split waybar into multiple files

instances/ds9/services/woodpecker.nix

@@ -52,7 +52,7 @@
       WOODPECKER_SERVER = "[::1]:19000";
       WOODPECKER_BACKEND = "docker";
       WOODPECKER_MAX_WORKFLOWS = 4;
-      DOCKER_HOST = "unix:///run/podman/podman.sock";
+      DOCKER_HOST = "unix:///run/podman/podman.sock"; # the woodpecker can have a little podman. as a treat
     };
     environmentFile = [
       config.sops.secrets."woodpecker/agent_secret".path

instances/theseus/configuration.nix

@@ -15,7 +15,10 @@ in
   nixpkgs.system = "x86_64-linux";
   imports = [ ./hardware-configuration.nix ];
   boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
-  services.fido2-hid-bridge.enable = true;
+
+  # TODO: remove when turning on impermanence
+  sops.gnupg.sshKeyPaths = [ "/etc/ssh/ssh_host_rsa_key" ];
+
   home-manager.users.${config.xyno.system.user.name} = (
     { ... }:
     {
@@ -25,8 +28,6 @@ in
   nixpkgs.config.permittedInsecurePackages = [
     "olm-3.2.16"
   ];
-  services.vsmartcard-vpcd.enable = true;
-  hardware.gpgSmartcards.enable = true;
   networking.firewall.interfaces."tailscale0".allowedTCPPorts = [ 35963 ];
   security.wrappers.unfuck-wifi = {
     owner = "root";
@@ -47,7 +48,7 @@ in
     pandoc
     tectonic
     rquickshare
-    supersonic
+    supersonic-wayland
     nheko
     anki-bin
     gimp3
@@ -59,10 +60,15 @@ in
     pencil2d
     python311Packages.brother-ql
     ptouch-print
+    hledger
 
   ];
+  environment.variables."LEDGER_FILE" = "~/docs/hledger/main.journal";
 
   time.timeZone = "Europe/Berlin";
+
+
+  # orcaslicer
   networking.firewall.allowedTCPPorts = [
     1880
     2021
@@ -77,6 +83,7 @@ in
   xyno.common.enable = true;
   xyno.desktop.common-programs.enable = true;
   xyno.hardware.kmonad.enable = true;
+  xyno.hardware.smartcard.enable = true;
   xyno.presets.cli.enable = true;
   xyno.presets.gui.enable = true;
   xyno.presets.development.enable = true;

instances/theseus/default.nix

@@ -1,6 +1,7 @@
 {
   modules = [ ./configuration.nix ];
   hostName = "theseus";
+  sopsKey = "4019fd893bba15618c2f93a38ef418ce360bc418";
   wg = {
     pubKey = "";
   };

instances/theseus/hardware-configuration.nix

@@ -60,9 +60,11 @@
     ];
   };
 
-  swapDevices = [
-    { device = "/dev/disk/by-uuid/96c380b3-4498-4eb8-8a18-5eebe2a41428"; }
-  ];
+  # swapDevices = [
+  #   { device = "/dev/disk/by-uuid/96c380b3-4498-4eb8-8a18-5eebe2a41428"; }
+  # ];
+  zramSwap.enable = true;
+  zramSwap.writebackDevice = "/dev/disk/by-uuid/96c380b3-4498-4eb8-8a18-5eebe2a41428";
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's