Commit 0dd2534b18f9

@@ -1,37 +0,0 @@
-let
-  wireguard = {
-    ips = {
-      kerkouane = "10.100.0.1";
-      shikoku = "10.100.0.2";
-      # […]
-    };
-    kerkouane = {
-      allowedIPs = [ "${wireguard.ips.kerkouane}/32" ];
-      publicKey = "<kerkouane wireguard public key>";
-    };
-    shikoku = {
-      allowedIPs = [ "${wireguard.ips.shikoku}/32" ];
-      publicKey = "<shikoku wireguard public key>";
-    };
-    # […]
-  };
-  ssh = {
-    kerkouane = {
-      port = <custom ssh port>;
-      key = "<kerkouane ssh public key>";
-    };
-    shikoku = {
-      key = "<shikoku ssh public key>";
-    };
-  };
-in {
-  wireguard = wireguard;
-  wg = {
-    allowedIPs = "10.100.0.0/24";
-    listenPort = <wireguard port to listen to>;
-    endpointIP = "<public remote address>";
-    persistentKeepalive = 25;
-    peers = [ wireguard.shikoku ];
-  };
-  ssh = ssh;
-}

@@ -1,25 +0,0 @@
-{ config, pkgs, ... }:
-
-{
-  boot = {
-    loader.efi.canTouchEfiVariables = true;
-    kernelParams = [
-      # Kernel GPU Savings Options (NOTE i915 chipset only)
-      "i915.enable_rc6=0" "i915.enable_fbc=1"
-      "i915.lvds_use_ssc=0"
-      "drm.debug=0" "drm.vblankoffdelay=1"
-    ];
-    blacklistedKernelModules = [
-      # Kernel GPU Savings Options (NOTE i915 chipset only)
-      "sierra_net" "cdc_mbim" "cdc_ncm"
-    ];
-  };
-  hardware = {
-    opengl = {
-      enable = true;
-      extraPackages = [ pkgs.vaapiIntel ];
-      driSupport32Bit = true;
-    };
-  };
-  services.acpid.enable = true;
-}

@@ -1,49 +0,0 @@
-{ config, pkgs, ...}:
-
-{
-  imports = [ ./thinkpad.nix ];
-  hardware = {
-    bluetooth = {
-      enable = true;
-      powerOnBoot = true;
-    };
-    nvidia.optimus_prime = {
-      enable = true;
-      nvidiaBusId = "PCI:1:0:0";
-      intelBusId = "PCI:0:2:0";
-    };
-  };
-  services = {
-    tlp = {
-      extraConfig = ''
-# CPU optimizations
-CPU_SCALING_GOVERNOR_ON_AC=performance
-CPU_SCALING_GOVERNOR_ON_BAT=powersave
-CPU_MIN_PERF_ON_AC=0
-CPU_MAX_PERF_ON_AC=100
-CPU_MIN_PERF_ON_BAT=0
-CPU_MAX_PERF_ON_BAT=50
-# DEVICES (wifi, ..)
-DEVICES_TO_DISABLE_ON_STARTUP=""
-DEVICES_TO_ENABLE_ON_AC="bluetooth wifi wwan"
-DEVICES_TO_DISABLE_ON_BAT=""
-# Network management
-DEVICES_TO_DISABLE_ON_LAN_CONNECT=""
-DEVICES_TO_DISABLE_ON_WIFI_CONNECT=""
-DEVICES_TO_DISABLE_ON_WWAN_CONNECT=""
-DEVICES_TO_ENABLE_ON_LAN_DISCONNECT=""
-DEVICES_TO_ENABLE_ON_WIFI_DISCONNECT=""
-DEVICES_TO_ENABLE_ON_WWAN_DISCONNECT=""
-# Docking
-DEVICES_TO_DISABLE_ON_DOCK="wifi"
-DEVICES_TO_ENABLE_ON_UNDOCK="wifi"
-# Make sure it uses the right hard drive
-DISK_DEVICES="nvme0n1p2"
-      '';
-    };
-    udev.extraRules = ''
-  # Rules for Lenovo Thinkpad WS Dock
-  SUBSYSTEM=="usb", ACTION=="add|remove", ENV{ID_VENDOR}=="17ef", ENV{ID_MODEL}=="305a", RUN+="${pkgs.vde-thinkpad}/bin/dock"
-    '';
-  };
-}

@@ -1,37 +0,0 @@
-{ config, pkgs, ... }:
-
-{
-  imports = [ ./thinkpad.nix ];
-  services = {
-    tlp = {
-      extraConfig = ''
-# CPU optimizations
-CPU_SCALING_GOVERNOR_ON_AC=performance
-CPU_SCALING_GOVERNOR_ON_BAT=powersave
-CPU_MIN_PERF_ON_AC=0
-CPU_MAX_PERF_ON_AC=100
-CPU_MIN_PERF_ON_BAT=0
-CPU_MAX_PERF_ON_BAT=50
-# DEVICES (wifi, ..)
-DEVICES_TO_DISABLE_ON_STARTUP=""
-DEVICES_TO_ENABLE_ON_AC="bluetooth wifi wwan"
-DEVICES_TO_DISABLE_ON_BAT=""
-# Network management
-DEVICES_TO_DISABLE_ON_LAN_CONNECT=""
-DEVICES_TO_DISABLE_ON_WIFI_CONNECT=""
-DEVICES_TO_DISABLE_ON_WWAN_CONNECT=""
-DEVICES_TO_ENABLE_ON_LAN_DISCONNECT=""
-DEVICES_TO_ENABLE_ON_WIFI_DISCONNECT=""
-DEVICES_TO_ENABLE_ON_WWAN_DISCONNECT=""
-# Docking
-DEVICES_TO_DISABLE_ON_DOCK="wifi"
-DEVICES_TO_ENABLE_ON_UNDOCK="wifi"
-# Make sure it uses the right hard drive
-DISK_DEVICES="nvme0n1p3"
-      '';
-    };
-    xserver = {
-      dpi = 128;
-    };
-  };
-}

@@ -1,55 +0,0 @@
-{ config, pkgs, ... }:
-
-{
-  imports = [ ./thinkpad.nix ];
-  boot = {
-    kernelParams = [ "i915.enable_psr=1" ];
-    extraModprobeConfig = ''
-    options iwlwifi 11n_disable=1
-    '';
-  };
-  security = {
-    pam.services = {
-      slimlock.fprintAuth = false;
-      slim.fprintAuth = false;
-      login.fprintAuth = false;
-      xscreensaver.fprintAuth = false;
-    };
-  };
-  services = {
-    fprintd.enable = true;
-    tlp = {
-      extraConfig = ''
-# CPU optimizations
-CPU_SCALING_GOVERNOR_ON_AC=performance
-CPU_SCALING_GOVERNOR_ON_BAT=powersave
-CPU_MIN_PERF_ON_AC=0
-CPU_MAX_PERF_ON_AC=100
-CPU_MIN_PERF_ON_BAT=0
-CPU_MAX_PERF_ON_BAT=50
-CPU_BOOST_ON_AC=1
-CPU_BOOST_ON_BAT=0
-# DEVICES (wifi, ..)
-DEVICES_TO_DISABLE_ON_STARTUP="bluetooth"
-DEVICES_TO_ENABLE_ON_AC="bluetooth wifi wwan"
-DEVICES_TO_DISABLE_ON_BAT="bluetooth"
-# Network management
-DEVICES_TO_DISABLE_ON_LAN_CONNECT=""
-DEVICES_TO_DISABLE_ON_WIFI_CONNECT=""
-DEVICES_TO_DISABLE_ON_WWAN_CONNECT=""
-DEVICES_TO_ENABLE_ON_LAN_DISCONNECT=""
-DEVICES_TO_ENABLE_ON_WIFI_DISCONNECT=""
-DEVICES_TO_ENABLE_ON_WWAN_DISCONNECT=""
-DISK_IDLE_SECS_ON_AC=0
-DISK_IDLE_SECS_ON_BAT=2
-MAX_LOST_WORK_SECS_ON_AC=15
-MAX_LOST_WORK_SECS_ON_BAT=60
-DISK_DEVICES="ata-Corsair_Force_LX_SSD_15256501000102160059"
-SOUND_POWER_SAVE_ON_AC=0
-SOUND_POWER_SAVE_ON_BAT=1
-USB_AUTOSUSPEND=1
-USB_BLACKLIST_BTUSB=1
-      '';
-    };
-  };
-}

@@ -1,74 +0,0 @@
-{ config, pkgs, ... }:
-
-{
-  boot = {
-    blacklistedKernelModules = [
-      # Kernel GPU Savings Options (NOTE i915 chipset only)
-      "sierra_net" "cdc_mbim" "cdc_ncm"
-    ];
-    extraModprobeConfig = ''
-    options snd_hda_intel power_save=1
-    '';
-    initrd = {
-      availableKernelModules = [ "aesni-intel" "aes_x86_64" "cryptd" ];
-    };
-    kernelModules = [ "kvm_intel" ];
-    kernelParams = [
-      # Kernel GPU Savings Options (NOTE i915 chipset only)
-      "i915.enable_rc6=1" "i915.enable_fbc=1"
-      "i915.lvds_use_ssc=0"
-      "drm.debug=0" "drm.vblankoffdelay=1"
-      "kvm_intel.nested=1"
-      "intel_iommu=on"
-    ];
-    loader.efi.canTouchEfiVariables = true;
-  };
-  environment.systemPackages = with pkgs; [
-    linuxPackages.tp_smapi
-  ];
-  hardware = {
-    trackpoint.enable = false;
-    cpu.intel.updateMicrocode = true;
-    opengl = {
-      #enable = true;
-      extraPackages = [ pkgs.vaapiIntel ];
-      #driSupport32Bit = true;
-    };
-  };
-  services = {
-    acpid = {
-      enable = true;
-      lidEventCommands = ''
-if grep -q closed /proc/acpi/button/lid/LID/state; then
-  date >> /tmp/i3lock.log
-  DISPLAY=":0.0" XAUTHORITY=/home/fadenb/.Xauthority ${pkgs.i3lock}/bin/i3lock &>> /tmp/i3lock.log
-fi
-      '';
-    };
-    tlp = {
-      enable = true;
-    };
-    xserver = {
-      synaptics.enable = false;
-      config =
-      ''
-  Section "InputClass"
-    Identifier     "Enable libinput for TrackPoint"
-    MatchIsPointer "on"
-    Driver         "libinput"
-    Option         "ScrollMethod" "button"
-    Option         "ScrollButton" "8"
-  EndSection
-      '';
-      inputClassSections = [
-        ''
-  Identifier "evdev touchpad off"
-  MatchIsTouchpad "on"
-  MatchDevicePath "/dev/input/event*"
-  Driver "evdev"
-  Option "Ignore" "true"
-        ''
-      ];
-    };
-  };
-}

@@ -1,49 +0,0 @@
-{ config, pkgs, ... }:
-
-with import ../assets/machines.nix; {
-  imports = [
-    ../networking.nix # generated at runtime by nixos-infect
-  ];
-  time.timeZone = "Europe/Paris";
-  boot = {
-    cleanTmpDir = true;
-    loader.grub.enable = true;
-  };
-  profiles = {
-    git.enable = true;
-    nix-config.localCaches = [];
-    nix-config.buildCores = 1;
-    ssh.enable = true;
-    syncthing.enable = true;
-  };
-  networking.firewall.allowPing = true;
-  networking.firewall.allowedTCPPorts = [ 80 443 ];
-  security = {
-    acme.certs = {
-      "sbr.pm".email = "vincent@sbr.pm";
-    };
-  };
-  services = {
-    nginx = {
-      enable = true;
-      virtualHosts."carthage.sbr.pm" = {
-        enableACME = true;
-        forceSSL = true;
-        root = "/home/vincent/desktop/sites/carthage.sbr.pm";
-        locations."/" = {
-          index = "index.html";
-        };
-      };
-    };
-    openssh.ports = [ ssh.carthage.port ];
-    openssh.permitRootLogin = "without-password";
-    syncthing.guiAddress = "127.0.0.1:8384";
-    wireguard = {
-      enable = true;
-      ips = [ "${wireguard.ips.carthage}/24" ];
-      endpoint = wg.endpointIP;
-      endpointPort = wg.listenPort;
-      endpointPublicKey = wireguard.kerkouane.publicKey;
-    };
-  };
-}

@@ -1,86 +0,0 @@
-{ config, pkgs, ... }:
-
-with import ../assets/machines.nix; {
-  imports = [ ../hardware/thinkpad-x220.nix ./home.nix ];
-  boot = {
-    kernel.sysctl = {
-      "net.bridge.bridge-nf-call-arptables" = 0;
-      "net.bridge.bridge-nf-call-iptables" = 0;
-      "net.bridge.bridge-nf-call-ip6tables" = 0;
-    };
-  };
-  profiles = {
-    avahi.enable = true;
-    dev.enable = true;
-    ssh.enable = true;
-    syncthing.enable = true;
-    nix-config.buildCores = 2;
-    virtualization = {
-      enable = true;
-      nested = true;
-      listenTCP = true;
-    };
-  };
-  services = {
-    logind = {
-      lidSwitch = "ignore";
-    };
-    syncthing.guiAddress = "0.0.0.0:8384";
-    wireguard = {
-      enable = true;
-      ips = [ "${wireguard.ips.hokkaido}/24" ];
-      endpoint = wg.endpointIP;
-      endpointPort = wg.listenPort;
-      endpointPublicKey = wireguard.kerkouane.publicKey;
-    };
-  };
-  # -----------------------------------
-  environment.etc."vrsync".text = ''
-/home/vincent/desktop/pictures/screenshots/ vincent@synodine.home:/volumeUSB2/usbshare/pictures/screenshots/
-/home/vincent/desktop/pictures/wallpapers/ vincent@synodine.home:/volumeUSB2/usbshare/pictures/wallpapers/
-/home/vincent/desktop/documents/ vincent@synodine.home:/volume1/documents/
-/mnt/Toshito/photos/ vincent@synodine.home:/volumeUSB2/usbshare/pictures/photos/
-/mnt/Toshito/music/ vincent@synodine.home:/volumeUSB2/usbshare/music/
-  '';
-  systemd.services.vrsync = {
-    description = "vrsync - sync folders to NAS";
-    requires = [ "network-online.target" ];
-    after    = [ "network-online.target" ];
-
-    unitConfig.X-StopOnRemoval = false;
-    restartIfChanged = false;
-
-    path = with pkgs; [ rsync coreutils bash openssh ];
-    script = ''
-    ${pkgs.vrsync}/bin/vrsync
-    '';
-
-    startAt = "hourly";
-    serviceConfig = {
-      Type = "oneshot";
-      OnFailure = "status-email-root@%n.service";
-    };
-  };
-  # ape – sync git mirrors
-  systemd.services.ape = {
-    description = "Ape - sync git mirrors";
-    requires = [ "network-online.target" ];
-    after    = [ "network-online.target" ];
-
-    restartIfChanged = false;
-    unitConfig.X-StopOnRemoval = false;
-
-    serviceConfig = {
-      Type = "oneshot";
-      User = "vincent";
-      OnFailure = "status-email-root@%n.service";
-    };
-
-    path = with pkgs; [ git ];
-    script = ''
-    ${pkgs.nur.repos.vdemeester.ape}/bin/ape up /home/vincent/var/mirrors
-    '';
-
-    startAt = "hourly";
-  };
-}

@@ -1,30 +0,0 @@
-{ config, pkgs, ... }:
-
-with import ../assets/machines.nix; {
-  boot.kernelParams = [ "nfs.nfs4_disable_idmapping=0" "nfsd.nfs4_disable_idmapping=0" ];
-  networking.domain = "synodine.home";
-  time.timeZone = "Europe/Paris";
-  # To mimic autofs on fedora
-  fileSystems."/net/synodine.home/" = {
-    device = "${home.ips.synodine}:/";
-    fsType = "nfs";
-    options = [ "x-systemd.automount" "noauto" ];
-  };
-  # FIXME(vdemeester): I think it acts like this because there is only one export
-  fileSystems."/net/sakhalin.home/export/" = {
-    device = "${home.ips.sakhalin}:/";
-    fsType = "nfs";
-    options = [ "x-systemd.automount" "noauto" ];
-  };
-  # Deprecated
-  fileSystems."/mnt/synodine" = {
-    device = "${home.ips.synodine}:/";
-    fsType = "nfs";
-    options = [ "x-systemd.automount" "noauto" ];
-  };
-  fileSystems."/mnt/sakhalin" = {
-    device = "${home.ips.sakhalin}:/";
-    fsType = "nfs";
-    options = [ "x-systemd.automount" "noauto" ];
-  };
-}

@@ -1,36 +0,0 @@
-{ config, pkgs, ... }:
-
-with import ../assets/machines.nix; {
-  imports = [ ../hardware/dell-latitude-e6540.nix ./home.nix ];
-  networking = {
-    firewall.enable = false; # we are in safe territory :D
-    bridges.br1.interfaces = [ "eno1" ];
-    useDHCP = false;
-    interfaces.br1 = {
-      useDHCP = true;
-    };
-  };
-  profiles = {
-    avahi.enable = true;
-    dev.enable = true;
-    nix-config.buildCores = 4;
-    ssh.enable = true;
-    syncthing.enable = true;
-    virtualization = {
-      enable = true;
-      nested = true;
-      listenTCP = true;
-    };
-  };
-  services = {
-    logind.lidSwitch = "ignore";
-    syncthing.guiAddress = "0.0.0.0:8384";
-    wireguard = {
-      enable = true;
-      ips = [ "${wireguard.ips.honshu}/24" ];
-      endpoint = wg.endpointIP;
-      endpointPort = wg.listenPort;
-      endpointPublicKey = wireguard.kerkouane.publicKey;
-    };
-  };
-}

@@ -1,86 +0,0 @@
-{ config, pkgs, ... }:
-
-with import ../assets/machines.nix; {
-  imports = [ ../networking.nix ];
-  time.timeZone = "Europe/Paris";
-  boot = {
-    cleanTmpDir = true;
-    loader.grub.enable = true;
-  };
-  profiles = {
-    git.enable = true;
-    nix-config.localCaches = [];
-    nix-config.buildCores = 1;
-    ssh.enable = true;
-    syncthing.enable = true;
-    wireguard.server.enable = true;
-  };
-  networking.firewall.allowPing = true;
-  networking.firewall.allowedTCPPorts = [ 80 443 ];
-  security = {
-    acme.certs = {
-      "sbr.pm".email = "vincent@sbr.pm";
-    };
-  };
-  services = {
-    govanityurl = {
-      enable = true;
-      user = "nginx";
-      host = "go.sbr.pm";
-      config = ''
-        paths:
-          /ape:
-            repo: https://gitlab.com/vdemeester/ape
-          /nr:
-            repo: https://gitlab.com/vdemeester/nr
-          /ram:
-            repo: https://gitlab.com/vdemeester/ram
-          /sec:
-            repo: https://gitlab.com/vdemeester/sec
-      '';
-    };
-    nginx = {
-      enable = true;
-      virtualHosts."dl.sbr.pm" = {
-        enableACME = true;
-        forceSSL = true;
-        root = "/home/vincent/desktop/sites/dl.sbr.pm";
-        locations."/" = {
-          index = "index.html";
-        };
-      };
-      virtualHosts."paste.sbr.pm" = {
-        enableACME = true;
-        forceSSL = true;
-        root = "/home/vincent/desktop/sites/paste.sbr.pm";
-        locations."/" = {
-          index = "index.html";
-        };
-      };
-      virtualHosts."go.sbr.pm" = {
-        enableACME = true;
-        forceSSL = true;
-        locations."/" = { proxyPass = "http://127.0.0.1:8080"; };
-      };
-      virtualHosts."sbr.pm" = {
-        enableACME = true;
-        forceSSL = true;
-        root = "/home/vincent/desktop/sites/sbr.pm";
-        locations."/" = {
-          index = "index.html";
-        };
-      };
-      virtualHosts."vincent.demeester.fr" = {
-        enableACME = true;
-        forceSSL = true;
-        root = "/home/vincent/desktop/sites/vincent.demeester.fr";
-        locations."/" = {
-          index = "index.html";
-        };
-      };
-    };
-    openssh.ports = [ ssh.kerkouane.port ];
-    openssh.permitRootLogin = "without-password";
-    syncthing.guiAddress = "127.0.0.1:8384";
-  };
-}

@@ -1,95 +0,0 @@
-{ config, pkgs, ... }:
-
-with import ../assets/machines.nix; {
-  imports = [ ./home.nix ];
-  boot = {
-    cleanTmpDir = true;
-  };
-  networking = {
-    firewall.enable = false; # we are in safe territory :D
-    bridges.br1.interfaces = [ "enp0s31f6" ];
-    useDHCP = false;
-    interfaces.br1 = {
-      useDHCP = true;
-    };
-  };
-  profiles = {
-    avahi.enable = true;
-    git.enable = true;
-    nix-config.buildCores = 4;
-    ssh.enable = true;
-    syncthing.enable = true;
-    virtualization = {
-      enable = true;
-      nested = true;
-      listenTCP = true;
-    };
-  };
-  services = {
-    bind = {
-      enable = true;
-      forwarders = [ "8.8.8.8" "8.8.4.4" ];
-      cacheNetworks = [ "192.168.1.0/24" "127.0.0.0/8" "10.100.0.0/24" ];
-      zones = [
-        {
-          # home
-          name = "home";
-          slaves = [];
-          file = ../assets/db.home;
-        }
-        {
-          # home.reverse
-          name = "192.168.1.in-addr.arpa";
-          slaves = [];
-          file = ../assets/db.192.168.1;
-        }
-        {
-          # vpn
-          name = "vpn";
-          slaves = [];
-          file = ../assets/db.vpn;
-        }
-        {
-          # vpn.reverse
-          name = "10.100.0.in-addr.arpa";
-          slaves = [];
-          file = ../assets/db.10.100.0;
-        }
-      ];
-    };
-    nix-binary-cache = {
-      enable = true;
-      domain = "nix.cache.home";
-      aliases = [ "cache.massimo.home" "nix.okinawa.home" ];
-    };
-    syncthing.guiAddress = "0.0.0.0:8384";
-    tarsnap = {
-      enable = true;
-      archives = {
-        documents = {
-          directories = [ "/home/vincent/desktop/documents" ];
-          period = "daily";
-          keyfile = "/etc/nixos/assets/tarsnap.documents.key";
-        };
-        org = {
-          directories = [ "/home/vincent/desktop/org" ];
-          period = "daily";
-          keyfile = "/etc/nixos/assets/tarsnap.org.key";
-        };
-        sites = {
-          directories = [ "/home/vincent/desktop/sites" ];
-          period = "daily";
-          keyfile = "/etc/nixos/assets/tarsnap.sites.key";
-        };
-      };
-    };
-    wireguard = {
-      enable = true;
-      ips = [ "${wireguard.ips.okinawa}/24" ];
-      endpoint = wg.endpointIP;
-      endpointPort = wg.listenPort;
-      endpointPublicKey = wireguard.kerkouane.publicKey;
-    };
-  };
-  security.apparmor.enable = true;
-}

@@ -1,154 +0,0 @@
-{ config, pkgs, ... }:
-
-with import ../assets/machines.nix; {
-  imports = [ ./home.nix ];
-  boot = {
-    cleanTmpDir = true;
-  };
-  networking = {
-    firewall.enable = false; # we are in safe territory :D
-    bridges.br1.interfaces = [ "enp0s31f6" ];
-    useDHCP = false;
-    interfaces.br1 = {
-      useDHCP = true;
-    };
-  };
-  profiles = {
-    avahi.enable = true;
-    git.enable = true;
-    nix-config.buildCores = 4;
-    ssh.enable = true;
-    syncthing.enable = true;
-    virtualization = {
-      enable = true;
-      nested = true;
-      listenTCP = true;
-    };
-  };
-  fileSystems."/export/gaia" = { device = "/mnt/gaia"; options = [ "bind" ]; };
-  fileSystems."/export/toshito" = { device = "/mnt/toshito"; options = [ "bind" ]; };
-  services = {
-    nfs.server = {
-      enable = true;
-      exports = ''
-        /export                      192.168.1.0/24(rw,fsid=0,no_subtree_check) 10.100.0.0/24(rw,fsid=0,no_subtree_check)
-        /export/gaia                 192.168.1.0/24(rw,fsid=1,no_subtree_check) 10.100.0.0/24(rw,fsid=1,no_subtree_check)
-        /export/toshito              192.168.1.0/24(rw,fsid=2,no_subtree_check) 10.100.0.0/24(rw,fsid=2,no_subtree_check)
-      '';
-    };
-    bind = {
-      enable = true;
-      forwarders = [ "8.8.8.8" "8.8.4.4" ];
-      cacheNetworks = [ "192.168.1.0/24" "127.0.0.0/8" "10.100.0.0/24" ];
-      zones = [
-        {
-          # home
-          name = "home";
-          slaves = [];
-          file = ../assets/db.home;
-        }
-        {
-          # home.reverse
-          name = "192.168.1.in-addr.arpa";
-          slaves = [];
-          file = ../assets/db.192.168.1;
-        }
-        {
-          # vpn
-          name = "vpn";
-          slaves = [];
-          file = ../assets/db.vpn;
-        }
-        {
-          # vpn.reverse
-          name = "10.100.0.in-addr.arpa";
-          slaves = [];
-          file = ../assets/db.10.100.0;
-        }
-      ];
-    };
-    syncthing.guiAddress = "0.0.0.0:8384";
-    wireguard = {
-      enable = true;
-      ips = [ "${wireguard.ips.sakhalin}/24" ];
-      endpoint = wg.endpointIP;
-      endpointPort = wg.listenPort;
-      endpointPublicKey = wireguard.kerkouane.publicKey;
-    };
-  };
-  security.apparmor.enable = true;
-  # -----------------------------------
-  environment.etc."vrsync".text = ''
-    /home/vincent/desktop/pictures/screenshots/ vincent@synodine.home:/volumeUSB2/usbshare/pictures/screenshots/
-    /home/vincent/desktop/pictures/wallpapers/ vincent@synodine.home:/volumeUSB2/usbshare/pictures/wallpapers/
-    /home/vincent/desktop/documents/ vincent@synodine.home:/volume1/documents/
-    /mnt/gaia/photos/ vincent@synodine.home:/volumeUSB2/usbshare/pictures/photos/
-    /mnt/gaia/music/ vincent@synodine.home:/volumeUSB2/usbshare/music/
-  '';
-  systemd.services.vrsync = {
-    description = "vrsync - sync folders to NAS";
-    requires = [ "network-online.target" ];
-    after = [ "network-online.target" ];
-
-    unitConfig.X-StopOnRemoval = false;
-    restartIfChanged = false;
-
-    path = with pkgs; [ rsync coreutils bash openssh ];
-    script = ''
-      ${pkgs.vrsync}/bin/vrsync
-    '';
-
-    startAt = "hourly";
-    serviceConfig = {
-      Type = "oneshot";
-      OnFailure = "status-email-root@%n.service";
-    };
-  };
-  # ape – sync git mirrors
-  systemd.services.ape = {
-    description = "Ape - sync git mirrors";
-    requires = [ "network-online.target" ];
-    after = [ "network-online.target" ];
-
-    restartIfChanged = false;
-    unitConfig.X-StopOnRemoval = false;
-
-    serviceConfig = {
-      Type = "oneshot";
-      User = "vincent";
-      OnFailure = "status-email-root@%n.service";
-    };
-
-    path = with pkgs; [ git ];
-    script = ''
-      ${pkgs.nur.repos.vdemeester.ape}/bin/ape up /home/vincent/var/mirrors
-    '';
-
-    startAt = "hourly";
-  };
-  # mr -i u daily
-  systemd.services.mr = {
-    description = "Update configs daily";
-    requires = [ "network-online.target" ];
-    after = [ "network-online.target" ];
-
-    restartIfChanged = false;
-    unitConfig.X-StopOnRemoval = false;
-
-    serviceConfig = {
-      Type = "oneshot";
-      User = "vincent";
-      OnFailure = "status-email-root@%n.service";
-    };
-
-    path = with pkgs; [ git mr ];
-    script = ''
-      set -e
-       cd /mnt/gaia/src/configs/
-       mr -t run git reset --hard
-       mr -t u
-    '';
-
-    startAt = "daily";
-  };
-}

@@ -1,91 +0,0 @@
-{ config, pkgs, ... }:
-
-with import ../assets/machines.nix; {
-  imports = [ ../hardware/lenovo-p50.nix ./home.nix ];
-  boot = {
-    kernelModules = [ "kvm_intel" ];
-    kernelParams = [ "kvm_intel.nested=1" ];
-    kernel.sysctl = {
-      "net.bridge.bridge-nf-call-arptables" = 0;
-      "net.bridge.bridge-nf-call-iptables" = 0;
-      "net.bridge.bridge-nf-call-ip6tables" = 0;
-    };
-  };
-  networking = {
-    firewall.enable = false; # we are in safe territory :D
-    hosts = {
-      "${home.ips.honshu}" = [ "honshu.home" ];
-      "${wireguard.ips.honshu}" = [ "honshu.vpn" ];
-      "${home.ips.shikoku}" = [ "shikoku.home" ];
-      "${wireguard.ips.shikoku}" = [ "shikoku.vpn" ];
-      "${home.ips.wakasu}" = [ "wakasu.home" ];
-      "${wireguard.ips.wakasu}" = [ "wakasu.vpn" ];
-      "${home.ips.hokkaido}" = [ "hokkaido.home" ];
-      "${wireguard.ips.hokkaido}" = [ "hokkaido.vpn" ];
-      "${home.ips.sakhalin}" = [ "sakhalin.home" ];
-      "${wireguard.ips.sakhalin}" = [ "sakhalin.vpn" ];
-      "${wireguard.ips.massimo}" = [ "massimo.vpn" ];
-      "${home.ips.synodine}" = [ "synodine.home" ];
-      "${home.ips.okinawa}" = [ "okinawa.home" "cache.home" "svc.home" "nix.cache.home" "go.cache.home" ];
-      "${wireguard.ips.okinawa}" = [ "okinawa.vpn" ];
-      "${wireguard.ips.carthage}" = [ "carthage.vpn" ];
-      "${wireguard.ips.kerkouane}" = [ "kerkouane.vpn" ];
-    };
-  };
-  profiles = {
-    dev.enable = true;
-    laptop.enable = true;
-    desktop.autoLogin = true;
-    docker.enable = true;
-    nix-config.buildCores = 4;
-    #qemu-user = { arm = true; aarch64 = true; };
-    ssh = {
-      enable = true;
-      forwardX11 = true;
-    };
-    virtualization = {
-      enable = true;
-      nested = true;
-      listenTCP = true;
-    };
-    yubikey.enable = true;
-  };
-  programs = {
-    podman.enable = true;
-  };
-  security.sudo = {
-    extraConfig = ''
-      %users ALL = (root) NOPASSWD: /home/vincent/.nix-profile/bin/kubernix
-    '';
-  };
-  services = {
-    logind.extraConfig = ''
-      HandleLidSwitch=ignore
-      HandleLidSwitchExternalPower=ignore
-      HandleLidSwitchDocked=ignore
-    '';
-    #syncthing.guiAddress = "${wireguard.ips.wakasu}:8384";
-    syncthing.guiAddress = "0.0.0.0:8384";
-    smartd = {
-      enable = true;
-      devices = [ { device = "/dev/nvme0n1"; } ];
-    };
-    wireguard = {
-      enable = true;
-      ips = [ "${wireguard.ips.wakasu}/24" ];
-      endpoint = wg.endpointIP;
-      endpointPort = wg.listenPort;
-      endpointPublicKey = wireguard.kerkouane.publicKey;
-    };
-    xserver = {
-      videoDrivers = [ "nvidia" ];
-      dpi = 96;
-      serverFlagsSection = ''
-        Option "BlankTime" "0"
-        Option "StandbyTime" "0"
-        Option "SuspendTime" "0"
-        Option "OffTime" "0"
-      '';
-    };
-  };
-}

@@ -1,43 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-with lib;
-
-let
-
-  cfg = config.hardware.sane;
-
-  pkg = if cfg.snapshot
-    then pkgs.sane-backends-git
-    else pkgs.sane-backends;
-
-  backends = [ pkg ] ++ cfg.extraBackends;
-
-  saneConfig = pkgs.mkSaneConfig { paths = backends; };
-
-  saneExtraConfig = pkgs.runCommand "sane-extra-config" {} ''
-    cp -Lr '${pkgs.mkSaneConfig { paths = [ pkgs.sane-backends ]; }}'/etc/sane.d $out
-    chmod +w $out
-    ${concatMapStrings (c: ''
-      f="$out/${c.name}.conf"
-      [ ! -e "$f" ] || chmod +w "$f"
-      cat ${builtins.toFile "" (c.value + "\n")} >>"$f"
-      chmod -w "$f"
-    '') (mapAttrsToList nameValuePair cfg.extraConfig)}
-    chmod -w $out
-  '';
-
-in
-
-{
-  options = {
-    hardware.sane.extraConfig = mkOption {
-      type = types.attrsOf types.lines;
-      default = {};
-      example = { "some-backend" = "# some lines to add to its .conf"; };
-    };
-  };
-
-  config = mkIf (cfg.enable && cfg.extraConfig != {}) {
-    hardware.sane.configDir = saneExtraConfig.outPath;
-  };
-}

@@ -1,258 +0,0 @@
-# name: lambda
-function __fish_basename -d 'basically basename, but faster'
-    string replace -r '^.*/' '' -- $argv
-end
-
-function __fish_dirname -d 'basically dirname, but faster'
-    string replace -r '/[^/]+/?$' '' -- $argv
-end
-
-
-function __fish_prompt_status -S -a last_status -d 'Display flags for non-zero-exit status, root user, and background jobs'
-    set -l nonzero
-    set -l superuser
-    set -l bg_jobs
-
-    # Last exit was nonzero
-    [ $last_status -ne 0 ]
-    and set nonzero 1
-
-    # If superuser (uid == 0)
-    #
-    # Note that iff the current user is root and '/' is not writeable by root this
-    # will be wrong. But I can't think of a single reason that would happen, and
-    # it is literally 99.5% faster to check it this way, so that's a tradeoff I'm
-    # willing to make.
-    [ -w / ]
-    and [ (id -u) -eq 0 ]
-    and set superuser 1
-
-    # Jobs display
-    jobs -p >/dev/null
-    and set bg_jobs 1
-
-    if [ "$nonzero" ]
-        set_color red
-        echo -n '! '
-        set_color normal
-    end
-
-    if [ "$superuser" ]
-        set_color red
-        echo -n '$ '
-        set_color normal
-    end
-
-    if [ "$bg_jobs" ]
-        set_color gray
-        echo -n '% '
-        set_color normal
-    end
-end
-
-function __fish_prompt_user -S -d 'Display current user and hostname'
-    [ -n "$SSH_CLIENT" ]
-    and set -l display_user_hostname
-
-    if set -q display_user_hostname
-        set -l IFS .
-        hostname | read -l hostname __
-        echo -ns (whoami) '@' $hostname
-    end
-end
-
-function __fish_git_project_dir
-    set -l git_dir (command git rev-parse --git-dir ^/dev/null)
-    or return
-
-    pushd $git_dir
-    set git_dir $PWD
-    popd
-
-    switch $PWD/
-        case $git_dir/\*
-            # Nothing works quite right if we're inside the git dir
-            # TODO: fix the underlying issues then re-enable the stuff below
-
-            # # if we're inside the git dir, sweet. just return that.
-            # set -l toplevel (command git rev-parse --show-toplevel ^/dev/null)
-            # if [ "$toplevel" ]
-            #   switch $git_dir/
-            #     case $toplevel/\*
-            #       echo $git_dir
-            #   end
-            # end
-            return
-    end
-
-    set -l project_dir (__fish_dirname $git_dir)
-
-    switch $PWD/
-        case $project_dir/\*
-            echo $project_dir
-            return
-    end
-
-    set project_dir (command git rev-parse --show-toplevel ^/dev/null)
-    switch $PWD/
-        case $project_dir/\*
-            echo $project_dir
-    end
-end
-
-function __fish_git_ahead -S -d 'Print the ahead/behind state for the current branch'
-    set -l ahead 0
-    set -l behind 0
-    for line in (command git rev-list --left-right '@{upstream}...HEAD' ^/dev/null)
-        switch "$line"
-            case '>*'
-                if [ $behind -eq 1 ]
-                    echo '±'
-                    return
-                end
-                set ahead 1
-            case '<*'
-                if [ $ahead -eq 1 ]
-                    echo "±"
-                    return
-                end
-                set behind 1
-        end
-    end
-
-    if [ $ahead -eq 1 ]
-        echo "+"
-    else if [ $behind -eq 1 ]
-        echo "-"
-    end
-end
-
-function __fish_git_branch -S -d 'Get the current git branch (or commitish)'
-    set -l ref (command git symbolic-ref HEAD ^/dev/null)
-    and begin
-        string replace 'refs/heads/' "" $ref
-        and return
-    end
-
-    set -l tag (command git describe --tags --exact-match ^/dev/null)
-    and echo "tag:$tag"
-    and return
-
-    set -l branch (command git show-ref --head -s --abbrev | head -n1 ^/dev/null)
-    echo "detached:$branch"
-end
-
-function __fish_prompt_git -S -a current_dir -d 'Display the actula git state'
-    set -l dirty ''
-    set -l show_dirty (command git config --bool bash.showDirtyState ^/dev/null)
-    if [ "$show_dirty" != 'false' ]
-        set dirty (command git diff --no-ext-diff --quiet --exit-code ^/dev/null; or echo -n "*")
-    end
-
-    set -l staged (command git diff --cached --no-ext-diff --quiet --exit-code ^/dev/null; or echo -n "~")
-    set -l stashed (command git rev-parse --verify --quiet refs/stash >/dev/null; and echo -n '$')
-    set -l ahead (__fish_git_ahead)
-
-    set -l new ''
-    set -l show_untracked (command git config --bool bash.showUntrackedFiles ^/dev/null)
-    if [ "$show_untracked" != 'false' ]
-        set new (command git ls-files --other --exclude-standard --directory --no-empty-directory ^/dev/null)
-        if [ "$new" ]
-            set new "…"
-        end
-    end
-
-    set -l flags "$dirty$staged$stashed$ahead$new"
-    [ "$flags" ]
-    and set flags ":$flags"
-
-    __fish_path_segment $current_dir
-
-    set_color green
-    echo -n '{'
-    echo -ns (__fish_git_branch) $flags ''
-    echo -n '}'
-    set_color normal
-
-    set -l project_pwd (command git rev-parse --show-prefix ^/dev/null | string trim --right --chars=/)
-
-    if [ "$project_pwd" ]
-        set_color brblack
-        echo -n "/$project_pwd"
-        set_color normal
-    end
-end
-
-function __fish_prompt_dir -S -d 'Display a shortened form of the current directory'
-    __fish_path_segment "$PWD"
-end
-
-function __fish_path_segment -S -a current_dir -d 'Display a shortened form of a directory'
-    set -l directory
-    set -l parent
-
-    switch "$current_dir"
-        case /
-            set directory '/'
-        case "$HOME"
-            set directory '~'
-        case '*'
-            set parent (__fish_pretty_parent "$current_dir")
-            set directory (__fish_basename "$current_dir")
-    end
-
-    set_color white
-    echo -n $parent
-    set_color --bold
-    echo -ns $directory ''
-    set_color normal
-end
-
-function __fish_pretty_parent -S -a current_dir -d 'Print a parent directory, shortened to fit the prompt'
-    set -q fish_prompt_pwd_dir_length
-    or set -l fish_prompt_pwd_dir_length 1
-
-    # Replace $HOME with ~
-    set -l real_home ~
-    set -l parent_dir (string replace -r '^'"$real_home"'($|/)' '~$1' (__fish_dirname $current_dir))
-
-    # Must check whether `$parent_dir = /` if using native dirname
-    if [ -z "$parent_dir" ]
-        echo -n /
-        return
-    end
-
-    if [ $fish_prompt_pwd_dir_length -eq 0 ]
-        echo -n "$parent_dir/"
-        return
-    end
-
-    string replace -ar '(\.?[^/]{'"$fish_prompt_pwd_dir_length"'})[^/]*/' '$1/' "$parent_dir/"
-end
-
-# TODO: handle envs (nix-shell, virtualenv, ...)
-
-function fish_prompt -d 'vde-lambda, a fish theme optimized for me :D'
-    if test $TERM = "dumb"
-        echo "\$ "
-        return 0
-    end
-    # Save the last status for later
-    set -l last_status $status
-
-    __fish_prompt_status $last_status
-    __fish_prompt_user
-
-    # vcs
-    set -l git_root (__fish_git_project_dir)
-
-    if [ "$git_root" ]
-        __fish_prompt_git $git_root
-    else
-        __fish_prompt_dir
-    end
-
-    set_color --bold brblack
-    echo -n " λ "
-    set_color normal
-end

@@ -1,30 +0,0 @@
-function __fish_prompt_nix_shell
-    [ -z "$IN_NIX_SHELL" ]
-    and return
-    set_color yellow
-    echo -n -s '🄪  '
-    set_color normal
-end
-
-# ⏍ ⧆ ⌗ ⧉
-function __fish_prompt_direnv
-    [ -z "$DIRENV_DIR" ]
-    and return
-    set_color yellow
-    echo -n -s '⧉ '
-    set_color normal
-end
-
-function __fish_prompt_virtualenv
-    [ -z "$VIRTUAL_ENV" ]
-    and return
-    set_color green
-    echo -ns 'venv:' (basename "$VIRTUAL_ENV") ' '
-    set_color normal
-end
-
-function fish_right_prompt
-    __fish_prompt_direnv
-    __fish_prompt_nix_shell
-    __fish_prompt_virtualenv
-end

@@ -1,31 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-with lib;
-let
-  cfg = config.profiles.avahi;
-in
-{
-  options = {
-    profiles.avahi = {
-      enable = mkOption {
-        default = false;
-        description = "Enable avahi profile";
-        type = types.bool;
-      };
-    };
-  };
-  config = mkIf cfg.enable {
-    services = {
-      avahi = {
-        enable = true;
-        ipv4 = true;
-        ipv6 = true;
-        nssmdns = true;
-        publish = {
-          enable = true;
-          userServices = true;
-        };
-      };
-    };
-  };
-}

@@ -1,54 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-with lib;
-let
-  cfg = config.profiles.base;
-in
-{
-  options = {
-    profiles.base = {
-      enable = mkOption {
-        default = true;
-        description = "Enable base profile";
-        type = types.bool;
-      };
-    };
-  };
-  config = mkIf cfg.enable {
-    boot.loader.systemd-boot.enable = true;
-    environment = {
-      variables = {
-        EDITOR = pkgs.lib.mkOverride 0 "vim";
-      };
-      systemPackages = with pkgs; [
-        cachix
-        direnv
-        exa
-        file
-        htop
-        iotop
-        lsof
-        netcat
-        psmisc
-        pv
-        tmux
-        tree
-        vim
-        vrsync
-        wget
-	gnumake
-      ];
-    };
-    systemd.services."status-email-root@" = {
-      description = "status email for %i to vincent";
-      serviceConfig = {
-        Type = "oneshot";
-        ExecStart = ''
-          ${pkgs.nur.repos.vdemeester.systemd-email}/bin/systemd-email vincent@demeester.fr %i
-        '';
-        User = "root";
-        Environment = "PATH=/run/current-system/sw/bin";
-      };
-    };
-  };
-}

@@ -1,44 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-with lib;
-let
-  cfg = config.profiles.buildkit;
-in
-{
-  options = {
-    profiles.buildkit = {
-      enable = mkOption {
-        default = false;
-        description = "Enable buildkit profile";
-        type = types.bool;
-      };
-      package = mkOption {
-        default = pkgs.nur.repos.vdemeester.buildkit;
-        description = "buildkit package to be used";
-        type = types.package;
-      };
-      runcPackage = mkOption {
-        default = pkgs.nur.repos.vdemeester.runc;
-        description = "runc package to be used";
-        type = types.package;
-      };
-    };
-  };
-  config = mkIf cfg.enable {
-    profiles.containerd = {
-      enable = true;
-      runcPackage = cfg.runcPackage;
-    };
-    environment.systemPackages = with pkgs; [
-      cfg.package
-    ];
-    virtualisation = {
-      buildkitd= {
-        enable = true;
-        package = cfg.package;
-        packages = [ cfg.runcPackage pkgs.git ];
-        extraOptions = "--oci-worker=false --containerd-worker=true";
-      };
-    };
-  };
-}

@@ -1,52 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-with lib;
-let
-  cfg = config.profiles.containerd;
-in
-{
-  options = {
-    profiles.containerd = {
-      enable = mkOption {
-        default = false;
-        description = "Enable containerd profile";
-        type = types.bool;
-      };
-      package = mkOption {
-        default = pkgs.nur.repos.vdemeester.containerd;
-        description = "containerd package to be used";
-        type = types.package;
-      };
-      runcPackage = mkOption {
-        default = pkgs.runc;
-        description = "runc package to be used";
-        type = types.package;
-      };
-      cniPackage = mkOption {
-        default = pkgs.cni;
-        description = "cni package to be used";
-        type = types.package;
-      };
-      cniPluginsPackage = mkOption {
-        default = pkgs.cni-plugins;
-        description = "cni-plugins package to be used";
-        type = types.package;
-      };
-    };
-  };
-  config = mkIf cfg.enable {
-    environment.systemPackages = with pkgs; [
-      cfg.cniPackage
-      cfg.cniPluginsPackage
-      cfg.package
-      cfg.runcPackage
-    ];
-    virtualisation = {
-      containerd = {
-        enable = true;
-        package = cfg.package;
-        packages = [ cfg.runcPackage ];
-      };
-    };
-  };
-}

@@ -1,209 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-with lib;
-let
-  cfg = config.profiles.desktop;
-in
-{
-  options = {
-    profiles.desktop = {
-      enable = mkOption {
-        default = false;
-        description = "Enable desktop profile";
-        type = types.bool;
-      };
-      avahi = mkOption {
-        default = true;
-        description = "Enable avahi  with the desktop profile";
-        type = types.bool;
-      };
-      pulseaudio = mkOption {
-        default = true;
-        description = "Enable pulseaudio with the desktop profile";
-        type = types.bool;
-      };
-      flatpak = mkOption {
-        default = true;
-        description = "Enable flatpak with the desktop profile";
-        type = types.bool;
-      };
-      syncthing = mkOption {
-        default = true;
-        description = "Enable syncthing with the desktop profile";
-        type = types.bool;
-      };
-      scanning = mkOption {
-        default = true;
-        description = "Enable scanning with the desktop profile";
-        type = types.bool;
-      };
-      printing = mkOption {
-        default = true;
-        description = "Enable printing with the desktop profile";
-        type = types.bool;
-      };
-      networkmanager = mkOption {
-        default = true;
-        description = "Enable networkmanager with the desktop profile";
-        type = types.bool;
-      };
-      autoLogin = mkOption {
-        default = false;
-        description = "Enable auto login";
-        type = types.bool;
-      };
-    };
-  };
-  config = mkIf cfg.enable {
-    profiles.avahi.enable = cfg.avahi;
-    profiles.printing.enable = cfg.printing;
-    profiles.pulseaudio.enable = cfg.pulseaudio;
-    profiles.scanning.enable = cfg.scanning;
-    profiles.syncthing.enable = cfg.syncthing;
-
-    boot = {
-      tmpOnTmpfs = true;
-      plymouth.enable = true;
-    };
-
-    hardware.bluetooth.enable = true;
-
-    networking.networkmanager = {
-      enable = cfg.networkmanager;
-      unmanaged = [
-        "interface-name:ve-*"
-        "interface-name:veth*"
-        "interface-name:wg0"
-        "interface-name:docker0"
-        "interface-name:virbr*"
-      ];
-      packages = with pkgs; [ networkmanager-openvpn ];
-    };
-
-    programs.dconf.enable = true;
-    xdg.portal.enable = cfg.flatpak;
-
-    services = {
-      flatpak.enable = cfg.flatpak;
-      dbus.packages = [ pkgs.gnome3.dconf ];
-      xserver = {
-        enable = true;
-        enableTCP = false;
-        windowManager.twm.enable = true;
-        libinput.enable = true;
-        synaptics.enable = false;
-        layout = "fr(bepo),fr";
-        xkbVariant = "oss";
-        xkbOptions = "grp:menu_toggle,grp_led:caps,compose:caps";
-        inputClassSections = [
-          ''
-            Identifier      "TypeMatrix"
-            MatchIsKeyboard "on"
-            MatchVendor     "TypeMatrix.com"
-            MatchProduct    "USB Keyboard"
-            Driver          "evdev"
-            Option          "XbkModel"      "tm2030USB"
-            Option          "XkbLayout"     "fr"
-            Option          "XkbVariant"    "bepo"
-          ''
-          ''
-            Identifier      "ErgoDox"
-            #MatchVendor     "ErgoDox_EZ"
-            #MatchProduct    "ErgoDox_EZ"
-            MatchIsKeyboard "on"
-            MatchUSBID      "feed:1307"
-            Driver          "evdev"
-            Option          "XkbLayout"     "fr"
-            Option          "XkbVariant"    "bepo"
-          ''
-        ];
-        displayManager = {
-          # defaultSession = "none+i3";
-          lightdm = {
-            enable = true;
-            autoLogin = {
-              enable = true;
-              user = "vincent";
-            };
-          };
-        };
-      };
-    };
-    fonts = {
-      enableFontDir = true;
-      enableGhostscriptFonts = true;
-      fonts = with pkgs; [
-        corefonts
-        dejavu_fonts
-        emojione
-        feh
-        fira
-        fira-code
-        fira-code-symbols
-        fira-mono
-        hasklig
-        inconsolata
-        iosevka
-        noto-fonts
-        noto-fonts-cjk
-        noto-fonts-emoji
-        noto-fonts-extra
-        overpass
-        symbola
-        source-code-pro
-        twemoji-color-font
-        ubuntu_font_family
-        unifont
-      ];
-    };
-
-    # Polkit.
-    security.polkit.extraConfig = ''
-      polkit.addRule(function(action, subject) {
-      if ((action.id == "org.freedesktop.udisks2.filesystem-mount-system" ||
-      action.id == "org.freedesktop.udisks2.encrypted-unlock-system"
-      ) &&
-      subject.local && subject.active && subject.isInGroup("users")) {
-      return polkit.Result.YES;
-      }
-      var YES = polkit.Result.YES;
-      var permission = {
-      // required for udisks1:
-      "org.freedesktop.udisks.filesystem-mount": YES,
-      "org.freedesktop.udisks.luks-unlock": YES,
-      "org.freedesktop.udisks.drive-eject": YES,
-      "org.freedesktop.udisks.drive-detach": YES,
-      // required for udisks2:
-      "org.freedesktop.udisks2.filesystem-mount": YES,
-      "org.freedesktop.udisks2.encrypted-unlock": YES,
-      "org.freedesktop.udisks2.eject-media": YES,
-      "org.freedesktop.udisks2.power-off-drive": YES,
-      // required for udisks2 if using udiskie from another seat (e.g. systemd):
-      "org.freedesktop.udisks2.filesystem-mount-other-seat": YES,
-      "org.freedesktop.udisks2.filesystem-unmount-others": YES,
-      "org.freedesktop.udisks2.encrypted-unlock-other-seat": YES,
-      "org.freedesktop.udisks2.eject-media-other-seat": YES,
-      "org.freedesktop.udisks2.power-off-drive-other-seat": YES
-      };
-      if (subject.isInGroup("wheel")) {
-      return permission[action.id];
-      }
-      });
-    '';
-
-    environment.systemPackages = with pkgs; [
-      cryptsetup
-      xlibs.xmodmap
-      xorg.xbacklight
-      xorg.xdpyinfo
-      xorg.xhost
-      xorg.xinit
-      xss-lock
-      xorg.xmessage
-      unzip
-      gnupg
-      pinentry
-      inxi
-    ];
-  };
-}

@@ -1,27 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-with lib;
-let
-  cfg = config.profiles.dev;
-in
-{
-  options = {
-    profiles.dev = {
-      enable = mkOption {
-        default = false;
-        description = "Enable dev profile";
-        type = types.bool;
-      };
-    };
-  };
-  config = mkIf cfg.enable {
-    profiles.git.enable = true;
-    environment.systemPackages = with pkgs; [
-      git
-      tig
-      grc
-      ripgrep
-      gnumake
-    ];
-  };
-}

@@ -1,43 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-with lib;
-let
-  cfg = config.profiles.docker;
-in
-{
-  options = {
-    profiles.docker = {
-      enable = mkOption {
-        default = false;
-        description = "Enable docker profile";
-        type = types.bool;
-      };
-      package = mkOption {
-        default = pkgs.docker-edge;
-        description = "docker package to be used";
-        type = types.package;
-      };
-      runcPackage = mkOption {
-        default = pkgs.runc;
-        description = "runc package to be used";
-        type = types.package;
-      };
-    };
-  };
-  config = mkIf cfg.enable {
-    profiles.containerd.enable = true;
-    virtualisation = {
-      docker = {
-        enable = true;
-        package = cfg.package;
-        liveRestore = false;
-        storageDriver = "overlay2";
-        extraOptions = "--experimental --add-runtime docker-runc=${cfg.runcPackage}/bin/runc --default-runtime=docker-runc --containerd=/run/containerd/containerd.sock";
-      };
-    };
-    environment.etc."docker/daemon.json".text = ''
-      {"features":{"buildkit": true}, "insecure-registries": ["172.30.0.0/16", "192.168.12.0/16", "massimo.home:5000", "r.svc.home:5000", "r.svc.home" ]} 
-    '';
-    networking.firewall.trustedInterfaces = [ "docker0" ];
-  };
-}

@@ -1,28 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-with lib;
-let
-  cfg = config.profiles.fish;
-in
-{
-  options = {
-    profiles.fish = {
-      enable = mkOption {
-        default = false;
-        description = "Enable fish profile";
-        type = types.bool;
-      };
-    };
-  };
-  config = mkIf cfg.enable {
-    programs.fish = {
-      enable = true;
-      promptInit = ''
-        source /etc/fish/functions/fish_prompt.fish
-        source /etc/fish/functions/fish_right_prompt.fish
-      '';
-    };
-    environment.etc."fish/functions/fish_prompt.fish".source = ./assets/fish/fish_prompt.fish;
-    environment.etc."fish/functions/fish_right_prompt.fish".source = ./assets/fish/fish_right_prompt.fish;
-  };
-}

@@ -1,30 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-with lib;
-let
-  cfg = config.profiles.gaming;
-in
-{
-  options = {
-    profiles.gaming = {
-      enable = mkOption {
-        default = false;
-        description = "Enable gaming profile";
-        type = types.bool;
-      };
-    };
-  };
-  config = mkIf cfg.enable {
-    hardware = {
-      opengl = {
-        driSupport32Bit = true;
-      };
-    };
-    services.udev.extraRules = ''
-      # Steam controller
-      SUBSYSTEM=="usb", ATTRS{idVendor}=="28de", MODE="0666"
-      KERNEL=="uinput", MODE="0660", GROUP="users", OPTIONS+="static_node=uinput"
-    '';
-    environment.systemPackages = with pkgs; [ steam ];
-  };
-}

@@ -1,73 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-with lib;
-let
-  cfg = config.profiles.git;
-in
-{
-  options = {
-    profiles.git = {
-      enable = mkOption {
-        default = false;
-        description = "Enable git profile";
-        type = types.bool;
-      };
-    };
-  };
-  config = mkIf cfg.enable {
-    environment.systemPackages = with pkgs; [
-      gitAndTools.gitFull
-      gitAndTools.git-annex
-      gitAndTools.git-extras
-    ];
-    environment.etc."gitconfig" = rec { text = ''
-  [alias]
-      co = checkout
-      st = status
-      ci = commit --signoff
-      ca = commit --amend
-      b = branc --color -v
-      br = branch
-      unstage = reset HEAD
-      lg = log --graph --pretty=format:'%Cred%h%Creset -%C(yellow)%d%Creset %s %Cgreen(%cr)%Creset' --abbrev-commit --date=relative
-      lga = log --graph --pretty=format:'%Cred%h%Creset -%C(yellow)%d%Creset %s %Cgreen(%cr)%Creset' --abbrev-commit --date=relative --branches --remotes
-      lol = log --pretty=oneline --abbrev-commit --graph --decorate
-      conflicts = !git ls-files --unmerged | cut -c51- | sort -u | xargs $EDITOR
-      resolve = !git ls-files --unmerged | cut -c51- | sort -u | xargs git add
-  [color]
-  	branch = auto
-  	diff = auto
-  	status = auto
-  [color "branch"]
-  	current = cyan reverse
-  	local = cyan
-  	remote = green
-  [color "diff"]
-  	meta = white reverse
-  	frag = magenta reverse
-  	old = red
-  	new = green
-  [color "status"]
-  	added = green
-  	changed = yellow
-  	untracked = red
-  [core]
-  	#excludesfile = ~/.gitignore.global
-  [push]
-  	default = matching
-  [merge]
-      tool = vimdiff
-
-  [user]
-      name = Vincent Demeester
-      email = vincent@sbr.pm
-
-  [http]
-          cookiefile = /home/vincent/.gitcookies
-
-  [url "git@github.com:"]
-      pushInsteadOf = git://github.com/
-    '';
-    };
-  };
-}