nix/README.md

# NixOS Configuration Repository
## NOTE:  These configs expect this repo to be cloned to /etc/nixos/git/
```
git clone https://git.sysctl.io/albert/nix /etc/nixos/git
ln -s /etc/nixos/git/flake.nix /etc/nixos/flake.nix
nixos-rebuild switch --flake '/etc/nixos#<HOSTNAME>'
```

---
# To Do List
* [ ] set up pinentry on awesome-hyprland
* [ ] Remove rofi alt-tab shortcuts.  Find another alternative
* [ ] swayosd
* [ ] wayprompt
* [ ] wlogout
* [ ] cli-based filebrowser for hyprland
* [ ] Learn all the nvim plugins, specifically ones dealing with tabs
* [ ] Fix cursor size on hyprland
* [ ] Find a way to adjust window sizes with a keyboard shortcut in Hyprland
* [ ] Try disko - [Link](https://github.com/nix-community/disko)
* [ ] btrfs snapshots
* [ ] weechat / weechat-matrix
  * [ ] weechat overlay - [Link](https://nixos.wiki/wiki/Weechat) - for weechat-matrix
* [ ] vscodium and user-config.js file?
* [ ] rofi - bitwarden-cli / bitwarden-menu ([Link](https://search.nixos.org/packages?channel=23.05&show=bitwarden-menu&from=0&size=50&sort=relevance&type=packages&query=bitwarden))
* [ ] Try and submit this as a nixpkg - [Link](https://github.com/SylEleuth/gruvbox-plus-icon-pack)
* [ ] doom-emacs / spacemacs overlay install / configuration
  * [ ] Set up a git repo for auto syncing
* [ ] gnome-terminal theming (or alternatives)
---
# Done
* [x] hyprland
  * [x] Try hyprctl
  * [x] hyprbars - [Link](https://github.com/hyprwm/hyprland-plugins/tree/main/hyprbars)
  * [x] libinput-gestures?
  * [x] configure programs.light - keybinds in hyprland config
  * [x] authentication agent (like polkit-kde-agent)
  * [x] Set GTK theme for GTK apps 
* [x] Get the video card working properly (turn off entirely unless in use by a game)
* [x] Possibly move away from powerline-go - I want something simpler
    * Staying with powerline-go, just editing the config in `home-manager/bash.nix`
* [x] Set up the fingerprint reader - [Link](https://www.makeuseof.com/set-up-fingerprint-scanner-with-pam-on-linux/)
* [x] sublime music config / theming / integration - [Link](https://docs.sublimemusic.app/)
* [x] rofi config / theming
* [x] nvidia drivers
* [x] WINE configurations
* [x] btop config / theming
* [x] swaylock config / theming
* [x] Get function keys working (sound, brightness, etc)216752216752216752
* [x] regreet config / theming - Icons still broken for some reason
    * Possibly switch to tuigreet and gruv it
* [x] mako config / theming
* [x] waybar config / theming
* [x] hyprland config / theming
  * [x] Try `libinput-gestures` for gesture control of Hyprland - [Link](https://github.com/bulletmark/libinput-gestures)
* [x] powerline config / theming
* [x] neofetch config / theming
* [x] kitty config / theming
* [x] libadwaita theming on Gnome stuck??
---

# Information
### Home Manager
  * Home Manager Documentation - [Link](https://nix-community.github.io/home-manager/index.html)
  * Home Manager Options Search - [Link](https://mipmip.github.io/home-manager-option-search/)

### NixOS
  * NixOS Documentation - Stable - [Link](https://nixos.org/manual/nixos/stable/)
  * NixOS Packages / Options Search - [Link](https://search.nixos.org/)
  * Nix User Repository (NUR) Search - [Link](https://nur.nix-community.org/)

### Useful Links
  * FlakeHub - [Link](https://flakehub.com)
  * Track a Nixpkgs PR - [Link](https://nixpk.gs/pr-tracker.html)

### Examples
  * Tons of good examples here - [Link](https://github.com/Mic92/dotfiles/blob/main/nixos/modules/)
  * NixOS Flakes Intro Guide - [Link](https://nixos-and-flakes.thiscute.world/)

### Theming
  * Neofetch Themes - [Link](https://github.com/Chick2D/neofetch-themes/)
  * gruvbox-factory - [Link](https://github.com/paulopacitti/gruvbox-factory)
  * Hyprland Gruvboxy - [Link](https://github.com/0bCdian/Hyprland_dotfiles/tree/gruvboxy)

---
# Theming
* To change system-wide themes, you need to change the following:
### gnome
  1.  `desktops/gnome.nix` - Change the imports at the bottom.
  2.  `users/albert/gnome-conf.nix` - Change the variables at the top.
### neovim
  1.  `home-manager/neovim.nix` - Change the following:
      * `plugins = with pkgs.vimPlugins` - Add your theme under "Themes"
      * `extraConfig` - Change the `colorscheme` and `AirlineTheme` sections
### hyprland
  1.  `hosts/$HOSTNAME/home-manager/hyprland/hyprland-conf.nix` - Change the `WALLPAPER_DIR` variable in `".config/hypr/start.sh".text`
  2.  `hosts/$HOSTNAME/home-manager/hyprland/hyprland-conf.nix` - Change `col.active_border` and `col.inactive_border` in the `general` section.
  3.  `home-manager/bash.nix` - Update the `sessionVariable` variable `GTK_THEME`
### waybar
  1.  `hosts/$HOSTNAME/home-manager/hyprland/waybar-conf.nix` - Update all relevant colors.  Possibly make configs for colorschemes and import them.
### swaylock
  1.  `hosts/$HOSTNAME/home-manager/hyprland/swaylock-conf.nix` - Update all relevant colors.  Possibly make configs for colorschemes and import them.
### kitty
  1.  `home-manager/kitty.nix` - Update the content of `home.file.".config/kitty/theme.conf".text`
### Firefox
  1.  `home-manager/firefox.nix` - Change the entry under "# Theming"
### btop
  1.  `home-manager/btop.nix` - Set `color_theme`
### bash / powerline
  1.  `home-manager/bash.nix` - Set `theme` in `programs.powerline-go.settings`
### neofetch
  1.  `home-manager/neofetch.nix` - Update the contents of `home.file.".config/neofetch/config.conf".text`

# GPG Keys
1.  Import the user private key: `gpg import gpg/users/albert/privkey.asc`
2.  Mark it as trusted:  `gpg --edit-key albert@sysctl.io`, then type `trust`, then `5`
3.  On each new machine, run `nix-shell -p ssh-to-pgp --run "ssh-to-pgp -i /etc/ssh/ssh_host_rsa_key -o HOSTNAME.asc"`
    * This will output the identifier you add to `.sops.yaml`
    * Move `HOSTNAME.asc` to `keys/hosts/` and upload to git and rename accordingly.

# Secrets
1.  To edit a file: cd to `/path/to/nix-files/` and run:
    * `nix-shell -p sops --run "sops secrets/secret_file.yml"`
    * New shell alias: `sops secrets/secret_file.yml`
2.  When you add a new machine, you must update the secrets files encryption.  
    * Run `sops-update secrets/secrets.yaml` and commit the change.

# Lanzaboote / SecureBoot
*  Instructions here - [Link](https://git.sysctl.io/Mirrors/lanzaboote/src/branch/master/docs/QUICK_START.md)
1. Create your keys: `sbctl create-keys`
2.  Verify your machine is ready for SecureBoot:  `sbctl verify` - Everything except `*-bzImage.efi` are signed  
3.  Enter Secureboot Setup mode in your EFI Settings on the motherboard (F10)
    * Security -> SecureBoot -> Set to Enabled and "Reset to Setup Mode" and exit
4.  Enroll the keys:  `sbctl enroll-keys --microsoft` 
    * If you wish, you can select `--tpm-eventlog`, but checksums will change later (ie, at a kernel rebuild)
5.  Reboot and verify you are activated:  `bootctl status`