treewide: fmt

flake.nix

@@ -43,7 +43,13 @@
     };
   };
 
-  outputs = inputs@{ self, flake-parts, nixinate, ... }:
+  outputs =
+    inputs@{
+      self,
+      flake-parts,
+      nixinate,
+      ...
+    }:
     flake-parts.lib.mkFlake { inherit inputs; } {
 
       imports = [
@@ -52,13 +58,22 @@
         inputs.git-hooks.flakeModule
       ];
 
-      systems = [ "x86_64-linux" "aarch64-linux" ];
+      systems = [
+        "x86_64-linux"
+        "aarch64-linux"
+      ];
 
-      perSystem = { inputs', config, pkgs, system, ... }: {
+      perSystem =
+        {
+          inputs',
+          config,
+          pkgs,
+          system,
+          ...
+        }:
+        {
           # make pkgs available to all `perSystem` functions
-        _module.args.pkgs = import inputs.nixpkgs {
+          _module.args.pkgs = import inputs.nixpkgs { inherit system; };
-          inherit system;
-        };
 
           # enable pre-commit checks
           pre-commit.settings = {
@@ -77,7 +92,10 @@
               statix.enable = true;
               typos = {
                 enable = true;
-              excludes = [ "secrets\\.yaml" "\\.sops\\.yaml" ];
+                excludes = [
+                  "secrets\\.yaml"
+                  "\\.sops\\.yaml"
+                ];
                 settings.ignored-words = [ "flate" ];
               };
               yamllint = {
@@ -88,9 +106,7 @@
           };
 
           devShells.default = pkgs.mkShell {
-          inputsFrom = [
+            inputsFrom = [ config.pre-commit.devShell ];
-            config.pre-commit.devShell
-          ];
             nativeBuildInputs = with pkgs; [
               inputs'.sops-nix.packages.sops-import-keys-hook
               inputs'.disko.packages.disko

images/base-config.nix

@@ -1,9 +1,11 @@
 # based on: https://github.com/Mic92/dotfiles/blob/main/nixos/images/base-config.nix
-{ lib
+{
-, pkgs
+  lib,
-, config
+  pkgs,
-, ...
+  config,
-}: {
+  ...
+}:
+{
   system.stateVersion = config.system.nixos.version;
 
   networking = {
@@ -23,7 +25,8 @@
     network.enable = true;
     network.networks =
       lib.mapAttrs'
-        (num: _:
+        (
+          num: _:
           lib.nameValuePair "eth${num}" {
             matchConfig.Name = "eth${num}";
             networkConfig = {
@@ -40,7 +43,8 @@
               RouteMetric = 512;
             };
             ipv6AcceptRAConfig.Token = "::521a:c5ff:fefe:65d9";
-          })
+          }
+        )
         {
           "0" = { };
           "1" = { };

images/flake-module.nix

@@ -2,25 +2,19 @@
 let
   inherit (self.inputs) nixos-generators;
   defaultModule = {
-    imports = [
+    imports = [ ./base-config.nix ];
-      ./base-config.nix
-    ];
     _module.args.inputs = self.inputs;
   };
 in
 {
   perSystem =
-    { pkgs
+    { pkgs, ... }:
-    , ...
-    }:
     {
       packages = {
         install-iso = nixos-generators.nixosGenerate {
           system = "x86_64-linux";
           inherit pkgs;
-          modules = [
+          modules = [ defaultModule ];
-            defaultModule
-          ];
           format = "install-iso";
         };
 

images/rpi4-image.nix

@@ -1,6 +1,7 @@
 # nix build .#install-sd-aarch64 --system aarch64-linux
 # zstd -vdcfT6 /nix/store/...-aarch64-linux.img/sd-image/...-aarch64-linux.img.zst  | dd of=/dev/sdX status=progress bs=64K
-{ ... }: {
+{ ... }:
+{
   nixpkgs.localSystem.system = "aarch64-linux";
   imports = [
     <nixpkgs/nixos/modules/installer/sd-card/sd-image-aarch64.nix>

images/yubikey-installer.nix

@@ -2,7 +2,13 @@
 # nix build -f yubikey-installer.nix nixos-yubikey
 # sudo cp -v installer/iso/*.iso /dev/sdb; sync
 let
-  configuration = { config, lib, pkgs, ... }:
+  configuration =
+    {
+      config,
+      lib,
+      pkgs,
+      ...
+    }:
     with pkgs;
     let
       src = fetchGit "https://github.com/drduh/YubiKey-Guide";
@@ -54,12 +60,17 @@ let
 
       yubikey-guide = symlinkJoin {
         name = "yubikey-guide";
-        paths = [ view-yubikey-guide shortcut ];
+        paths = [
+          view-yubikey-guide
+          shortcut
+        ];
       };
 
     in
     {
-      nixpkgs.config = { allowBroken = true; };
+      nixpkgs.config = {
+        allowBroken = true;
+      };
 
       isoImage.isoBaseName = lib.mkForce "nixos-yubikey";
       # Uncomment this to disable compression and speed up image creation time
@@ -72,7 +83,9 @@ let
         kernelParams = [ "copytoram" ];
         # Secure defaults
         tmp.cleanOnBoot = true;
-        kernel.sysctl = { "kernel.unprivileged_bpf_disabled" = 1; };
+        kernel.sysctl = {
+          "kernel.unprivileged_bpf_disabled" = 1;
+        };
       };
 
       services.pcscd.enable = true;

machines/configurations.nix

@@ -1,7 +1,6 @@
 { self, ... }:
 let
-  inherit
+  inherit (self.inputs)
-    (self.inputs)
     nixpkgs
     nixpkgs-unstable
     sops-nix
@@ -26,18 +25,19 @@ let
     }
     {
       imports = [
-        ({ pkgs, ... }: {
+        (
+          { pkgs, ... }:
+          {
             nixpkgs.config.allowUnfree = true;
             nixpkgs.overlays = [
               overlay-unstable
               (import ../overlays)
               (import ../pkgs)
             ];
-          nix.nixPath = [
+            nix.nixPath = [ "nixpkgs=${pkgs.path}" ];
-            "nixpkgs=${pkgs.path}"
-          ];
             documentation.info.enable = false;
-        })
+          }
+        )
         disko.nixosModules.disko
         passworts.nixosModules.passworts
         sops-nix.nixosModules.sops
@@ -60,9 +60,7 @@ in
     };
     newton = nixosSystem {
       system = "x86_64-linux";
-      modules = defaultModules ++ [
+      modules = defaultModules ++ [ ./newton/configuration.nix ];
-        ./newton/configuration.nix
-      ];
     };
     serverle = nixosSystem {
       system = "aarch64-linux";

machines/core/modules.nix

@@ -1,5 +1,4 @@
-_:
+_: {
-{
   boot.initrd = {
     availableKernelModules = [
       "ahci"

machines/core/network.nix

@@ -1,5 +1,4 @@
-_:
+_: {
-{
   networking.networkmanager = {
     enable = true;
 

machines/newton/boot.nix

@@ -1,5 +1,4 @@
-_:
+_: {
-{
   boot.loader = {
     timeout = 1;
     grub = {

machines/newton/disko-config.nix

@@ -18,9 +18,7 @@
                 type = "filesystem";
                 format = "vfat";
                 mountpoint = "/boot";
-                mountOptions = [
+                mountOptions = [ "defaults" ];
-                  "defaults"
-                ];
               };
             };
             luks = {

machines/newton/hardware-configuration.nix

@@ -1,4 +1,9 @@
-{ config, lib, modulesPath, ... }:
+{
+  config,
+  lib,
+  modulesPath,
+  ...
+}:
 {
   imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
 
@@ -9,9 +14,7 @@
     "virtio_pci"
     "virtio_scsi"
   ];
-  boot.initrd.kernelModules = [
+  boot.initrd.kernelModules = [ "dm-snapshot" ];
-    "dm-snapshot"
-  ];
 
   hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
 }

machines/newton/network.nix

@@ -27,7 +27,9 @@ let
 in
 {
   # kernel parameters are needed for initrd
-  boot.kernelParams = [ "ip=${ip4_addr}::${ip4_gw}:${ip4_mask}:${config.networking.hostName}:${ifname}:off" ];
+  boot.kernelParams = [
+    "ip=${ip4_addr}::${ip4_gw}:${ip4_mask}:${config.networking.hostName}:${ifname}:off"
+  ];
   networking = {
     nameservers = ip4_dns ++ ip6_dns;
     domain = "buehler.rocks";

machines/newton/system.nix

@@ -1,6 +1,5 @@
 # enabled system services
-_:
+_: {
-{
   my.system = {
     podman.enable = true;
   };

machines/serverle/disko-config.nix

@@ -18,9 +18,7 @@
                 type = "filesystem";
                 format = "vfat";
                 mountpoint = "/boot";
-                mountOptions = [
+                mountOptions = [ "defaults" ];
-                  "defaults"
-                ];
               };
             };
             luks = {

machines/serverle/network.nix

@@ -1,5 +1,4 @@
-_:
+_: {
-{
   networking.firewall.allowedTCPPorts = [
     8080 # aria
   ];

machines/serverle/syncthing.nix

@@ -74,9 +74,7 @@
         "Aria2" = {
           id = "jjnzq-pgzua";
           path = "/data/tmp/aria2";
-          devices = [
+          devices = [ "thinkman" ];
-            "thinkman"
-          ];
         };
       };
     };

machines/serverle/system.nix

@@ -1,6 +1,5 @@
 # enabled system services
-_:
+_: {
-{
   my.system = {
     avahi.enable = true;
     docker.enable = true;

machines/thinkman/boot.nix

@@ -1,5 +1,4 @@
-_:
+_: {
-{
   boot = {
     loader = {
       timeout = 1;

machines/thinkman/disko-config.nix

@@ -18,9 +18,7 @@
                 type = "filesystem";
                 format = "vfat";
                 mountpoint = "/boot";
-                mountOptions = [
+                mountOptions = [ "defaults" ];
-                  "defaults"
-                ];
               };
             };
             luks = {

machines/thinkman/network.nix

@@ -1,6 +1,5 @@
 # network settings
-_:
+_: {
-{
   # hotfixes for dns settings
   networking.extraHosts =
     let

machines/thinkman/profiles.nix

@@ -1,6 +1,5 @@
 # enabled profiles
-_:
+_: {
-{
   my.profiles = {
     "3d-design".enable = true;
     android.enable = true;

machines/thinkman/remote-build.nix

@@ -9,7 +9,11 @@ in
     {
       hostName = "buehler.rocks";
       system = "x86_64-linux";
-      supportedFeatures = [ "benchmark" "kvm" "big-parallel" ];
+      supportedFeatures = [
+        "benchmark"
+        "kvm"
+        "big-parallel"
+      ];
       sshUser = "nixremote";
       sshKey = secrets."nixremote/ssh_key".path;
       maxJobs = 4;

machines/thinkman/system.nix

@@ -1,6 +1,5 @@
 # enabled system services
-_:
+_: {
-{
   my.system = {
     avahi.enable = true;
     fonts.enable = true;

modules/hardware/bluetooth/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.hardware.bluetooth;
 in
@@ -18,8 +23,6 @@ in
       };
     };
     services.blueman.enable = true;
-    environment.systemPackages = with pkgs; [
+    environment.systemPackages = with pkgs; [ sony-headphones-client ];
-      sony-headphones-client
-    ];
   };
 }

modules/hardware/debug/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.hardware.debug;
 in

modules/hardware/firmware/default.nix

@@ -7,14 +7,20 @@ in
     enable = mkEnableOption "firmware configuration";
 
     cpuFlavor = mkOption {
-      type = with types; nullOr (enum [ "intel" "amd" ]);
+      type =
+        with types;
+        nullOr (enum [
+          "intel"
+          "amd"
+        ]);
       default = null;
       example = "intel";
       description = "Which kind of CPU to activate micro-code updates";
     };
   };
 
-  config = lib.mkIf cfg.enable (lib.mkMerge [
+  config = lib.mkIf cfg.enable (
+    lib.mkMerge [
       {
         hardware = {
           enableRedistributableFirmware = true;
@@ -34,5 +40,6 @@ in
           cpu.amd.updateMicrocode = true;
         };
       })
-  ]);
+    ]
+  );
 }

modules/hardware/graphics/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.hardware.graphics;
 in

modules/hardware/keychron/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.hardware.keychron;
 in

modules/hardware/sound/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.hardware.sound;
 in

modules/hardware/thunderbolt/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.hardware.thunderbolt;
 in
@@ -8,9 +13,7 @@ in
   };
 
   config = lib.mkIf cfg.enable {
-    environment.systemPackages = with pkgs; [
+    environment.systemPackages = with pkgs; [ thunderbolt ];
-      thunderbolt
-    ];
     services.hardware.bolt.enable = true;
   };
 }

modules/hardware/yubikey/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.hardware.yubikey;
 in
@@ -18,8 +23,6 @@ in
     };
     services.pcscd.enable = true;
 
-    environment.systemPackages = with pkgs; [
+    environment.systemPackages = with pkgs; [ yubikey-manager ];
-      yubikey-manager
-    ];
   };
 }

modules/services/alertmanager/config.nix

@@ -14,11 +14,7 @@
   receivers = [
     {
       name = "default";
-      email_configs = [
+      email_configs = [ { to = "server@buehler.rocks"; } ];
-        {
-          to = "server@buehler.rocks";
-        }
-      ];
       webhook_configs = [
         {
           url = "http://localhost:4050/services/hooks/YWxlcnRtYW5hZ2VyX3NlcnZpY2U";

modules/services/alertmanager/default.nix

@@ -1,5 +1,10 @@
 # monitoring system services
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.services.alertmanager;
   inherit (config.networking) domain;
@@ -37,24 +42,18 @@ in
           extraFlags = [ "--cluster.advertise-address 127.0.0.1:${toString cfg.port}" ];
         };
 
-        alertmanagers = [
+        alertmanagers = [ { static_configs = [ { targets = [ "localhost:${toString cfg.port}" ]; } ]; } ];
-          {
-            static_configs = [
-              {
-                targets = [ "localhost:${toString cfg.port}" ];
-              }
-            ];
-          }
-        ];
         scrapeConfigs = [
           {
             job_name = "alertmanager";
-            static_configs = [{
+            static_configs = [
+              {
                 targets = [ "127.0.0.1:${toString cfg.port}" ];
                 labels = {
                   instance = config.networking.hostName;
                 };
-            }];
+              }
+            ];
           }
         ];
       };

modules/services/aria2/default.nix

@@ -1,5 +1,10 @@
 # to download things
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.services.aria2;
   inherit (config.networking) domain;

modules/services/backup/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.services.backup;
 in
@@ -52,9 +57,7 @@ in
       type = with types; listOf str;
       description = lib.mdDoc "additional path(s) to back up";
       default = [ "/" ];
-      example = [
+      example = [ "/home/user" ];
-        "/home/user"
-      ];
     };
     exclude = mkOption {
       type = with types; listOf str;
@@ -100,8 +103,8 @@ in
         # other-os
         "**/.Trash" # apple
         "**/.DS_Store" # apple
-        "**/$RECYCLE.BIN" #windows
+        "**/$RECYCLE.BIN" # windows
-        "**/System Volume Information" #windows
+        "**/System Volume Information" # windows
 
         # var data
         "/var/cache"
@@ -138,9 +141,11 @@ in
       inherit (cfg) doInit;
       compression = "auto,zstd";
 
-      postHook = ''
+      postHook =
+        ''
           if (( $exitStatus > 1 )); then
-      '' + lib.optionalString cfg.OnFailureNotification ''
+        ''
+        + lib.optionalString cfg.OnFailureNotification ''
           # iterate over all logged in users
           for user in $(users); do
             sway_pid=$(${pkgs.procps}/bin/pgrep -x "sway" -u "$user")
@@ -153,10 +158,12 @@ in
               echo "sent notification"
             fi
           done
-      '' + lib.optionalString (cfg.OnFailureMail != null) ''
+        ''
+        + lib.optionalString (cfg.OnFailureMail != null) ''
           journalctl -u borgbackup-job-hetzner.service | ${pkgs.mailutils}/bin/mail -r "Administrator<root@buehler.rocks>" -s "Backup Error" server@buehler.rocks
           echo "sent mail"
-      '' + ''
+        ''
+        + ''
           fi
         '';
 

modules/services/bazarr/default.nix

@@ -31,12 +31,14 @@ in
       prometheus.scrapeConfigs = [
         {
           job_name = "bazarr";
-          static_configs = [{
+          static_configs = [
+            {
               targets = [ "127.0.0.1:${toString port + 1}" ];
               labels = {
                 instance = config.networking.hostName;
               };
-          }];
+            }
+          ];
         }
       ];
     };

modules/services/blackbox/default.nix

@@ -1,5 +1,10 @@
 # monitor urls
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.services.blackbox;
   blackBoxConfig = {
@@ -11,12 +16,8 @@ let
       ssh_banner = {
         prober = "tcp";
         tcp.query_response = [
-          {
+          { send = "SSH-2.0-blackbox-ssh-check"; }
-            send = "SSH-2.0-blackbox-ssh-check";
+          { expect = "^SSH-2.0-"; }
-          }
-          {
-            expect = "^SSH-2.0-";
-          }
         ];
       };
     };

modules/services/blocky/default.nix

@@ -1,5 +1,10 @@
 # Fast and lightweight DNS proxy as ad-blocker for local network
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.services.blocky;
 in

modules/services/freshrss/default.nix

@@ -1,5 +1,10 @@
 # RSS aggregator and reader
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.services.freshrss;
   inherit (config.networking) domain;

modules/services/gitea/default.nix

@@ -1,5 +1,10 @@
 # self-hosted git service
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.services.gitea;
   inherit (config.networking) domain;

modules/services/grafana/default.nix

@@ -1,5 +1,10 @@
 # visualize monitoring services
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.services.grafana;
   inherit (config.networking) domain;

modules/services/hedgedoc/default.nix

@@ -1,5 +1,10 @@
 # HedgeDoc is an open-source, web-based, self-hosted, collaborative markdown editor.
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.services.hedgedoc;
   inherit (config.networking) domain;

modules/services/home-automation/default.nix

@@ -1,5 +1,10 @@
 # home automation
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.services.home-automation;
   inherit (config.networking) domain;

modules/services/homepage/default.nix

@@ -1,5 +1,10 @@
 # My own personal homepage
-{ config, lib, inputs, ... }:
+{
+  config,
+  lib,
+  inputs,
+  ...
+}:
 let
   cfg = config.my.services.homepage;
   inherit (config.networking) domain;

modules/services/homer/config.nix

@@ -3,7 +3,8 @@
 {
   options.webapps = {
     dashboardCategories = lib.mkOption {
-      type = lib.types.listOf (lib.types.submodule {
+      type = lib.types.listOf (
+        lib.types.submodule {
           options = {
             name = lib.mkOption {
               type = lib.types.str;
@@ -20,7 +21,8 @@
               example = "app";
             };
           };
-      });
+        }
+      );
       description = ''
         App categories to display on the dashboard.
       '';
@@ -34,8 +36,8 @@
     };
 
     apps = lib.mkOption {
-      type = lib.types.attrsOf
+      type = lib.types.attrsOf (
-        (lib.types.submodule {
+        lib.types.submodule {
           options = {
             dashboard = {
               url = lib.mkOption {
@@ -79,7 +81,10 @@
                 default = "Ping";
               };
               method = lib.mkOption {
-                type = lib.types.enum [ "get" "head" ];
+                type = lib.types.enum [
+                  "get"
+                  "head"
+                ];
                 description = ''
                   method of request used
                 '';
@@ -88,7 +93,8 @@
               };
             };
           };
-        });
+        }
+      );
       description = ''
         Defines a web application.
       '';
@@ -105,24 +111,33 @@
         let
           apps = builtins.filter (a: a.dashboard.name != null) (lib.attrValues cfg.apps);
         in
-        lib.forEach cfg.dashboardCategories (cat:
+        lib.forEach cfg.dashboardCategories (
+          cat:
           let
             catApps = lib.sort (a: b: a.dashboard.name < b.dashboard.name) (
-              builtins.filter
+              builtins.filter (
-                (a:
+                a:
-                  a.dashboard.category != null && a.dashboard.category == cat.tag ||
+                a.dashboard.category != null && a.dashboard.category == cat.tag
-                  a.dashboard.category == null && cat.tag == "misc")
+                || a.dashboard.category == null && cat.tag == "misc"
-                apps);
+              ) apps
+            );
           in
           {
             inherit (cat) name;
             items = lib.forEach catApps (a: {
-              inherit (a.dashboard) method name type url;
+              inherit (a.dashboard)
+                method
+                name
+                type
+                url
+                ;
               icon = lib.optionalString (a.dashboard.icon != null) "fas fa-${a.dashboard.icon}";
               target = "_blank";
             });
           }
         );
-      my.services.blackbox.http_endpoints = lib.mapAttrsToList (_key: value: value.dashboard.url) config.webapps.apps ++ [ "https://${config.networking.domain}/" ];
+      my.services.blackbox.http_endpoints =
+        lib.mapAttrsToList (_key: value: value.dashboard.url) config.webapps.apps
+        ++ [ "https://${config.networking.domain}/" ];
     };
 }

modules/services/homer/default.nix

@@ -1,5 +1,10 @@
 # Dashboard site
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.services.homer;
   inherit (config.networking) domain;
@@ -14,9 +19,7 @@ let
   };
 in
 {
-  imports = [
+  imports = [ ./config.nix ];
-    ./config.nix
-  ];
 
   options.my.services.homer = with lib; {
     enable = mkEnableOption "Homer Dashboard";
@@ -44,10 +47,22 @@ in
 
     webapps = {
       dashboardCategories = [
-        { name = "Applications"; tag = "app"; }
+        {
-        { name = "Media"; tag = "media"; }
+          name = "Applications";
-        { name = "Infrastructure"; tag = "infra"; }
+          tag = "app";
-        { name = "Others"; tag = "other"; }
+        }
+        {
+          name = "Media";
+          tag = "media";
+        }
+        {
+          name = "Infrastructure";
+          tag = "infra";
+        }
+        {
+          name = "Others";
+          tag = "other";
+        }
       ];
     };
   };

modules/services/initrd-ssh/default.nix

@@ -15,9 +15,7 @@ in
       ssh = {
         enable = true;
         port = 2222;
-        hostKeys = [
+        hostKeys = [ "/etc/secrets/initrd/ssh_host_ed25519_key" ];
-          "/etc/secrets/initrd/ssh_host_ed25519_key"
-        ];
         authorizedKeys = [
           "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOFx6OLwL9MbkD3mnMsv+xrzZHN/rwCTgVs758SCLG0h felix@thinkman"
         ];

modules/services/jellyfin/default.nix

@@ -1,5 +1,10 @@
 # The Free Software Media System
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.services.jellyfin;
   inherit (config.networking) domain;
@@ -8,10 +13,7 @@ let
   jellyfin-with-metrics = pkgs.jellyfin.overrideAttrs (attrs: {
     patches =
       let
-        existingPatches =
+        existingPatches = if attrs ? patches && builtins.isList attrs.patches then attrs.patches else [ ];
-          if attrs ? patches && builtins.isList attrs.patches
-          then attrs.patches
-          else [ ];
       in
       # with this patch the default setting for metrics is changed
       existingPatches ++ [ ./enable-metrics.patch ];

modules/services/loki/default.nix

@@ -1,5 +1,10 @@
 # log monitoring
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.services.loki;
 in
@@ -15,8 +20,8 @@ in
     };
 
     rules = mkOption {
-      type = types.attrsOf
+      type = types.attrsOf (
-        (types.submodule {
+        types.submodule {
           options = {
             condition = mkOption {
               type = types.str;
@@ -53,7 +58,8 @@ in
               default = "2m";
             };
           };
-        });
+        }
+      );
       description = ''
         Defines the loki rules.
       '';
@@ -67,14 +73,12 @@ in
         groups = [
           {
             name = "alerting-rules";
-            rules = lib.mapAttrsToList
+            rules = lib.mapAttrsToList (name: opts: {
-              (name: opts: {
               alert = name;
               inherit (opts) condition labels;
               for = opts.time;
               annotations.description = opts.description;
-              })
+            }) cfg.rules;
-              cfg.rules;
           }
         ];
       };
@@ -114,7 +118,8 @@ in
             };
 
             schema_config = {
-              configs = [{
+              configs = [
+                {
                   from = "2020-11-08";
                   store = "tsdb";
                   object_store = "filesystem";
@@ -123,7 +128,8 @@ in
                     prefix = "index_";
                     period = "24h";
                   };
-              }];
+                }
+              ];
             };
 
             limits_config = {

modules/services/minecraft-server/default.nix

@@ -1,5 +1,10 @@
 # sandbox video game
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.services.minecraft-server;
 in

modules/services/mumble-server/default.nix

@@ -1,5 +1,10 @@
 # Have a good quality voice chat
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.services.mumble-server;
   domain = "voice.${config.networking.domain}";
@@ -28,7 +33,10 @@ in
       '';
     };
 
-    users.groups."voice-buehler-rocks".members = [ "murmur" "nginx" ];
+    users.groups."voice-buehler-rocks".members = [
+      "murmur"
+      "nginx"
+    ];
 
     my.services.prometheus.rules = {
       mumble_not_running = {

modules/services/navidrome/default.nix

@@ -1,5 +1,10 @@
 # A FLOSS self-hosted, subsonic compatible music server
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.services.navidrome;
   inherit (config.networking) domain;

modules/services/nextcloud/default.nix

@@ -1,5 +1,10 @@
 # self-hosted cloud
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.services.nextcloud;
   inherit (config.networking) domain;
@@ -71,7 +76,12 @@ in
         };
 
         extraApps = with pkgs.nextcloud29Packages.apps; {
-          inherit calendar contacts tasks deck;
+          inherit
+            calendar
+            contacts
+            tasks
+            deck
+            ;
         };
         extraAppsEnable = true;
       };

modules/services/nginx/default.nix

@@ -1,8 +1,15 @@
 # A simple abstraction layer for almost all of my services' needs
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.services.nginx;
-  virtualHostOption = with lib; types.submodule {
+  virtualHostOption =
+    with lib;
+    types.submodule {
       options = {
         subdomain = mkOption {
           type = types.str;
@@ -52,9 +59,7 @@ let
     };
 in
 {
-  imports = [
+  imports = [ ./sso ];
-    ./sso
-  ];
   options.my.services.nginx = with lib; {
     enable = mkEnableOption "Nginx";
     acme = {
@@ -116,7 +121,8 @@ in
         description = "Port to use for internal webui.";
       };
       users = mkOption {
-        type = types.attrsOf (types.submodule {
+        type = types.attrsOf (
+          types.submodule {
             options = {
               passwordHashFile = mkOption {
                 type = types.str;
@@ -129,7 +135,8 @@ in
                 description = "Path to file containing the user's TOTP secret.";
               };
             };
-        });
+          }
+        );
         example = literalExpression ''
           {
             alice = {
@@ -153,9 +160,13 @@ in
     };
   };
   config = lib.mkIf cfg.enable {
-    assertions = lib.flip builtins.map cfg.virtualHosts ({ subdomain, ... } @ args:
+    assertions = lib.flip builtins.map cfg.virtualHosts (
+      { subdomain, ... }@args:
       let
-        conflicts = [ "port" "root" ];
+        conflicts = [
+          "port"
+          "root"
+        ];
         optionsNotNull = builtins.map (v: args.${v} != null) conflicts;
         optionsSet = lib.filter lib.id optionsNotNull;
       in
@@ -166,7 +177,8 @@ in
             lib.concatStringsSep ", " (builtins.map (v: "'${v}'") conflicts)
           } configured.
         '';
-      })
+      }
+    )
     #      ++ (
     #      let
     #        ports = lib.my.mapFilter
@@ -251,9 +263,10 @@ in
           let
             genAttrs' = values: f: lib.listToAttrs (map f values);
             inherit (config.networking) domain;
-            mkVHost = { subdomain, ... } @ args: lib.nameValuePair
+            mkVHost =
-              "${subdomain}.${domain}"
+              { subdomain, ... }@args:
-              (lib.foldl lib.recursiveUpdate { } [
+              lib.nameValuePair "${subdomain}.${domain}" (
+                lib.foldl lib.recursiveUpdate { } [
                   # Base configuration
                   {
                     forceSSL = true;
@@ -261,20 +274,19 @@ in
                   }
                   # Proxy to port
                   (lib.optionalAttrs (args.port != null) {
-                  locations."/".proxyPass =
+                    locations."/".proxyPass = "http://127.0.0.1:${toString args.port}";
-                    "http://127.0.0.1:${toString args.port}";
                     # TODO make ipv6 possible
                     # http://[::1]:${toString args.port};
                   })
                   # Serve filesystem content
-                (lib.optionalAttrs (args.root != null) {
+                  (lib.optionalAttrs (args.root != null) { inherit (args) root; })
-                  inherit (args) root;
-                })
                   # VHost specific configuration
                   args.extraConfig
                   # SSO configuration
                   (lib.optionalAttrs args.sso.enable {
-                  extraConfig = (args.extraConfig.extraConfig or "") + ''
+                    extraConfig =
+                      (args.extraConfig.extraConfig or "")
+                      + ''
                         error_page 401 = @error401;
                       '';
                     locations = {
@@ -283,7 +295,8 @@ in
                       '';
                       "/" = {
                         extraConfig =
-                        (args.extraConfig.locations."/".extraConfig or "") + ''
+                          (args.extraConfig.locations."/".extraConfig or "")
+                          + ''
                             # Use SSO
                             auth_request /sso-auth;
                             # Set username through header
@@ -310,8 +323,8 @@ in
                       };
                     };
                   })
-              ])
+                ]
-            ;
+              );
           in
           genAttrs' cfg.virtualHosts mkVHost;
         sso = {
@@ -322,9 +335,7 @@ in
               inherit (cfg.sso) port;
             };
             audit_log = {
-              target = [
+              target = [ "fd://stdout" ];
-                "fd://stdout"
-              ];
               events = [
                 "access_denied"
                 "login_success"
@@ -359,21 +370,30 @@ in
                 in
                 {
                   users = applyUsers (_: v: { _secret = v.passwordHashFile; });
-                  mfa = applyUsers (_: v: [{
+                  mfa = applyUsers (
+                    _: v: [
+                      {
                         provider = "totp";
                         attributes = {
                           secret = {
                             _secret = v.totpSecretFile;
                           };
                         };
-                  }]);
+                      }
+                    ]
+                  );
                   inherit (cfg.sso) groups;
                 };
             };
             acl = {
               rule_sets = [
                 {
-                  rules = [{ field = "x-application"; present = true; }];
+                  rules = [
+                    {
+                      field = "x-application";
+                      present = true;
+                    }
+                  ];
                   allow = [ "@root" ];
                 }
               ];
@@ -426,7 +446,10 @@ in
       ];
     };
 
-    networking.firewall.allowedTCPPorts = [ 80 443 ];
+    networking.firewall.allowedTCPPorts = [
+      80
+      443
+    ];
     # Nginx needs to be able to read the certificates
     users.users.nginx.extraGroups = [ "acme" ];
     security.acme = {

modules/services/nginx/sso/default.nix

@@ -1,5 +1,11 @@
 # I must override the module to allow having runtime secrets
-{ config, lib, pkgs, utils, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  utils,
+  ...
+}:
 let
   cfg = config.services.nginx.sso;
   pkg = lib.getBin cfg.package;
@@ -8,7 +14,6 @@ in
 {
   disabledModules = [ "services/security/nginx-sso.nix" ];
 
-
   options.services.nginx.sso = with lib; {
     enable = mkEnableOption "nginx-sso service";
 
@@ -67,8 +72,7 @@ in
           # Fix permissions
           chown nginx-sso:nginx-sso ${confPath}
           chmod 0600 ${confPath}
-        ''
+        ''}'';
-        }'';
         ExecStart = lib.mkForce ''
           ${pkg}/bin/nginx-sso \
             --config ${confPath} \

modules/services/node-exporter/default.nix

@@ -1,5 +1,11 @@
 # monitoring system services
-{ config, lib, pkgs, inputs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  inputs,
+  ...
+}:
 let
   cfg = config.my.services.node-exporter;
 in
@@ -17,9 +23,7 @@ in
             "systemd"
             "textfile"
           ];
-          extraFlags = [
+          extraFlags = [ "--collector.textfile.directory=/etc/prometheus-node-exporter-text-files" ];
-            "--collector.textfile.directory=/etc/prometheus-node-exporter-text-files"
-          ];
           port = 9100;
           listenAddress = "127.0.0.1";
         };
@@ -32,21 +36,25 @@ in
       scrapeConfigs = [
         {
           job_name = "node";
-          static_configs = [{
+          static_configs = [
+            {
               targets = [ "127.0.0.1:${toString config.services.prometheus.exporters.node.port}" ];
               labels = {
                 instance = config.networking.hostName;
               };
-          }];
+            }
+          ];
         }
         {
           job_name = "systemd";
-          static_configs = [{
+          static_configs = [
+            {
               targets = [ "127.0.0.1:${toString config.services.prometheus.exporters.systemd.port}" ];
               labels = {
                 instance = config.networking.hostName;
               };
-          }];
+            }
+          ];
         }
       ];
     };
@@ -55,10 +63,14 @@ in
     environment.etc =
       let
         inputsWithDate = lib.filterAttrs (_: input: input ? lastModified) inputs;
-        flakeAttrs = input: (lib.mapAttrsToList (n: v: ''${n}="${v}"'')
+        flakeAttrs =
-          (lib.filterAttrs (_n: v: (builtins.typeOf v) == "string") input));
+          input:
-        lastModified = name: input: ''
+          (lib.mapAttrsToList (n: v: ''${n}="${v}"'') (
-          flake_input_last_modified{input="${name}",${lib.concatStringsSep "," (flakeAttrs input)}} ${toString input.lastModified}'';
+            lib.filterAttrs (_n: v: (builtins.typeOf v) == "string") input
+          ));
+        lastModified =
+          name: input:
+          ''flake_input_last_modified{input="${name}",${lib.concatStringsSep "," (flakeAttrs input)}} ${toString input.lastModified}'';
       in
       {
         "prometheus-node-exporter-text-files/flake-inputs.prom" = {

modules/services/octoprint/default.nix

@@ -19,14 +19,18 @@ in
   config = lib.mkIf cfg.enable {
     services.octoprint = {
       enable = true;
-      plugins = plugins: with plugins; [
+      plugins =
+        plugins:
+        with plugins;
+        [
           costestimation
           displayprogress
           m86motorsoff
           stlviewer
           telegram
           titlestatus
-      ] ++ cfg.plugins;
+        ]
+        ++ cfg.plugins;
     };
     networking.firewall.allowedTCPPorts = [ 5000 ];
   };

modules/services/photoprism/default.nix

@@ -49,7 +49,12 @@ in
   config = lib.mkIf cfg.enable {
     services.photoprism = {
       enable = true;
-      inherit (cfg) passwordFile port originalsPath settings;
+      inherit (cfg)
+        passwordFile
+        port
+        originalsPath
+        settings
+        ;
     };
 
     my.services.nginx.virtualHosts = [

modules/services/prometheus/default.nix

@@ -1,5 +1,10 @@
 # monitoring system services
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.services.prometheus;
   inherit (config.networking) domain;
@@ -31,8 +36,8 @@ in
 
     # a good collections for allerts can be found here: https://samber.github.io/awesome-prometheus-alerts/rules#blackbox
     rules = mkOption {
-      type = types.attrsOf
+      type = types.attrsOf (
-        (types.submodule {
+        types.submodule {
           options = {
             condition = mkOption {
               type = types.str;
@@ -69,7 +74,8 @@ in
               default = "2m";
             };
           };
-        });
+        }
+      );
       description = ''
         Defines the prometheus rules.
       '';
@@ -92,12 +98,12 @@ in
         };
 
         ruleFiles = [
-          (pkgs.writeText "prometheus-rules.yml" (builtins.toJSON {
+          (pkgs.writeText "prometheus-rules.yml" (
+            builtins.toJSON {
               groups = [
                 {
                   name = "alerting-rules";
-                rules = lib.mapAttrsToList
+                  rules = lib.mapAttrsToList (name: opts: {
-                  (name: opts: {
                     alert = name;
                     expr = opts.condition;
                     for = opts.time;
@@ -106,22 +112,24 @@ in
                       inherit (opts) description;
                       grafana = lib.optionalString config.services.grafana.enable "https://visualization.${domain}";
                     };
-                  })
+                  }) cfg.rules;
-                  cfg.rules;
                 }
               ];
-          }))
+            }
+          ))
         ];
 
         scrapeConfigs = [
           {
             job_name = "prometheus";
-            static_configs = [{
+            static_configs = [
+              {
                 targets = [ "127.0.0.1:${toString cfg.port}" ];
                 labels = {
                   instance = config.networking.hostName;
                 };
-            }];
+              }
+            ];
           }
         ];
       };

modules/services/promtail/default.nix

@@ -28,9 +28,11 @@ in
         positions = {
           filename = "/tmp/positions.yaml";
         };
-        clients = [{
+        clients = [
+          {
             url = "http://127.0.0.1:${toString config.services.loki.configuration.server.http_listen_port}/loki/api/v1/push";
-        }];
+          }
+        ];
         scrape_configs = [
           {
             job_name = "journal";
@@ -41,18 +43,18 @@ in
                 host = config.networking.hostName;
               };
             };
-            relabel_configs = [{
+            relabel_configs = [
+              {
                 source_labels = [ "__journal__systemd_unit" ];
                 target_label = "unit";
-            }];
+              }
+            ];
           }
           {
             job_name = "nginx";
             static_configs = [
               {
-                targets = [
+                targets = [ "localhost" ];
-                  "localhost"
-                ];
                 labels = {
                   job = "nginx";
                   __path__ = "/var/log/nginx/*.log";

modules/services/prowlarr/default.nix

@@ -31,12 +31,14 @@ in
       prometheus.scrapeConfigs = [
         {
           job_name = "prowlarr";
-          static_configs = [{
+          static_configs = [
+            {
               targets = [ "127.0.0.1:${toString port + 1}" ];
               labels = {
                 instance = config.networking.hostName;
               };
-          }];
+            }
+          ];
         }
       ];
     };

modules/services/radarr/default.nix

@@ -31,12 +31,14 @@ in
       prometheus.scrapeConfigs = [
         {
           job_name = "radarr";
-          static_configs = [{
+          static_configs = [
+            {
               targets = [ "127.0.0.1:${toString port + 1}" ];
               labels = {
                 instance = config.networking.hostName;
               };
-          }];
+            }
+          ];
         }
       ];
     };

modules/services/remote-build/default.nix

@@ -1,5 +1,10 @@
 # manages remote builds
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.services.remote-build;
 in
@@ -15,7 +20,9 @@ in
       isSystemUser = true;
       group = "nixremote";
       shell = pkgs.bashInteractive;
-      openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGYSzDdxqaNHmaaLqEvOK/vB65zvqoCebI3Nxzgg5smq root@thinkman" ];
+      openssh.authorizedKeys.keys = [
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGYSzDdxqaNHmaaLqEvOK/vB65zvqoCebI3Nxzgg5smq root@thinkman"
+      ];
     };
     nix.settings.trusted-users = [ "nixremote" ];
   };

modules/services/sonarr/default.nix

@@ -31,12 +31,14 @@ in
       prometheus.scrapeConfigs = [
         {
           job_name = "sonarr";
-          static_configs = [{
+          static_configs = [
+            {
               targets = [ "127.0.0.1:${toString port + 1}" ];
               labels = {
                 instance = config.networking.hostName;
               };
-          }];
+            }
+          ];
         }
       ];
     };

modules/system/avahi/default.nix

@@ -1,5 +1,10 @@
 # avahi related settings
-{ config, lib, options, ... }:
+{
+  config,
+  lib,
+  options,
+  ...
+}:
 let
   cfg = config.my.system.avahi;
 in

modules/system/docker/default.nix

@@ -1,5 +1,11 @@
 # Docker related settings
-{ config, lib, options, pkgs, ... }:
+{
+  config,
+  lib,
+  options,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.system.docker;
 in

modules/system/fonts/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.system.fonts;
 in
@@ -21,7 +26,9 @@ in
         monospace = [ "Ubuntu Mono" ];
       };
 
-      packages = with pkgs; [
+      packages =
+        with pkgs;
+        [
           cantarell-fonts # gnome default
           fira
           fira-code # coding
@@ -37,7 +44,8 @@ in
           noto-fonts-extra
           ubuntu_font_family
           unifont # unicode fallback
-      ] ++ cfg.additionalFonts;
+        ]
+        ++ cfg.additionalFonts;
     };
     nixpkgs.config.joypixels.acceptLicense = true;
   };

modules/system/kvm/default.nix

@@ -7,14 +7,20 @@ in
     enable = mkEnableOption "kvm configuration";
 
     cpuFlavor = mkOption {
-      type = with types; nullOr (enum [ "intel" "amd" ]);
+      type =
+        with types;
+        nullOr (enum [
+          "intel"
+          "amd"
+        ]);
       default = null;
       example = "intel";
       description = "Which kind of CPU to activate kernelModules";
     };
   };
 
-  config = lib.mkIf cfg.enable (lib.mkMerge [
+  config = lib.mkIf cfg.enable (
+    lib.mkMerge [
       {
         virtualisation.libvirtd.enable = true;
 
@@ -22,17 +28,10 @@ in
       }
 
       # Intel CPU
-    (lib.mkIf (cfg.cpuFlavor == "intel") {
+      (lib.mkIf (cfg.cpuFlavor == "intel") { boot.kernelModules = [ "kvm-intel" ]; })
-      boot.kernelModules = [
-        "kvm-intel"
-      ];
-    })
 
       # AMD CPU
-    (lib.mkIf (cfg.cpuFlavor == "amd") {
+      (lib.mkIf (cfg.cpuFlavor == "amd") { boot.kernelModules = [ "kvm-amd" ]; })
-      boot.kernelModules = [
+    ]
-        "kvm-amd"
+  );
-      ];
-    })
-  ]);
 }

modules/system/podman/default.nix

@@ -1,5 +1,11 @@
 # Podman related settings
-{ config, lib, options, pkgs, ... }:
+{
+  config,
+  lib,
+  options,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.system.podman;
 in
@@ -10,9 +16,7 @@ in
 
   config = lib.mkIf cfg.enable {
 
-    environment.systemPackages = with pkgs; [
+    environment.systemPackages = with pkgs; [ podman-compose ];
-      podman-compose
-    ];
 
     virtualisation.podman = {
       enable = true;

modules/system/spell-check/default.nix

@@ -1,5 +1,11 @@
 # spell-checking
-{ config, lib, options, pkgs, ... }:
+{
+  config,
+  lib,
+  options,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.system.spell-check;
 in

overlays/default.nix

@@ -1,6 +1,5 @@
 # overlays for nixpkgs
-_self: _super:
+_self: _super: {
-{
   # freshrss = _super.freshrss.overrideAttrs (old: {
   #   version = "1.21.0";
   #   src = _super.fetchFromGitHub {

pkgs/default.nix

@@ -1,5 +1,4 @@
-final: _prev:
+final: _prev: {
-{
   homer = final.callPackage ./homer { };
   grafana-dashboards = final.callPackage ./grafana-dashboards { };
 }

pkgs/grafana-dashboards/default.nix

@@ -6,9 +6,14 @@ let
   inherit (pkgs) stdenv fetchurl;
 in
 
-lib.makeScope pkgs.newScope (_self:
+lib.makeScope pkgs.newScope (
-let
+  _self:
-  buildGrafanaDashboard = args: stdenv.mkDerivation (args // {
+  let
+    buildGrafanaDashboard =
+      args:
+      stdenv.mkDerivation (
+        args
+        // {
           pname = "grafana-dashboard-${args.pname}-${toString args.id}";
           inherit (args) version;
           src = fetchurl {
@@ -22,9 +27,10 @@ let
             cp $src $out/${args.pname}-${toString args.id}.json
             runHook postInstall
           '';
-  });
+        }
-in
+      );
-{
+  in
+  {
     inherit buildGrafanaDashboard;
 
     node-exporter = buildGrafanaDashboard {
@@ -33,12 +39,14 @@ in
       version = "31";
       hash = "sha256-QsRHsnayYRRGc+2MfhaKGYpNdH02PesnR5b50MDzHIg=";
     };
-  node-systemd = (buildGrafanaDashboard {
+    node-systemd =
+      (buildGrafanaDashboard {
         id = 1617;
         pname = "node-systemd";
         version = "1";
         hash = "sha256-MEWU5rIqlbaGu3elqdSoMZfbk67WDnH0VWuC8FqZ8v8=";
-  }).overrideAttrs (_: {
+      }).overrideAttrs
+        (_: {
           src = ./node-systemd.json; # sadly only imported dashboards work
         });
 
@@ -49,12 +57,14 @@ in
       hash = "sha256-T1HqWbwt+i/We+Y2B7hcl3CijGxZF5QI38aPcXjk9y0=";
     };
 
-  nextcloud = (buildGrafanaDashboard {
+    nextcloud =
+      (buildGrafanaDashboard {
         id = 9632;
         pname = "nextcloud";
         version = "1";
         hash = "sha256-Z28Q/sMg3jxglkszAs83IpL8f4p9loNnTQzjc3S/SAQ=";
-  }).overrideAttrs (_: {
+      }).overrideAttrs
+        (_: {
           src = ./nextcloud.json; # sadly only imported dashboards work
         });
 
@@ -65,22 +75,26 @@ in
       hash = "sha256-T1HqWbwt+i/Wa+Y2B7hcl3CijGxZF5aI38aPcXjk9y0=";
     };
 
-  navidrome = (buildGrafanaDashboard {
+    navidrome =
+      (buildGrafanaDashboard {
         id = 18038;
         pname = "navidrome";
         version = "1";
         hash = "sha256-MU890UAEI9wrnVIC/R0HkYwFa6mJ8Y7ESAWuaSQ8FQ8=";
-  }).overrideAttrs (_: {
+      }).overrideAttrs
+        (_: {
           src = ./navidrome.json; # sadly data source is not detected
         });
 
     # taken from https://gitlab.archlinux.org/archlinux/infrastructure/-/blob/master/roles/grafana/files/dashboards/Hedgedoc.json?ref_type=heads
-  hedgedoc = (buildGrafanaDashboard {
+    hedgedoc =
+      (buildGrafanaDashboard {
         id = -1;
         pname = "hedgedoc";
         version = "1";
         hash = lib.fakeSha256;
-  }).overrideAttrs (_: {
+      }).overrideAttrs
+        (_: {
           src = ./hedgedoc.json; # sadly data source is not detected
         });
 
@@ -91,12 +105,14 @@ in
       hash = "sha256-T1HqWbwt+i/Wa+Y2B7hclaCijGxZF5QI38aPcXjk9y0=";
     };
 
-  loki = (buildGrafanaDashboard {
+    loki =
+      (buildGrafanaDashboard {
         id = 13407;
         pname = "loki";
         version = "1";
         hash = "sha256-1sxTDSEwi2O/Ce+rWqqhMvsYEJeELBfkb9W2R6cDjcU=";
-  }).overrideAttrs (_: {
+      }).overrideAttrs
+        (_: {
           src = ./loki.json; # sadly not yet updated to latest grafana
         });
 
@@ -107,38 +123,47 @@ in
       hash = "sha256-/scCKBKqTjRKKImIrEYLBKGweOUnkx+QsD5yLfdXW5o=";
     };
 
-  gitea = (buildGrafanaDashboard {
+    gitea =
+      (buildGrafanaDashboard {
         id = 13192;
         pname = "gitea";
         version = "1";
         hash = "sha256-IAaI/HvMxcWE3PGQFK8avNjgj88DgcDvkWRcDAWSejM=";
-  }).overrideAttrs (_: {
+      }).overrideAttrs
+        (_: {
           src = ./gitea.json; # sadly not yet updated to latest grafana
         });
 
-  prometheus = (buildGrafanaDashboard {
+    prometheus =
+      (buildGrafanaDashboard {
         id = 3662;
         pname = "prometheus";
         version = "2";
         hash = "sha256-+nsi8/dYNvGVGV+ftfO1gSAQbO5GpZwW480T5mHMM4Q=";
-  }).overrideAttrs (_: {
+      }).overrideAttrs
+        (_: {
           src = ./prometheus.json; # sadly only imported dashboards work
         });
 
-  grafana = (buildGrafanaDashboard {
+    grafana =
+      (buildGrafanaDashboard {
         id = 3590;
         pname = "grafana";
         version = "3";
-  }).overrideAttrs (_: {
+      }).overrideAttrs
+        (_: {
           src = ./grafana.json; # sadly only imported dashboards work
         });
 
-  blackbox = (buildGrafanaDashboard {
+    blackbox =
+      (buildGrafanaDashboard {
         id = 13659;
         pname = "blackbox";
         version = "1";
         hash = "sha256-nnBFWFDAqKUqTOYxOrkRPlVla4ioQZ6rqEqakdzUj1Q=";
-  }).overrideAttrs (_: {
+      }).overrideAttrs
+        (_: {
           src = ./blackbox.json; # sadly only imported dashboards work
         });
-})
+  }
+)

profiles/3d-design/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.profiles."3d-design";
 in

profiles/android/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.profiles.android;
 in
@@ -9,8 +14,6 @@ in
 
   config = lib.mkIf cfg.enable {
     programs.adb.enable = true;
-    environment.systemPackages = with pkgs; [
+    environment.systemPackages = with pkgs; [ scrcpy ];
-      scrcpy
-    ];
   };
 }

profiles/clean/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.profiles.clean;
 in

profiles/desktop-apps/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.profiles.desktop-apps;
 in

profiles/desktop-dev/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.profiles.desktop-dev;
 in
@@ -22,7 +27,8 @@ in
       (vscode-with-extensions.override {
         vscode = vscodium;
         vscodeExtensions =
-          with vscode-extensions; [
+          with vscode-extensions;
+          [
             bbenoist.nix
             editorconfig.editorconfig
             github.copilot
@@ -31,11 +37,13 @@ in
             ms-python.python
             ms-vscode-remote.remote-ssh
             pkief.material-icon-theme
-          ] ++ [
+          ]
+          ++ [
             # remove in 24.05
             unstable.vscode-extensions.equinusocio.vsc-material-theme
             unstable.vscode-extensions.hiukky.flate
-          ] ++ pkgs.vscode-utils.extensionsFromVscodeMarketplace [
+          ]
+          ++ pkgs.vscode-utils.extensionsFromVscodeMarketplace [
             # {
             #   name = "vsc-material-theme";
             #   publisher = "Equinusocio";

profiles/development/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.profiles.development;
 in
@@ -23,7 +28,8 @@ in
       # websites
       hugo
       # scripts
-      (python3.withPackages (ps: with ps; [
+      (python3.withPackages (
+        ps: with ps; [
           jupyter # notebooks
           matplotlib
           numpy
@@ -34,7 +40,8 @@ in
           scipy
           tqdm # progressbar in pandas
           wheel # python development
-      ]))
+        ]
+      ))
       # linter
       shellcheck
       typos

profiles/filesystem/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.profiles.filesystem;
 in

profiles/gaming/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.profiles.gaming;
 in

profiles/gnome/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.profiles.gnome;
 in

profiles/latex/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.profiles.latex;
 in

profiles/media/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.profiles.media;
 in
@@ -31,9 +36,7 @@ in
       shotwell # photo management
       sonixd # cloud-music-player
       soundkonverter # audio converter
-      (yt-dlp.override {
+      (yt-dlp.override { withAlias = true; }) # video download
-        withAlias = true;
-      }) # video download
     ];
   };
 }

profiles/meeting/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.profiles.meeting;
 in

profiles/nautilus/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.profiles.nautilus;
 in
@@ -31,9 +36,7 @@ in
       ];
 
       sessionVariables.NAUTILUS_4_EXTENSION_DIR = "${config.system.path}/lib/nautilus/extensions-4";
-      pathsToLink = [
+      pathsToLink = [ "/share/nautilus-python/extensions" ];
-        "/share/nautilus-python/extensions"
-      ];
     };
 
     programs.nautilus-open-any-terminal = {

profiles/powersave/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.profiles.powersave;
 in

profiles/printing/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.profiles.printing;
 in
@@ -16,8 +21,6 @@ in
     ];
     programs.system-config-printer.enable = true;
 
-    environment.systemPackages = with pkgs; [
+    environment.systemPackages = with pkgs; [ gnome.simple-scan ];
-      gnome.simple-scan
-    ];
   };
 }

profiles/sway/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.profiles.sway;
 in
@@ -23,9 +28,7 @@ in
       sway-theme.enable = true;
     };
 
-    environment.systemPackages = with pkgs; [
+    environment.systemPackages = with pkgs; [ polkit_gnome ];
-      polkit_gnome
-    ];
     environment.pathsToLink = [ "/libexec" ];
 
     programs = {

profiles/sway/screen-sharing.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.profiles.sway-screen-sharing;
 in
@@ -8,18 +13,14 @@ in
   };
 
   config = lib.mkIf cfg.enable {
-    environment.systemPackages = with pkgs; [
+    environment.systemPackages = with pkgs; [ remmina ];
-      remmina
-    ];
 
     services.pipewire.enable = true;
 
     xdg.portal = {
       enable = true;
       wlr.enable = true;
-      extraPortals = with pkgs; [
+      extraPortals = with pkgs; [ xdg-desktop-portal-gtk ];
-        xdg-desktop-portal-gtk
-      ];
     };
 
     # for firefox

profiles/sway/theme.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.profiles.sway-theme;
 in

profiles/sync/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.profiles.sync;
 in

profiles/update/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.profiles.update;
 in
@@ -11,8 +16,6 @@ in
     # Enable firmware update daemon
     services.fwupd.enable = true;
 
-    environment.systemPackages = with pkgs; [
+    environment.systemPackages = with pkgs; [ topgrade ];
-      topgrade
-    ];
   };
 }

profiles/usb-iso/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.profiles.usb-iso;
 in

profiles/webcam/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   cfg = config.my.profiles.webcam;
 in