improvements

class/desktop/compatibility.nix

@@ -1,67 +0,0 @@
-{pkgs, ...}: {
-  environment.systemPackages = [
-    pkgs.appimage-run
-    pkgs.wineWowPackages.unstableFull
-  ];
-
-  services.envfs.enable = true;
-
-  programs.nix-ld = {
-    enable = true;
-    libraries = [
-      pkgs.alsa-lib
-      pkgs.atk
-      pkgs.at-spi2-atk
-      pkgs.at-spi2-core
-      pkgs.cairo
-      pkgs.cups
-      pkgs.curl
-      pkgs.dbus
-      pkgs.expat
-      pkgs.fontconfig
-      pkgs.freetype
-      pkgs.fuse
-      pkgs.fuse3
-      pkgs.gdk-pixbuf
-      pkgs.glib
-      pkgs.gtk3
-      pkgs.gtk4
-      pkgs.icu
-      pkgs.libappindicator
-      pkgs.libdrm
-      pkgs.libGL
-      pkgs.libglvnd
-      pkgs.libnotify
-      pkgs.libpulseaudio
-      pkgs.libunwind
-      pkgs.libusb1
-      pkgs.libuuid
-      pkgs.libxkbcommon
-      pkgs.libxml2
-      pkgs.mesa
-      pkgs.nspr
-      pkgs.nss
-      pkgs.openssl
-      pkgs.pango
-      pkgs.pipewire
-      pkgs.stdenv.cc.cc
-      pkgs.systemd
-      pkgs.vulkan-loader
-      pkgs.xorg.libX11
-      pkgs.xorg.libxcb
-      pkgs.xorg.libXcomposite
-      pkgs.xorg.libXcursor
-      pkgs.xorg.libXdamage
-      pkgs.xorg.libXext
-      pkgs.xorg.libXfixes
-      pkgs.xorg.libXi
-      pkgs.xorg.libxkbfile
-      pkgs.xorg.libXrandr
-      pkgs.xorg.libXrender
-      pkgs.xorg.libXScrnSaver
-      pkgs.xorg.libxshmfence
-      pkgs.xorg.libXtst
-      pkgs.zlib
-    ];
-  };
-}

class/desktop/default.nix

@@ -1,7 +1,6 @@
 {
   imports = [
     ./clipboard.nix
-    ./compatibility.nix
     ./docker.nix
     ./flatpak.nix
     ./fonts.nix
@@ -17,5 +16,7 @@
     ./printing.nix
     ./syncthing.nix
     ./users.nix
+    ./vm.nix
+    ./wine.nix
   ];
 }

class/desktop/vm.nix

@@ -0,0 +1,4 @@
+{
+  virtualisation.libvirtd.enable = true;
+  programs.virt-manager.enable = true;
+}

class/desktop/wine.nix

@@ -0,0 +1,3 @@
+{pkgs, ...}: {
+  environment.systemPackages = [pkgs.wineWowPackages.stableFull];
+}

common/users.nix

@@ -11,10 +11,7 @@
       lukas = {
         isNormalUser = true;
         hashedPasswordFile = config.age.secrets.user-lukas.path;
-        openssh.authorizedKeys.keys = [
+        openssh.authorizedKeys.keys = builtins.attrValues (import ../pubkeys.nix).users;
-          "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK4U9RzV/gVGBfrCOye7BlS11g5BS7SmuZ36n2ZIJyAX lukas@glacier"
-          "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAztZgcRBHqX8Wb2nAlP1qCKF205M3un/D1YnREcO7Dy lukas@flamingo"
-        ];
         extraGroups = ["wheel" "networkmanager" "gamemode"];
         linger = true;
       };

pubkeys.nix

@@ -0,0 +1,23 @@
+let
+  users = {
+    "lukas@flamingo" = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAztZgcRBHqX8Wb2nAlP1qCKF205M3un/D1YnREcO7Dy";
+    "lukas@glacier" = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK4U9RzV/gVGBfrCOye7BlS11g5BS7SmuZ36n2ZIJyAX";
+  };
+
+  hosts = {
+    glacier = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHrKpoDV/ImivtTZVbSsQ59IbGYVvSsKls4av2Zc9Nk8";
+    abacus = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHoUgClpkOlBEffQOb9KkVn970RwnIhU0OiVr7P2WVzg";
+    vessel = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKkYcOb1JPNLTJtob1TcuC08cH9P2APAhLR26RYd573d";
+    flamingo = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIInV+UpCZhoTwgkgnCzCPEu3TD5b5mu6tagRslljrFJ/";
+  };
+in  {
+  inherit users hosts;
+
+  desktops = {
+    inherit (hosts) glacier flamingo;
+  };
+
+  servers = {
+    inherit (hosts) abacus vessel;
+  };
+}

secrets/mail-lukas.age

@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 SFHVrw LiDCAhLHNnb0AbtKaSxP32Erwaqpm9rkVqqTYsg7VX4
+-> ssh-ed25519 SFHVrw 9+APWz/u61v8zE6auzspntqrKNdCFb7fZPFMIdOBx0E
-rgZBcTW88Zynex2AWXHpJ5VdlLAe3MtNN4vRhV03/yw
+KMMD8n0klfeMN41AHX7sgXOdjI4eCgODKpkaFBkiesQ
--> ssh-ed25519 S+dwQQ b1tjzc5ipNB1O5+sj+NTdPquv842V1SNfVLwlhllpmo
+-> ssh-ed25519 S+dwQQ nPqPcy5Ksk6W14xacleMie+mNKInhdlOcjtb3iEaSDU
-q0KI/Rb1D359bRSsrwJrG0Sfy7YFe1y2qZZY6e5SySE
+IB7VAISMPvD8goodgcahuCab5r59zD/O3fKAePLBKAc
--> ssh-ed25519 ffmsLw OLoQCT99w3kM1wyzCWGeh6tO7fH46GbIzLSWJNxA+V8
+-> ssh-ed25519 ffmsLw Rf4/ibog+At3JqyvQkkXKAsmhkK6/8wWeMSrwsJzGSs
-+hfzOs8JPE5/Paag/7PkIYmRG8ppJMouvxDcyyfrzv4
+To4HRcE12BiFQZp1z+dT9DiE24LxJdFVxYZUalstfgo
---- Q2ZHMtaw0pwEOOGBxnRRNzjfEbcQqzP82QNFPRgazGw
+--- dnS4XgHvGt9ZROAl+daSLO4VDj8ihnJenDNvfG43zFA
-°Dź$|dtÚSł}NŮŠ{ß`vçÓb‘«Ű†şfĚȡnü¤5””‹
ő<>ßťR*O@ŚŢ€Xw ‚óyŐ×–ĺj?Oë4b¸łÔ Č÷©±Á]8N|+%
+崙鰭ヒ<EFBFBD>A#!ﾞVﾖ9T5ﾓｱKﾓr､ukｶtｬU坎q―/Wｶ%ﾟFX<46>RｶDYZx煉+7S<37>AQﾛhﾄrTz+8B>*<2A>筮,ｻ$+Efa<>l

secrets/nextcloud-lukas.age

@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 SFHVrw jUO5Z4j1ADd4QMPziuvNDh0iUirvrV32Z1+xbnkoVks
+-> ssh-ed25519 SFHVrw 6oAZL86Esb8hewQ6ylGb7k0RsQlJoQbwyHDB8cEiVH0
-FJGle7Kr6knbPrgCg6Lk1ge+jV7Im4Z8FAmkQKlP6Ik
+TvD14WLXzxCvDb1/iWljWNgR+qF0yjwlSLZ06HoNh9I
--> ssh-ed25519 S+dwQQ wKH3jZM/aruNPE5tYSROFGUdXw2o3lws76OvAXubhxk
+-> ssh-ed25519 S+dwQQ KoANzMyOZKHMFBg+nqblxAP+bWKGXceexVYUbExu80s
-Jhv2kqxgHM26iuvDs0LTf4ahlaiRacN6wpH7iHuknF4
+kUIcinUKIvPuBlFgnPKIomq+yk9P8GnjsujM63+Hm68
--> ssh-ed25519 ffmsLw kNKHrTEm4pFyC1r6Kjah3pl+0xnTuFt9ccha0uh0Z3Q
+-> ssh-ed25519 ffmsLw Ad9EVWmpxhiAaREltE2J7APUn/NeNg9tw8vG8yeC3HU
-bLP4RrHR5gUm2ZuFNcK2m6tnC24PiGdevnuNTQ9Kb0g
+R26AmfZEq1Q0qKJ4npuQV5Yc/aIKJMiP68/Rd8l7lDg
---- FznEfHzpAG79LYYxIBJYgCFeUrb9Tn9yS5wXfJVeeEU
+--- Y3yFHxXo16Z9hQVFdDut04ioZ0H4x4YUy/SBGn8+MWw
-µ+łß†cä8:vbT]4$\<5C>)Đ„şš[TŻ@W;”FfĎĚÂNâčFÖ’G
+[Œ@<40>ƒ/õ1᢬Û[7RM,Bµ7A˜„_ÒiQ<69>õ'µ@ø<x“ØMø2Ò*

secrets/secrets.nix

@@ -1,24 +1,4 @@
-let
+with import ../pubkeys.nix; {
-  users = {
-    "lukas@flamingo" = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAztZgcRBHqX8Wb2nAlP1qCKF205M3un/D1YnREcO7Dy";
-    "lukas@glacier" = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK4U9RzV/gVGBfrCOye7BlS11g5BS7SmuZ36n2ZIJyAX";
-  };
-
-  hosts = {
-    glacier = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHrKpoDV/ImivtTZVbSsQ59IbGYVvSsKls4av2Zc9Nk8";
-    abacus = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHoUgClpkOlBEffQOb9KkVn970RwnIhU0OiVr7P2WVzg";
-    vessel = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKkYcOb1JPNLTJtob1TcuC08cH9P2APAhLR26RYd573d";
-    flamingo = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIInV+UpCZhoTwgkgnCzCPEu3TD5b5mu6tagRslljrFJ/";
-  };
-
-  desktops = {
-    inherit (hosts) glacier flamingo;
-  };
-
-  servers = {
-    inherit (hosts) abacus vessel;
-  };
-in {
   "user-lukas.age".publicKeys = (builtins.attrValues users) ++ (builtins.attrValues hosts);
   "user-guest.age".publicKeys = (builtins.attrValues users) ++ (builtins.attrValues desktops);
   "mail-lukas.age".publicKeys = (builtins.attrValues users) ++ [hosts.abacus];

secrets/user-guest.age

@@ -1,12 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 SFHVrw XwFbvZ91rDE2Ux6BOxWqa0tpmp9W93n6c15WewMd83g
+-> ssh-ed25519 SFHVrw DCt2GZWNEMSghE2UN3bXoILlWnuJcwyC/NZeMq02CAc
-bHU1wwzxwEc2Ie6KcGBWhRv2IeQDKEtzWpRSujPvzLk
++QUTcHu/7xuzWjwveWAlGvsI2cO47uGwR4BSvOLtjjs
--> ssh-ed25519 S+dwQQ O9Nd+LXDcf7fP8xgqcmVpM44LEk1KaB8p9RHRfp+6Bw
+-> ssh-ed25519 S+dwQQ 6rAan8TWKoUaAhBHpNsMkVo2p+Lgz0ZoQmxFEaNTSHU
-LOmhTxVX93XgM6lmr26MrNOMG2jf0ZAOAMiYR7KxRro
+PdiHcuv08y1iOlaLFVpSwd3Hhf2eVkhmAk+ERUgQcck
--> ssh-ed25519 d2fKsw 5jpAhGTQ7VqJrT7SWfaAudYrVtIFYRRv1R5FgL8FeCs
+-> ssh-ed25519 d2fKsw JVyjUdSyNjZwm+YT6ADU9NdtdB/b4BRXvNeY1Rf3j2E
-rRJe5oiSVtjPBGTJOdgFTXOzld0SxKpqAtXz7hHgB6c
+vMSNQGFCbIsK+QvurnxSk+bOhGAT0auQGUGi61Xu718
--> ssh-ed25519 US6ATA jol1HBmQUl3qjxLkSOZ17r9dqxu7lB/dDBqrccuq4Qk
+-> ssh-ed25519 US6ATA 1P9NLhIOtAfIDoPkFhvcXKmABtKeT/DwcnpAKnZOFm8
-EyPFGHi1jI2fIRCourzGvvMJGQYsAjttEGiOUachi9Q
+E4JXWldgwLJpVHObEL8x5WILVyXCwCzM3KUwtkitG6w
---- lhZyqOVkSJS/30/cyWdLTVNMltAIHYF4DOIyK32VR/0
+--- b838whGkA7DIZ58mqtWg/LYmXwSNNDBTLuRcsSwXQWg
-ò›¨500
+ð<EFBFBD>GQßÿhÜtà‰YP6xŸ	¿[ôõ)YUgêáy¾ŒgÒ´‘¹WÄ¥ºÿÏ‹i<E280B9>î¢LiákÏŸÀ;”<>Œâý¼‡V¥<56>/EU²ÑDKU®meų¡™¾„ïcÀ„o[öàìêCOí¾‹ë
-=0ëþôMÃKÇF¡ë<TEãtK$?üÀ/QÊ~
/0i¦:è}Ò3×Xlì<6C>P¼QåZe*ëŠ<C3AB>çg8<67>_|¥ËíHã0;ê³°'êpS3ð˯V”)p_>Øu’

secrets/user-lukas.age

@@ -1,17 +1,16 @@
 age-encryption.org/v1
--> ssh-ed25519 SFHVrw RbCDTFm8etGA6wAA26l52Ezrj5g151L/uYmkCC57rh0
+-> ssh-ed25519 SFHVrw Wu34V3CgoW7F6AlycCYTYS8V2BqzTiJEciHSmlYk3yY
-az9uaQvCJy8ocB0ij+qmu1MayhkFYVK2NHvlB0+8RhA
+8PrJc2enz9lfjIZ19DnDWARp5bVc11H5xWzuzSQORYU
--> ssh-ed25519 S+dwQQ xUmmLtRfmdxSWv9sU2OIgced3+hn6H2fvHxtlrThF3Q
+-> ssh-ed25519 S+dwQQ QeMwBHRfGiAnVprkdWZvHxvZB2gfTI3L6L/A+LaA22U
-hr3tB+uqcv3JNBFyjf2O6xanN2hnlbCdHH5wLidcbfk
+fI2BklLzA3oYtXD9ZJB7ckDIDZAzsGLXki1hsYDTe18
--> ssh-ed25519 ffmsLw NxXG3+tjYTxrAnZ/gIy/E08ozfSkl2GbUaaCAextd1E
+-> ssh-ed25519 ffmsLw UxgpvU2hr7v4fVxPkakM+x/Gib7pgkOnAr0t9MtEMF8
-fKwGEIu4I1sczSvu2bsGcMZSkuYuO5gWFRyg1PoLfV4
+xBCEBjx++nBZVnmpOmQz8fjJNJhpqJO7RU6ApY0yUp8
--> ssh-ed25519 d2fKsw glKuNTvDZxE7SsxBKP+0P4Ldl/a4MwvpzwkgbqFNuEM
+-> ssh-ed25519 d2fKsw zfmx5GJLF1xvvd9rnrtS28aCpLKtYzefXQ6ZBNKunSY
-8XqemFkix1MjVJm42fQ0vtWaxiFGZWOer+OoRaVLccg
+a1//LH2PoCbKJXgMt2zxtNfv13GpP+Q9AgSitbPsi2c
--> ssh-ed25519 US6ATA J5l4UYEZVCUS4J69YTwEyTdFvPRoWlpp88iWgEEDe0Y
+-> ssh-ed25519 US6ATA 6KqoDVREh7obNXYnpUW5rMfpYT3wLb3QwFZ03Ixe1Q8
-ogUa74Vg22CN2zyDZzIoxUokMVPXzllfb1Vj53/CbmM
+/F5qNiOBTgcjwjuwqU6T1s21AuaXVlpCg65AkSSaOuA
--> ssh-ed25519 Sm0lOA 5YoOeiPiEfqT9mWUTSUusm9h5CceeeCVJS1iofooTHw
+-> ssh-ed25519 Sm0lOA GV5uqJ3ur7RDx+KyQbiDP94zJjBxDopOJoKPeS+Nino
-A47tIbHSaQzaxrBatwqQEE2JIa67sqMlstkDyWIuE7Q
+iQrxyMaKXcKk8pbbrrDNPXtX+kxifohBFNDDEa/bIWo
---- QzbsNPZn7A5mPNUXOkkSZYt/mx/KrLiBHtI4wi2ynLE
+--- /wyQ79QmsnO+louJTkcdUXx9+lZAu/dVJP03aFqKQ50
-¨pç<GûÌþ¿è–ÅUlûäC&ux‡
+ݸ$ºœhS)/Þ”(¢ÉéÉ
-òÏFËä­éðKw“í7jv|¿·T\œ„ ¾®˜Äà	;R®ƒD¶—`ÂQ|\ˆë:
+œ^3ÓÂ<>á¹È“+>F¯ç#ðòÏVÓ5 }Ðo]æ)<29>ÏX±3ópõf_BRtN‘îj2‡…™å<>ÉéI&`Ò`žÓh’~µËNÜõ÷XÖ5ôdÏ5¢±ÓÕLõ¶ML©ŒÅ'­jé–(Ä—›G%T8ôÛRj>Ë<>
-v5ÑcõŸÆärDxáÔ«Š`à4#ñ,åè¦,Ϭ#óo•Ùkl²¢a¡Øtu*úËPÎ
Üée=6‰e®âS