:title ^(Progress Dialog — Dolphin)$
+windowrule=float on, match:class ^(org.kde.dolphin)$, match:title ^(Copying — Dolphin)$
+windowrule=float on, match:class ^(firefox)$, match:title ^(Picture-in-Picture)$
+windowrule=float on, match:class ^(firefox)$, match:title ^(Library)$
+windowrule=float on, match:class ^(kitty)$, match:title ^(top)$
+windowrule=float on, match:class ^(kitty)$, match:title ^(btop)$
+windowrule=float on, match:class ^(kitty)$, match:title ^(htop)$
+windowrule=float on, match:class ^(vlc)$
+windowrule=float on, match:class ^(eog)$
+windowrule=float on, size 400 225, match:class ^(custom-browserprofiles)$
+windowrule=float on, size 1050 200, match:class ^(custom-changeAudioOutput)$
+windowrule=float on, size 400 175, match:class ^(custom-obsidianvaults)$
+windowrule=float on, size 600 600, match:initial_class ^(custom-pomodoro)$
+windowrule=float on, size 1500 800, match:initial_class ^(custom-bottom)$
+
+workspace=1, layout:master
+workspace=2, layout:scrolling, layoutopt:direction:right
+workspace=name:special, layout:scrolling
+
+xwayland {
+  force_zero_scaling=true
+}
+splash=true

other/hyprland/hyprland.lua

@@ -0,0 +1,804 @@
+local browser = "kitty --class \"custom-browserprofiles\" --name \"Select browser profile\" --hold custom-browserprofiles"
+local editor = "nvim"
+local file = "dolphin"
+local mod = "SUPER"
+local notes = "kitty --class \"custom-obsidianvaults\" --name \"Select Obsidian vault\" --hold custom-obsidianvaults"
+local term = "kitty"
+
+local function close_or_move_special()
+    local window = hl.get_active_window()
+
+    if not window then
+        return
+    end
+
+    local class = window.class or window.initial_class
+
+    if class == "Steam" or class == "custom-pomodoro" then
+        hl.dispatch(hl.dsp.window.move({ workspace = "special" }))
+    else
+        hl.dispatch(hl.dsp.window.close({ window = window }))
+    end
+end
+local function close_other_windows()
+    local active = hl.get_active_window()
+    local workspace = hl.get_active_workspace()
+
+    if not active or not workspace then
+        return
+    end
+
+    for _, window in pairs(hl.get_windows()) do
+        if window.workspace
+            and window.workspace.id == workspace.id
+            and window.address ~= active.address
+        then
+            hl.dispatch(hl.dsp.window.close({ window = window }))
+        end
+    end
+end
+
+local wallpapers = {
+    [1] = "WALLPAPER1/PATH/PLACEHOLDER",
+    [2] = "WALLPAPER2/PATH/PLACEHOLDER",
+    [3] = "WALLPAPER3/PATH/PLACEHOLDER",
+    [4] = "WALLPAPER4/PATH/PLACEHOLDER",
+    [5] = "WALLPAPER5/PATH/PLACEHOLDER",
+    [6] = "WALLPAPER1/PATH/PLACEHOLDER",
+    [7] = "WALLPAPER2/PATH/PLACEHOLDER",
+    [8] = "WALLPAPER3/PATH/PLACEHOLDER",
+    [9] = "WALLPAPER4/PATH/PLACEHOLDER",
+    [10] = "WALLPAPER5/PATH/PLACEHOLDER",
+}
+
+hl.on("workspace.active", function(workspace)
+    local wallpaper = wallpapers[workspace.id]
+
+    if wallpaper then
+        hl.exec_cmd("awww img -t none " .. wallpaper)
+    end
+end)
+
+hl.curve("wind", { type = "bezier", points = { { 0.05, 0.9 }, { 0.1, 1.05 } } })
+hl.curve("winIn", { type = "bezier", points = { { 0.1, 1.1 }, { 0.1, 1.1 } } })
+hl.curve("winOut", { type = "bezier", points = { { 0.3, -0.3 }, { 0, 1 } } })
+hl.curve("liner", { type = "bezier", points = { { 1, 1 }, { 1, 1 } } })
+hl.animation({
+    leaf = "windows",
+    enabled = true,
+    speed = 6,
+    bezier = "wind",
+    style = "slide",
+})
+hl.animation({
+    leaf = "windowsIn",
+    enabled = true,
+    speed = 6,
+    bezier = "winIn",
+    style = "slide",
+})
+hl.animation({
+    leaf = "windowsOut",
+    enabled = true,
+    speed = 5,
+    bezier = "winOut",
+    style = "slide",
+})
+hl.animation({
+    leaf = "windowsMove",
+    enabled = true,
+    speed = 5,
+    bezier = "wind",
+    style = "slide",
+})
+hl.animation({
+    leaf = "border",
+    enabled = true,
+    speed = 1,
+    bezier = "liner",
+})
+hl.animation({
+    leaf = "borderangle",
+    enabled = true,
+    speed = 30,
+    bezier = "liner",
+    style = "loop",
+})
+hl.animation({
+    leaf = "fade",
+    enabled = true,
+    speed = 10,
+    bezier = "default",
+})
+hl.animation({
+    leaf = "workspaces",
+    enabled = true,
+    speed = 5,
+    bezier = "wind",
+})
+
+hl.bind(mod .. " + W", hl.dsp.window.float({ action = "toggle" }))
+hl.bind(mod .. " + G", hl.dsp.group.toggle())
+hl.bind("ALT + Return", hl.dsp.window.fullscreen({ mode = "fullscreen", action = "toggle" }))
+hl.bind(mod .. " + Left", hl.dsp.focus({ direction = "left" }))
+hl.bind(mod .. " + Right", hl.dsp.focus({ direction = "right" }))
+hl.bind(mod .. " + CTRL + D", hl.dsp.layout("swapcol r"))
+hl.bind(mod .. " + CTRL + A", hl.dsp.layout("swapcol l"))
+hl.bind(mod .. " + Up", hl.dsp.focus({ direction = "up" }))
+hl.bind(mod .. " + Down", hl.dsp.focus({ direction = "down" }))
+hl.bind("ALT + Tab", hl.dsp.focus({ direction = "down" }))
+hl.bind(mod .. " + 1", hl.dsp.focus({ workspace = 1 }))
+hl.bind(mod .. " + 2", hl.dsp.focus({ workspace = 2 }))
+hl.bind(mod .. " + 3", hl.dsp.focus({ workspace = 3 }))
+hl.bind(mod .. " + 4", hl.dsp.focus({ workspace = 4 }))
+hl.bind(mod .. " + 5", hl.dsp.focus({ workspace = 5 }))
+hl.bind(mod .. " + 6", hl.dsp.focus({ workspace = 6 }))
+hl.bind(mod .. " + 7", hl.dsp.focus({ workspace = 7 }))
+hl.bind(mod .. " + 8", hl.dsp.focus({ workspace = 8 }))
+hl.bind(mod .. " + 9", hl.dsp.focus({ workspace = 9 }))
+hl.bind(mod .. " + 0", hl.dsp.focus({ workspace = 10 }))
+hl.bind(mod .. " + CTRL + Right", hl.dsp.focus({ workspace = "r+1" }))
+hl.bind(mod .. " + CTRL + Left", hl.dsp.focus({ workspace = "r-1" }))
+hl.bind(mod .. " + CTRL + Down", hl.dsp.focus({ workspace = "empty" }))
+hl.bind(mod .. " + SHIFT + 1", hl.dsp.window.move({ workspace = 1 }))
+hl.bind(mod .. " + SHIFT + 2", hl.dsp.window.move({ workspace = 2 }))
+hl.bind(mod .. " + SHIFT + 3", hl.dsp.window.move({ workspace = 3 }))
+hl.bind(mod .. " + SHIFT + 4", hl.dsp.window.move({ workspace = 4 }))
+hl.bind(mod .. " + SHIFT + 5", hl.dsp.window.move({ workspace = 5 }))
+hl.bind(mod .. " + SHIFT + 6", hl.dsp.window.move({ workspace = 6 }))
+hl.bind(mod .. " + SHIFT + 7", hl.dsp.window.move({ workspace = 7 }))
+hl.bind(mod .. " + SHIFT + 8", hl.dsp.window.move({ workspace = 8 }))
+hl.bind(mod .. " + SHIFT + 9", hl.dsp.window.move({ workspace = 9 }))
+hl.bind(mod .. " + SHIFT + 0", hl.dsp.window.move({ workspace = 10 }))
+hl.bind(mod .. " + CTRL + ALT + Right", hl.dsp.window.move({ workspace = "r+1" }))
+hl.bind(mod .." + CTRL + ALT + Left", hl.dsp.window.move({ workspace = "r-1" }))
+hl.bind(mod .. " + Backspace", hl.dsp.exec_cmd("caelestia shell drawers toggle session"))
+hl.bind(mod .. " + SHIFT + CTRL + Left", hl.dsp.window.move({ direction = "l" }))
+hl.bind(mod .. " + SHIFT + CTRL + Right", hl.dsp.window.move({ direction = "r" }))
+hl.bind(mod .. " + SHIFT + CTRL + Up", hl.dsp.window.move({ direction = "u" }))
+hl.bind(mod .. " + SHIFT + CTRL + Down", hl.dsp.window.move({ direction = "d" }))
+hl.bind(mod .. " + mouse_down", hl.dsp.focus({ workspace = "e+1" }))
+hl.bind(mod .. " + mouse_up", hl.dsp.focus({ workspace = "e-1" }))
+hl.bind(mod .. " + V", hl.dsp.exec_cmd("cliphist list | rofi -dmenu| cliphist decode | wl-copy"))
+hl.bind(mod .. " + B", hl.dsp.exec_cmd("hyprkeys -bkr | rofi -dmenu"))
+hl.bind(mod .. " + S", hl.dsp.workspace.toggle_special(""))
+hl.bind(mod .. " + ALT + S", hl.dsp.window.move({ workspace = "special" }))
+hl.bind(mod .. " + A", hl.dsp.layout("move -col"))
+hl.bind(mod .. " + D", hl.dsp.layout("move +col"))
+hl.bind(mod .. " + T", hl.dsp.exec_cmd(term))
+hl.bind(mod .. " + E", hl.dsp.exec_cmd(file))
+hl.bind(mod .. " + F", hl.dsp.exec_cmd(browser))
+hl.bind(mod .. " + N", hl.dsp.exec_cmd(notes))
+hl.bind(mod .. " + SHIFT + A", hl.dsp.exec_cmd("caelestia shell drawers toggle launcher"))
+hl.bind(mod .. " + Q", close_or_move_special)
+hl.bind("CTRL + ALT + W", hl.dsp.exec_cmd("caelestia shell drawers toggle sidebar"))
+hl.bind(mod .. " + L", hl.dsp.exec_cmd("caelestia shell lock lock"))
+hl.bind("F11", hl.dsp.exec_cmd("caelestia screenshot"))
+hl.bind(mod .. " + SHIFT + S", hl.dsp.exec_cmd("caelestia shell picker open"))
+hl.bind(mod .. " + CTRL + 6", close_other_windows)
+hl.bind("CTRL + ALT + 7", hl.dsp.exec_cmd("custom-performance"))
+hl.bind("CTRL + ALT + 1", hl.dsp.exec_cmd("caelestia shell drawers toggle sidebar"))
+hl.bind(mod .. " + CTRL + 4", hl.dsp.exec_cmd("caelestia shell notifs toggleDnd"))
+hl.bind(mod .. " + CTRL + 3", hl.dsp.exec_cmd("pavucontrol"))
+hl.bind("CTRL + SHIFT + ALT + 0", hl.dsp.exec_cmd("kitty --hold --class \"custom-changeAudioOutput\" --name \"Select audio output\" zsh -c \"custom-changeAudioOutput\""))
+hl.bind(mod .. " + CTRL + 5", hl.dsp.exec_cmd("gnome-characters"))
+hl.bind("CTRL + ALT + 8", hl.dsp.exec_cmd("hyprpicker | tee >(wl-copy) | cliphist store"))
+hl.bind("CTRL + ALT + 0", hl.dsp.exec_cmd("custom-tomato"))
+hl.bind("CTRL + ALT + 2", hl.dsp.exec_cmd("custom-bottom"))
+hl.bind("CTRL + ALT + 9", hl.dsp.exec_cmd("anki"))
+
+hl.bind(mod .. " + SHIFT + Right", hl.dsp.window.resize({ x = 30, y = 0, relative = true }), { repeating = true })
+-- TODO: manual review on line 93 — resizeactive: expected 'X Y' or 'X% Y%', got "-30"
+-- hl.bind("SUPER + SHIFT + Left", hl.dsp.resizeactive(-30, 0), { repeating = true })
+hl.bind(mod .. " + SHIFT + Up", hl.dsp.window.resize({ x = 0, y = -30, relative = true }), { repeating = true })
+-- TODO: manual review on line 95 — resizeactive: expected 'X Y' or 'X% Y%', got "m 0 30"
+-- hl.bind("SUPER + SHIFT + Down", hl.dsp.resizeactive("m 0 30"), { repeating = true })
+
+hl.bind("F2", hl.dsp.exec_cmd("pactl set-sink-volume @DEFAULT_SINK@ -10%"), { locked = true, repeating = true })
+hl.bind("F3", hl.dsp.exec_cmd("pactl set-sink-volume @DEFAULT_SINK@ +10%"), { locked = true, repeating = true })
+hl.bind("F7", hl.dsp.exec_cmd("brightnessctl s 10%-"), { locked = true, repeating = true })
+hl.bind("F8", hl.dsp.exec_cmd("brightnessctl s +10%"), { locked = true, repeating = true })
+
+hl.bind("F1", hl.dsp.exec_cmd("pactl set-sink-mute @DEFAULT_SINK@ toggle"), { locked = true })
+hl.bind("F5", hl.dsp.exec_cmd("playerctl play-pause"), { locked = true })
+hl.bind("F4", hl.dsp.exec_cmd("playerctl previous"), { locked = true })
+hl.bind("F6", hl.dsp.exec_cmd("playerctl next"), { locked = true })
+
+hl.bind(mod .. " + mouse:272", hl.dsp.window.drag())
+hl.bind(mod .. " + mouse:273", hl.dsp.window.resize())
+hl.bind(mod .. " + Z", hl.dsp.window.drag())
+hl.bind(mod .. " + X", hl.dsp.window.resize())
+
+hl.env("XDG_CURRENT_DESKTOP", "Hyprland")
+hl.env("XDG_SESSION_TYPE", "wayland")
+hl.env("XDG_SESSION_DESKTOP", "Hyprland")
+hl.env("QT_QPA_PLATFORM", "wayland;xcb")
+hl.env("QT_QPAPLATFORMTHEME", "qt6ct")
+hl.env("QT_WAYLAND_DISABLE_WINDOWDECORATION", "1")
+hl.env("MOZ_ENABLE_WAYLAND", "1")
+hl.env("GDK_SCALE", "1")
+
+hl.gesture({
+    fingers = 3,
+    direction = "horizontal",
+    action = "scroll_move",
+})
+
+hl.gesture({
+    fingers = 2,
+    direction = "pinch",
+    action = "cursor_zoom",
+    mode = "live",
+})
+
+--hl.layer_rule({
+--    match = { namespace = "ignore_alpha 0" },
+    -- TODO: manual review — unmapped layer rule: "blur on"
+    -- TODO: manual review — unmapped layer rule: "blur on"
+    -- TODO: manual review — unmapped layer rule: "blur on"
+    -- TODO: manual review — unmapped layer rule: "blur on"
+--})
+
+--hl.layer_rule({
+--    match = { namespace = "match:namespace logout_dialog" },
+    -- TODO: manual review — unmapped layer rule: "blur on"
+--)
+
+hl.monitor({
+    output = "eDP-1",
+    mode = "highres@highrr",
+    position = "0x0",
+    scale = "1",
+})
+
+hl.monitor({
+    output = "HDMI-A-1",
+    mode = "highres2highrr",
+    position = "auto-left",
+    scale = "1",
+})
+
+-- TODO: manual review — plugin section 'dynamic-cursors'. The new Lua API exposes plugins via hl.plugin.<name>(...) — wire up per the plugin's docs.
+--[[
+  rotate { ... }
+  shake { ... }
+  enabled = true
+  mode = rotate
+  threshold = 2
+]]
+
+-- TODO: manual review — plugin section 'overview'. The new Lua API exposes plugins via hl.plugin.<name>(...) — wire up per the plugin's docs.
+--[[
+  disableBlur = true
+  disableGestures = true
+  showEmptyWorkspace = true
+  workspaceActiveBorder = rgb(ab7746)
+]]
+
+hl.window_rule({
+    match = {
+        class = "^(firefox)$",
+    },
+    opacity = "0.90 0.90",
+})
+
+hl.window_rule({
+    match = {
+        class = "^(Brave-browser)$",
+    },
+    opacity = "0.90 0.90",
+})
+
+hl.window_rule({
+    match = {
+        class = "^(code-oss)$",
+    },
+    opacity = "0.80 0.80",
+})
+
+hl.window_rule({
+    match = {
+        class = "^(Code)$",
+    },
+    opacity = "0.80 0.80",
+})
+
+hl.window_rule({
+    match = {
+        class = "^(code-url-handler)$",
+    },
+    opacity = "0.80 0.80",
+})
+
+hl.window_rule({
+    match = {
+        class = "^(code-insiders-url-handler)$",
+    },
+    opacity = "0.80 0.80",
+})
+
+hl.window_rule({
+    match = {
+        class = "^(kitty)$",
+    },
+    opacity = "0.75 0.75",
+})
+
+hl.window_rule({
+    match = {
+        class = "^(org.kde.dolphin)$",
+    },
+    opacity = "0.80 0.80",
+})
+
+hl.window_rule({
+    match = {
+        class = "^(org.kde.ark)$",
+    },
+    opacity = "0.80 0.80",
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(nwg-look)$",
+    },
+    opacity = "0.80 0.80",
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(qt5ct)$",
+    },
+    opacity = "0.80 0.80",
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(qt6ct)$",
+    },
+    opacity = "0.80 0.80",
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(kvantummanager)$",
+    },
+    opacity = "0.80 0.80",
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(org.pulseaudio.pavucontrol)$",
+    },
+    opacity = "0.80 0.70",
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(blueman-manager)$",
+    },
+    opacity = "0.80 0.70",
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(nm-applet)$",
+    },
+    opacity = "0.80 0.70",
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(nm-connection-editor)$",
+    },
+    opacity = "0.80 0.70",
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(org.kde.polkit-kde-authentication-agent-1)$",
+    },
+    opacity = "0.80 0.70",
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(polkit-gnome-authentication-agent-1)$",
+    },
+    opacity = "0.80 0.70",
+})
+
+hl.window_rule({
+    match = {
+        class = "^(org.freedesktop.impl.portal.desktop.gtk)$",
+    },
+    opacity = "0.80 0.70",
+})
+
+hl.window_rule({
+    match = {
+        class = "^(org.freedesktop.impl.portal.desktop.hyprland)$",
+    },
+    opacity = "0.80 0.70",
+})
+
+hl.window_rule({
+    match = {
+        class = "^([Ss]team)$",
+    },
+    opacity = "0.70 0.70",
+})
+
+hl.window_rule({
+    match = {
+        class = "^(steamwebhelper)$",
+    },
+    opacity = "0.70 0.70",
+})
+
+hl.window_rule({
+    match = {
+        class = "^(Spotify)$",
+    },
+    opacity = "0.70 0.70",
+})
+
+hl.window_rule({
+    match = {
+        initial_title = "^(Spotify Free)$",
+    },
+    opacity = "0.70 0.70",
+})
+
+hl.window_rule({
+    match = {
+        class = "^(com.github.rafostar.Clapper)$",
+    },
+    opacity = "0.90 0.90",
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(com.github.tchx84.Flatseal)$",
+    },
+    opacity = "0.80 0.80",
+})
+
+hl.window_rule({
+    match = {
+        class = "^(hu.kramo.Cartridges)$",
+    },
+    opacity = "0.80 0.80",
+})
+
+hl.window_rule({
+    match = {
+        class = "^(com.obsproject.Studio)$",
+    },
+    opacity = "0.80 0.80",
+})
+
+hl.window_rule({
+    match = {
+        class = "^(gnome-boxes)$",
+    },
+    opacity = "0.80 0.80",
+})
+
+hl.window_rule({
+    match = {
+        class = "^(discord)$",
+    },
+    opacity = "0.80 0.80",
+})
+
+hl.window_rule({
+    match = {
+        class = "^(WebCord)$",
+    },
+    opacity = "0.80 0.80",
+})
+
+hl.window_rule({
+    match = {
+        class = "^(ArmCord)$",
+    },
+    opacity = "0.80 0.80",
+})
+
+hl.window_rule({
+    match = {
+        class = "^(app.drey.Warp)$",
+    },
+    opacity = "0.80 0.80",
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(net.davidotek.pupgui2)$",
+    },
+    opacity = "0.80 0.80",
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(yad)$",
+    },
+    opacity = "0.80 0.80",
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(Signal)$",
+    },
+    opacity = "0.80 0.80",
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(io.github.alainm23.planify)$",
+    },
+    opacity = "0.80 0.80",
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(io.gitlab.theevilskeleton.Upscaler)$",
+    },
+    opacity = "0.80 0.80",
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(com.github.unrud.VideoDownloader)$",
+    },
+    opacity = "0.80 0.80",
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(io.gitlab.adhami3310.Impression)$",
+    },
+    opacity = "0.80 0.80",
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(io.missioncenter.MissionCenter)$",
+    },
+    opacity = "0.80 0.80",
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(io.github.flattool.Warehouse)$",
+    },
+    opacity = "0.80 0.80",
+})
+
+hl.window_rule({
+    match = {
+        class = "^(org.kde.dolphin)$",
+        title = "^(Progress Dialog — Dolphin)$",
+    },
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(org.kde.dolphin)$",
+        title = "^(Copying — Dolphin)$",
+    },
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(firefox)$",
+        title = "^(Picture-in-Picture)$",
+    },
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(firefox)$",
+        title = "^(Library)$",
+    },
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(kitty)$",
+        title = "^(top)$",
+    },
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(kitty)$",
+        title = "^(btop)$",
+    },
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(kitty)$",
+        title = "^(htop)$",
+    },
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(vlc)$",
+    },
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(eog)$",
+    },
+    float = true,
+})
+
+hl.window_rule({
+    match = {
+        class = "^(custom-browserprofiles)$",
+    },
+    float = true,
+    size = "400 225",
+})
+
+hl.window_rule({
+    match = {
+        class = "^(custom-changeAudioOutput)$",
+    },
+    float = true,
+    size = "1050 200",
+})
+
+hl.window_rule({
+    match = {
+        class = "^(custom-obsidianvaults)$",
+    },
+    float = true,
+    size = "400 175",
+})
+
+hl.window_rule({
+    match = {
+        initial_class = "^(custom-pomodoro)$",
+    },
+    float = true,
+    size = "600 600",
+})
+
+hl.window_rule({
+    match = {
+        initial_class = "^(custom-bottom)$",
+    },
+    float = true,
+    size = "1500 800",
+})
+
+hl.workspace_rule({
+    workspace = "1",
+    layout = "master",
+})
+
+hl.workspace_rule({
+    workspace = "2",
+    layout = "scrolling",
+})
+
+hl.workspace_rule({
+    workspace = "special",
+    layout = "scrolling",
+})
+
+-- TODO: manual review — top-level key 'splash = true' has no enclosing section
+hl.config({
+    animations = {
+        enabled = true,
+    },
+    decoration = {
+        blur = {
+            enabled = true,
+            ignore_opacity = true,
+            new_optimizations = true,
+            passes = 2,
+            size = 4,
+            special = true,
+        },
+        dim_special = 0.300000,
+        rounding = 18,
+    },
+    dwindle = {
+        preserve_split = true,
+    },
+    general = {
+        border_size = 4,
+        col = {
+            active_border = { colors = { "rgba(ca6702ff)", "rgba(ecd3a0ff)" }, angle = 45 },
+            inactive_border = { colors = { "rgba(f1dca7d9)", "rgba(ffe1a8d9)" }, angle = 45 },
+        },
+        gaps_in = 5,
+        gaps_out = 15,
+        layout = "dwindle",
+        resize_on_border = true,
+    },
+    group = {
+        col = {
+            border_active = { colors = { "rgba(ca6702ff)", "rgba(ecd3a0ff)" }, angle = 45 },
+            border_inactive = { colors = { "rgba(f1dca7d9)", "rgba(ffe1a8d9)" }, angle = 45 },
+            border_locked_active = { colors = { "rgba(ca6702ff)", "rgba(ecd3a0ff)" }, angle = 45 },
+            border_locked_inactive = { colors = { "rgba(f1dca7d9)", "rgba(ffe1a8d9)" }, angle = 45 },
+        },
+    },
+    input = {
+        kb_layout = "ch",
+        follow_mouse = 1,
+        force_no_accel = 1,
+        sensitivity = 0,
+    },
+    misc = {
+        force_default_wallpaper = 0,
+        vrr = 0,
+    },
+    scrolling = {
+        column_width = 0.450000,
+    },
+    xwayland = {
+        force_zero_scaling = true,
+    },
+})
+
+hl.on("hyprland.start", function()
+    hl.exec_cmd("/nix/store/8kih8alkk4qzgjchg5501r1c3a8a71aw-dbus-1.16.2/bin/dbus-update-activation-environment --systemd DISPLAY HYPRLAND_INSTANCE_SIGNATURE WAYLAND_DISPLAY XDG_CURRENT_DESKTOP XDG_SESSION_TYPE && systemctl --user stop hyprland-session.target && systemctl --user start hyprland-session.target")
+    hl.exec_cmd("qtbatticon")
+    hl.exec_cmd("source /run/agenix/ntfy && nixpkgs-notifier listen")
+    hl.exec_cmd("dbus-update-activation-environment --systemd WAYLAND_DISPLAY XDG_CURRENT_DESKTOP")
+    hl.exec_cmd("dbus-update-activation-environment --systemd --all")
+    hl.exec_cmd("systemctl --user import-environment WAYLAND_DISPLAY XDG_CURRENT_DESKTOP")
+    hl.exec_cmd("systemctl --user start xdg-desktop-portal-wlr.service")
+    hl.exec_cmd("blueman-applet")
+    hl.exec_cmd("udiskie --no-automount --smart-tray")
+    hl.exec_cmd("nm-applet --indicator")
+    hl.exec_cmd("rm -rf ~/.cache/cliphist/ && wl-paste --type text --watch cliphist store & wl-paste --type image --watch cliphist store")
+    hl.exec_cmd("custom-batterynotify")
+    hl.exec_cmd("custom-batterywarning")
+    hl.exec_cmd("awww img WALLPAPER/PATH/PLACEHOLDER")
+    hl.exec_cmd("awww-daemon")
+    hl.exec_cmd("sleep 1 && custom-wallpaper")
+    hl.exec_cmd("custom-checkKdrive && custom-mountkdrive")
+    hl.exec_cmd("custom-gitnotify")
+    hl.exec_cmd("sleep 4 & caelestia-shell")
+    hl.exec_cmd("sleep 20 && ngcp pull --automatic")
+end)
+-- host specific config
+require("host")