Merge pull request 'feature/mydia' (#1 ) from feature/mydia into main

Reviewed-on: #1
kaas
2025-12-06 16:42:23 +00:00 · 2025-12-06 16:42:06 +00:00 · 2025-12-06 17:42:02 +01:00 · 2025-12-06 16:41:51 +00:00 · 2025-12-06 16:41:51 +00:00 · 2025-12-06 16:41:50 +00:00
28 changed files with 921 additions and 538 deletions
--- a/.gitattributes
+++ b/.gitattributes
@ -0,0 +1 @@
+* text=auto
--- a/.just/machine.just
+++ b/.just/machine.just
@ -4,8 +4,8 @@
@list:
    ls -1 ../systems/x86_64-linux/

-[no-exit-message]
 [doc('Update the target machine')]
+[no-exit-message]
@update machine:
-  just assert '-d "../systems/x86_64-linux/{{ machine }}"' "Machine {{ machine }} does not exist, must be one of: $(ls ../systems/x86_64-linux/ | tr '\n' ' ')"
-  nixos-rebuild switch --use-remote-sudo --target-host {{ machine }} --flake ..#{{ machine }}
+    just assert '-d "../systems/x86_64-linux/{{ machine }}"' "Machine {{ machine }} does not exist, must be one of: $(ls ../systems/x86_64-linux/ | sed ':a;N;$!ba;s/\n/, /g')"
+    nixos-rebuild switch -L --use-remote-sudo --target-host {{ machine }} --flake ..#{{ machine }}
--- a/.just/vars.just
+++ b/.just/vars.just
@ -1,8 +1,10 @@
-set unstable
+set unstable := true

 base_path := invocation_directory() / "systems/x86_64-linux"
+
 # sops := "nix shell nixpkgs#sops --command sops"
 # yq := "nix shell nixpkgs#yq --command yq"
+
 sops := "sops"
 yq := "yq"

--- a/.justfile
+++ b/.justfile
@ -19,7 +19,7 @@ mod machine '.just/machine.just'

 [doc('Introspection on flake output')]
@select key:
-  nix eval --json .#{{ key }} | jq .
+  nix eval --show-trace --json .#{{ key }} | jq .



--- a/flake.lock
+++ b/flake.lock
@ -38,11 +38,11 @@
    "base16-helix": {
      "flake": false,
      "locked": {
-        "lastModified": 1752979451,
-        "narHash": "sha256-0CQM+FkYy0fOO/sMGhOoNL80ftsAzYCg9VhIrodqusM=",
+        "lastModified": 1760703920,
+        "narHash": "sha256-m82fGUYns4uHd+ZTdoLX2vlHikzwzdu2s2rYM2bNwzw=",
        "owner": "tinted-theming",
        "repo": "base16-helix",
-        "rev": "27cf1e66e50abc622fb76a3019012dc07c678fac",
+        "rev": "d646af9b7d14bff08824538164af99d0c521b185",
        "type": "github"
      },
      "original": {
@ -206,11 +206,11 @@
    "firefox-gnome-theme": {
      "flake": false,
      "locked": {
-        "lastModified": 1758112371,
-        "narHash": "sha256-lizRM2pj6PHrR25yimjyFn04OS4wcdbc38DCdBVa2rk=",
+        "lastModified": 1764724327,
+        "narHash": "sha256-OkFLrD3pFR952TrjQi1+Vdj604KLcMnkpa7lkW7XskI=",
        "owner": "rafaelmardojai",
        "repo": "firefox-gnome-theme",
-        "rev": "0909cfe4a2af8d358ad13b20246a350e14c2473d",
+        "rev": "66b7c635763d8e6eb86bd766de5a1e1fbfcc1047",
        "type": "github"
      },
      "original": {
@ -320,6 +320,27 @@
      }
    },
    "flake-parts_2": {
+      "inputs": {
+        "nixpkgs-lib": [
+          "mydia",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1763759067,
+        "narHash": "sha256-LlLt2Jo/gMNYAwOgdRQBrsRoOz7BPRkzvNaI/fzXi2Q=",
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "rev": "2cccadc7357c0ba201788ae99c4dfa90728ef5e0",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "type": "github"
+      }
+    },
+    "flake-parts_3": {
      "inputs": {
        "nixpkgs-lib": [
          "nvf",
@ -340,7 +361,7 @@
        "type": "github"
      }
    },
-    "flake-parts_3": {
+    "flake-parts_4": {
      "inputs": {
        "nixpkgs-lib": [
          "stylix",
@ -348,11 +369,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1756770412,
-        "narHash": "sha256-+uWLQZccFHwqpGqr2Yt5VsW/PbeJVTn9Dk6SHWhNRPw=",
+        "lastModified": 1763759067,
+        "narHash": "sha256-LlLt2Jo/gMNYAwOgdRQBrsRoOz7BPRkzvNaI/fzXi2Q=",
        "owner": "hercules-ci",
        "repo": "flake-parts",
-        "rev": "4524271976b625a4a605beefd893f270620fd751",
+        "rev": "2cccadc7357c0ba201788ae99c4dfa90728ef5e0",
        "type": "github"
      },
      "original": {
@ -361,7 +382,7 @@
        "type": "github"
      }
    },
-    "flake-parts_4": {
+    "flake-parts_5": {
      "inputs": {
        "nixpkgs-lib": [
          "terranix",
@ -511,11 +532,11 @@
      "flake": false,
      "locked": {
        "host": "gitlab.gnome.org",
-        "lastModified": 1762869044,
-        "narHash": "sha256-nwm/GJ2Syigf7VccLAZ66mFC8mZJFqpJmIxSGKl7+Ds=",
+        "lastModified": 1764524476,
+        "narHash": "sha256-bTmNn3Q4tMQ0J/P0O5BfTQwqEnCiQIzOGef9/aqAZvk=",
        "owner": "GNOME",
        "repo": "gnome-shell",
-        "rev": "680e3d195a92203f28d4bf8c6e8bb537cc3ed4ad",
+        "rev": "c0e1ad9f0f703fd0519033b8f46c3267aab51a22",
        "type": "gitlab"
      },
      "original": {
@ -553,11 +574,19 @@
        "rust-overlay": "rust-overlay"
      },
      "locked": {
+<<<<<<< HEAD
        "lastModified": 1764617621,
        "narHash": "sha256-Eq0TvWs6xhKZs5HXH1hlrNasrHD7AOEdeLkTis//X7w=",
        "owner": "himmelblau-idm",
        "repo": "himmelblau",
        "rev": "c19494250d8c15e7c75e9301bdc271579a6dc77a",
+=======
+        "lastModified": 1764787446,
+        "narHash": "sha256-RUfGGM8kiXSQA3ct1BZXN5Sm8hxr3XF0P/eR/WGLaGU=",
+        "owner": "himmelblau-idm",
+        "repo": "himmelblau",
+        "rev": "8ab33affe6db4cf5e9c17c2abcd7f3b2cedcfbd8",
+>>>>>>> ba1d4e1 (chore: update deps)
        "type": "github"
      },
      "original": {
@ -573,11 +602,19 @@
        ]
      },
      "locked": {
+<<<<<<< HEAD
        "lastModified": 1764603455,
        "narHash": "sha256-Q70rxlbrxPcTtqWIb9+71rkJESxIOou5isZBvyOieXw=",
        "owner": "nix-community",
        "repo": "home-manager",
        "rev": "effe4c007d6243d9e69ce2242d76a2471c1b8d5c",
+=======
+        "lastModified": 1764839789,
+        "narHash": "sha256-QCgaXEj8036JlfyVM2e5fgKIxoF7IgGRcAi8LkehKvo=",
+        "owner": "nix-community",
+        "repo": "home-manager",
+        "rev": "d441981b200305ebb8e2e2921395f51d207fded6",
+>>>>>>> ba1d4e1 (chore: update deps)
        "type": "github"
      },
      "original": {
@ -615,11 +652,19 @@
        ]
      },
      "locked": {
+<<<<<<< HEAD
        "lastModified": 1764612577,
        "narHash": "sha256-sHI+7m/ryVYf7agWkutYbvzUS07aAd8g2NVWgUqhxLg=",
        "owner": "Jovian-Experiments",
        "repo": "Jovian-NixOS",
        "rev": "bcb22e208cf8883004fcec3a33f2500e7dc319a5",
+=======
+        "lastModified": 1764746434,
+        "narHash": "sha256-6ymFuw+Z1C90ezf8H0BP3c2JFZhJYwMq31px2StwWHU=",
+        "owner": "Jovian-Experiments",
+        "repo": "Jovian-NixOS",
+        "rev": "b4c0b604148adacf119b89824ed26df8926ce42c",
+>>>>>>> ba1d4e1 (chore: update deps)
        "type": "github"
      },
      "original": {
@ -662,6 +707,25 @@
        "type": "github"
      }
    },
+    "mydia": {
+      "inputs": {
+        "flake-parts": "flake-parts_2",
+        "nixpkgs": "nixpkgs_5"
+      },
+      "locked": {
+        "lastModified": 1764866402,
+        "narHash": "sha256-0NOWsPks+/vV5ZM9ti71hUPMLy3FzbEIlFI6vxARvuY=",
+        "owner": "chris-kruining",
+        "repo": "mydia",
+        "rev": "458fc9a21c6987d994bc7932efb6c49df25ba806",
+        "type": "github"
+      },
+      "original": {
+        "owner": "chris-kruining",
+        "repo": "mydia",
+        "type": "github"
+      }
+    },
    "nix-darwin": {
      "inputs": {
        "nixpkgs": [
@ -709,14 +773,22 @@
      "inputs": {
        "flake-compat": "flake-compat_3",
        "flake-utils": "flake-utils_3",
-        "nixpkgs": "nixpkgs_5"
+        "nixpkgs": "nixpkgs_6"
      },
      "locked": {
+<<<<<<< HEAD
        "lastModified": 1764556167,
        "narHash": "sha256-/b+oEls56HDRzsSp60tsRfPFRjFebBPHq6k1I+hfPqw=",
        "owner": "Infinidoge",
        "repo": "nix-minecraft",
        "rev": "849d1b2b1adddfc7bddbd3be6bffd218a3f5a6fe",
+=======
+        "lastModified": 1764813963,
+        "narHash": "sha256-Vs7Mamto+T8r1evk9myHepgHGNJkS2Kr0BF64NIei94=",
+        "owner": "Infinidoge",
+        "repo": "nix-minecraft",
+        "rev": "491200d6848402bbab1421cccbc15a46f08c7f78",
+>>>>>>> ba1d4e1 (chore: update deps)
        "type": "github"
      },
      "original": {
@ -812,11 +884,19 @@
        ]
      },
      "locked": {
+<<<<<<< HEAD
        "lastModified": 1764591717,
        "narHash": "sha256-T/HMA0Bb/O6UnlGQ0Xt+wGe1j8m7eyyQ5+vVcCJslsM=",
        "owner": "nix-community",
        "repo": "nixos-wsl",
        "rev": "84d1dab290feb4865d0cfcffc7aa0cf9bc65c3b7",
+=======
+        "lastModified": 1764730608,
+        "narHash": "sha256-FxKIa3OCSRVC23qrk7VT68vExUcmSruJ8OobVlSWOxc=",
+        "owner": "nix-community",
+        "repo": "nixos-wsl",
+        "rev": "10124c58674360765adcb38c9a8b081fb72904e4",
+>>>>>>> ba1d4e1 (chore: update deps)
        "type": "github"
      },
      "original": {
@ -856,13 +936,37 @@
        "type": "github"
      }
    },
+    "nixpkgs_10": {
+      "locked": {
+        "lastModified": 1764517877,
+        "narHash": "sha256-pp3uT4hHijIC8JUK5MEqeAWmParJrgBVzHLNfJDZxg4=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "2d293cbfa5a793b4c50d17c05ef9e385b90edf6c",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
    "nixpkgs_2": {
      "locked": {
+<<<<<<< HEAD
        "lastModified": 1764547213,
        "narHash": "sha256-pGXM6frMKLRJmeMcQ228O1QQBuNEUjzmWx9uBd+CbXM=",
        "owner": "nixos",
        "repo": "nixpkgs",
        "rev": "64de27c1c985895c1a9f92aaeaab4e6a4c0960f5",
+=======
+        "lastModified": 1764811743,
+        "narHash": "sha256-Ypfd8oBuG3HWtzcY7VtYiI6Pawznag7YHWy8RoOfiBs=",
+        "owner": "nixos",
+        "repo": "nixpkgs",
+        "rev": "4a6ebaabd716d6479b39fa234a8f895f0ec1cb88",
+>>>>>>> ba1d4e1 (chore: update deps)
        "type": "github"
      },
      "original": {
@ -890,11 +994,19 @@
    },
    "nixpkgs_4": {
      "locked": {
+<<<<<<< HEAD
        "lastModified": 1764618760,
        "narHash": "sha256-QTUgygkdUq4sq7mXoO2Q2IPpvkKOZtTAJkbTaTjMi0A=",
        "owner": "NixOS",
        "repo": "nixpkgs",
        "rev": "29a7d6eec7e1177020f62f7599e5021317219c37",
+=======
+        "lastModified": 1764856222,
+        "narHash": "sha256-yEJmtoFu4cJre1NuU4fb8q57Oux+NTbocnALtJ64aEI=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "ece6e266caf1effab32eceef0403b797b4330373",
+>>>>>>> ba1d4e1 (chore: update deps)
        "type": "github"
      },
      "original": {
@ -905,6 +1017,22 @@
      }
    },
    "nixpkgs_5": {
+      "locked": {
+        "lastModified": 1764242076,
+        "narHash": "sha256-sKoIWfnijJ0+9e4wRvIgm/HgE27bzwQxcEmo2J/gNpI=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "2fad6eac6077f03fe109c4d4eb171cf96791faa4",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs_6": {
      "locked": {
        "lastModified": 1748929857,
        "narHash": "sha256-lcZQ8RhsmhsK8u7LIFsJhsLh/pzR9yZ8yqpTzyGdj+Q=",
@ -920,13 +1048,21 @@
        "type": "github"
      }
    },
-    "nixpkgs_6": {
+    "nixpkgs_7": {
      "locked": {
+<<<<<<< HEAD
        "lastModified": 1764517877,
        "narHash": "sha256-pp3uT4hHijIC8JUK5MEqeAWmParJrgBVzHLNfJDZxg4=",
        "owner": "nixos",
        "repo": "nixpkgs",
        "rev": "2d293cbfa5a793b4c50d17c05ef9e385b90edf6c",
+=======
+        "lastModified": 1764667669,
+        "narHash": "sha256-7WUCZfmqLAssbDqwg9cUDAXrSoXN79eEEq17qhTNM/Y=",
+        "owner": "nixos",
+        "repo": "nixpkgs",
+        "rev": "418468ac9527e799809c900eda37cbff999199b6",
+>>>>>>> ba1d4e1 (chore: update deps)
        "type": "github"
      },
      "original": {
@ -936,7 +1072,7 @@
        "type": "github"
      }
    },
-    "nixpkgs_7": {
+    "nixpkgs_8": {
      "locked": {
        "lastModified": 1761880412,
        "narHash": "sha256-QoJjGd4NstnyOG4mm4KXF+weBzA2AH/7gn1Pmpfcb0A=",
@ -952,7 +1088,7 @@
        "type": "github"
      }
    },
-    "nixpkgs_8": {
+    "nixpkgs_9": {
      "locked": {
        "lastModified": 1764445028,
        "narHash": "sha256-ik6H/0Zl+qHYDKTXFPpzuVHSZE+uvVz2XQuQd1IVXzo=",
@ -968,22 +1104,6 @@
        "type": "github"
      }
    },
-    "nixpkgs_9": {
-      "locked": {
-        "lastModified": 1762977756,
-        "narHash": "sha256-4PqRErxfe+2toFJFgcRKZ0UI9NSIOJa+7RXVtBhy4KE=",
-        "owner": "NixOS",
-        "repo": "nixpkgs",
-        "rev": "c5ae371f1a6a7fd27823bc500d9390b38c05fa55",
-        "type": "github"
-      },
-      "original": {
-        "owner": "NixOS",
-        "ref": "nixos-unstable",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
    "nur": {
      "inputs": {
        "flake-parts": [
@ -996,11 +1116,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1758998580,
-        "narHash": "sha256-VLx0z396gDCGSiowLMFz5XRO/XuNV+4EnDYjdJhHvUk=",
+        "lastModified": 1764773531,
+        "narHash": "sha256-mCBl7MD1WZ7yCG6bR9MmpPO2VydpNkWFgnslJRIT1YU=",
        "owner": "nix-community",
        "repo": "NUR",
-        "rev": "ba8d9c98f5f4630bcb0e815ab456afd90c930728",
+        "rev": "1d9616689e98beded059ad0384b9951e967a17fa",
        "type": "github"
      },
      "original": {
@ -1012,9 +1132,9 @@
    "nvf": {
      "inputs": {
        "flake-compat": "flake-compat_4",
-        "flake-parts": "flake-parts_2",
+        "flake-parts": "flake-parts_3",
        "mnw": "mnw",
-        "nixpkgs": "nixpkgs_7",
+        "nixpkgs": "nixpkgs_8",
        "systems": "systems_5"
      },
      "locked": {
@ -1065,11 +1185,12 @@
        "himmelblau": "himmelblau",
        "home-manager": "home-manager",
        "jovian": "jovian",
+        "mydia": "mydia",
        "nix-minecraft": "nix-minecraft",
        "nixos-boot": "nixos-boot",
        "nixos-generators": "nixos-generators",
        "nixos-wsl": "nixos-wsl",
-        "nixpkgs": "nixpkgs_6",
+        "nixpkgs": "nixpkgs_7",
        "nvf": "nvf",
        "plasma-manager": "plasma-manager",
        "snowfall-lib": "snowfall-lib",
@ -1082,11 +1203,19 @@
    "rust-analyzer-src": {
      "flake": false,
      "locked": {
+<<<<<<< HEAD
        "lastModified": 1764525349,
        "narHash": "sha256-vR3vU9AwzMsBvjNeeG2inA5W/2MwseFk5NIIrLFEMHk=",
        "owner": "rust-lang",
        "repo": "rust-analyzer",
        "rev": "d646b23f000d099d845f999c2c1e05b15d9cdc78",
+=======
+        "lastModified": 1764778537,
+        "narHash": "sha256-SNL+Fj1ZWiBqCrHJT1S9vMZujrWxCOmf3zkT66XSnhE=",
+        "owner": "rust-lang",
+        "repo": "rust-analyzer",
+        "rev": "633cff25206d5108043d87617a43c9d04aa42c88",
+>>>>>>> ba1d4e1 (chore: update deps)
        "type": "github"
      },
      "original": {
@ -1162,7 +1291,7 @@
    },
    "sops-nix_2": {
      "inputs": {
-        "nixpkgs": "nixpkgs_8"
+        "nixpkgs": "nixpkgs_9"
      },
      "locked": {
        "lastModified": 1764483358,
@ -1185,9 +1314,9 @@
        "base16-helix": "base16-helix",
        "base16-vim": "base16-vim",
        "firefox-gnome-theme": "firefox-gnome-theme",
-        "flake-parts": "flake-parts_3",
+        "flake-parts": "flake-parts_4",
        "gnome-shell": "gnome-shell",
-        "nixpkgs": "nixpkgs_9",
+        "nixpkgs": "nixpkgs_10",
        "nur": "nur",
        "systems": "systems_7",
        "tinted-foot": "tinted-foot",
@ -1197,11 +1326,19 @@
        "tinted-zed": "tinted-zed"
      },
      "locked": {
+<<<<<<< HEAD
        "lastModified": 1764550443,
        "narHash": "sha256-ArO2V1YEHmEILilTj4KPtqF4gqc1q2HBrrrmygQ/UyU=",
        "owner": "nix-community",
        "repo": "stylix",
        "rev": "794b6e1fa75177ebfeb32967f135858a1ab1ba15",
+=======
+        "lastModified": 1764798099,
+        "narHash": "sha256-IIwR5ZWo7tjxjRpkz0tViF9KFbQ1YXs9Wkan46WQbfk=",
+        "owner": "nix-community",
+        "repo": "stylix",
+        "rev": "4b9e0e7ba3cccb86fe2bf0f4a2dd18256bef1cc6",
+>>>>>>> ba1d4e1 (chore: update deps)
        "type": "github"
      },
      "original": {
@ -1332,7 +1469,7 @@
    },
    "terranix": {
      "inputs": {
-        "flake-parts": "flake-parts_4",
+        "flake-parts": "flake-parts_5",
        "nixpkgs": [
          "nixpkgs"
        ],
@ -1388,11 +1525,11 @@
    "tinted-schemes": {
      "flake": false,
      "locked": {
-        "lastModified": 1757716333,
-        "narHash": "sha256-d4km8W7w2zCUEmPAPUoLk1NlYrGODuVa3P7St+UrqkM=",
+        "lastModified": 1763914658,
+        "narHash": "sha256-Hju0WtMf3iForxtOwXqGp3Ynipo0EYx1AqMKLPp9BJw=",
        "owner": "tinted-theming",
        "repo": "schemes",
-        "rev": "317a5e10c35825a6c905d912e480dfe8e71c7559",
+        "rev": "0f6be815d258e435c9b137befe5ef4ff24bea32c",
        "type": "github"
      },
      "original": {
@ -1404,11 +1541,11 @@
    "tinted-tmux": {
      "flake": false,
      "locked": {
-        "lastModified": 1757811970,
-        "narHash": "sha256-n5ZJgmzGZXOD9pZdAl1OnBu3PIqD+X3vEBUGbTi4JiI=",
+        "lastModified": 1764465359,
+        "narHash": "sha256-lbSVPqLEk2SqMrnpvWuKYGCaAlfWFMA6MVmcOFJjdjE=",
        "owner": "tinted-theming",
        "repo": "tinted-tmux",
-        "rev": "d217ba31c846006e9e0ae70775b0ee0f00aa6b1e",
+        "rev": "edf89a780e239263cc691a987721f786ddc4f6aa",
        "type": "github"
      },
      "original": {
@ -1420,11 +1557,11 @@
    "tinted-zed": {
      "flake": false,
      "locked": {
-        "lastModified": 1757811247,
-        "narHash": "sha256-4EFOUyLj85NRL3OacHoLGEo0wjiRJzfsXtR4CZWAn6w=",
+        "lastModified": 1764464512,
+        "narHash": "sha256-rCD/pAhkMdCx6blsFwxIyvBJbPZZ1oL2sVFrH07lmqg=",
        "owner": "tinted-theming",
        "repo": "base16-zed",
-        "rev": "824fe0aacf82b3c26690d14e8d2cedd56e18404e",
+        "rev": "907dbba5fb8cf69ebfd90b00813418a412d0a29a",
        "type": "github"
      },
      "original": {
@ -1462,11 +1599,19 @@
        ]
      },
      "locked": {
+<<<<<<< HEAD
        "lastModified": 1764598958,
        "narHash": "sha256-sJQHRL8trBoG/ArR+mUlyp5cyKU0pgQY+qDQzZGnVgM=",
        "owner": "0xc000022070",
        "repo": "zen-browser-flake",
        "rev": "8cded25e10b13e2999241f1c73a7d4e5e5d6f69e",
+=======
+        "lastModified": 1764825646,
+        "narHash": "sha256-QkKEkj3GXpkPxJz9S1RgaMlxstkyaj5IKVWvxIbtC8w=",
+        "owner": "0xc000022070",
+        "repo": "zen-browser-flake",
+        "rev": "8c9284cc227a5c7cd8f1e1fa7a6882b0907187c8",
+>>>>>>> ba1d4e1 (chore: update deps)
        "type": "github"
      },
      "original": {
--- a/flake.nix
+++ b/flake.nix
@ -88,9 +88,15 @@
      url = "https://git.clan.lol/clan/clan-core/archive/main.tar.gz";
      inputs.nixpkgs.follows = "nixpkgs";
    };
+
+    mydia = {
+      url = "github:chris-kruining/mydia";
+      # url = "github:getmydia/mydia";
+    };
  };

-  outputs = inputs: inputs.snowfall-lib.mkFlake {
+  outputs = inputs:
+    inputs.snowfall-lib.mkFlake {
      inherit inputs;
      src = ./.;

--- a/homes/x86_64-linux/chris@mandos/default.nix
+++ b/homes/x86_64-linux/chris@mandos/default.nix
@ -1,10 +1,11 @@
-{ osConfig, ... }:
-{
+{osConfig, ...}: {
  home.stateVersion = osConfig.system.stateVersion;

  programs.git = {
-    userName = "Chris Kruining";
-    userEmail = "chris@kruining.eu";
+    settings.user = {
+      name = "Chris Kruining";
+      email = "chris@kruining.eu";
+    };
  };

  sneeuwvlok = {
--- a/homes/x86_64-linux/chris@manwe/default.nix
+++ b/homes/x86_64-linux/chris@manwe/default.nix
@ -1,10 +1,11 @@
-{ osConfig, ... }:
-{
+{osConfig, ...}: {
  home.stateVersion = osConfig.system.stateVersion;

  programs.git = {
-    userName = "Chris Kruining";
-    userEmail = "chris@kruining.eu";
+    settings.user = {
+      name = "Chris Kruining";
+      email = "chris@kruining.eu";
+    };
  };

  sneeuwvlok = {
--- a/homes/x86_64-linux/chris@orome/default.nix
+++ b/homes/x86_64-linux/chris@orome/default.nix
@ -1,10 +1,11 @@
-{ osConfig, ... }:
-{
+{osConfig, ...}: {
  home.stateVersion = osConfig.system.stateVersion;

  programs.git = {
-    userName = "Chris Kruining";
-    userEmail = "chris@kruining.eu";
+    settings.user = {
+      name = "Chris Kruining";
+      email = "chris@kruining.eu";
+    };
  };

  sneeuwvlok = {
--- a/homes/x86_64-linux/chris@tulkas/default.nix
+++ b/homes/x86_64-linux/chris@tulkas/default.nix
@ -1,10 +1,11 @@
-{ osConfig, ... }:
-{
+{osConfig, ...}: {
  home.stateVersion = osConfig.system.stateVersion;

  programs.git = {
-    userName = "Chris Kruining";
-    userEmail = "chris@kruining.eu";
+    settings.user = {
+      name = "Chris Kruining";
+      email = "chris@kruining.eu";
+    };
  };

  sneeuwvlok = {
--- a/modules/home/application/onlyoffice/default.nix
+++ b/modules/home/application/onlyoffice/default.nix
@ -1,16 +1,20 @@
-{ inputs, config, lib, pkgs, namespace, ... }:
-let
+{
+  inputs,
+  config,
+  lib,
+  pkgs,
+  namespace,
+  ...
+}: let
  inherit (lib) mkIf mkEnableOption;

  cfg = config.${namespace}.application.onlyoffice;
-in
-{
+in {
  options.${namespace}.application.onlyoffice = {
    enable = mkEnableOption "enable onlyoffice";
  };

  config = mkIf cfg.enable {
-    home.packages = with pkgs; [ onlyoffice-bin ];
-    # fonts.packages = with pkgs; [ corefonts ];
+    home.packages = with pkgs; [onlyoffice-desktopeditors];
  };
 }
--- a/modules/home/application/steam/default.nix
+++ b/modules/home/application/steam/default.nix
@ -10,7 +10,7 @@ in
  };

  config = mkIf cfg.enable {
-    home.packages = with pkgs; [ protonup ];
+    home.packages = with pkgs; [ protonup-ng ];

    home.sessionVariables = {
      STEAM_EXTRA_COMPAT_TOOLS_PATHS = "\${HOME}/.steam/root/compatibilitytools.d";
--- a/modules/home/application/teamspeak/default.nix
+++ b/modules/home/application/teamspeak/default.nix
@ -10,6 +10,6 @@ in
  };

  config = mkIf cfg.enable {
-    home.packages = with pkgs; [ teamspeak_client ];
+    home.packages = with pkgs; [ teamspeak3 teamspeak6-client ];
  };
 }
--- a/modules/home/shell/toolset/git/default.nix
+++ b/modules/home/shell/toolset/git/default.nix
@ -1,10 +1,14 @@
-{ config, lib, pkgs, namespace, ... }:
-let
+{
+  config,
+  lib,
+  pkgs,
+  namespace,
+  ...
+}: let
  inherit (lib) mkEnableOption mkIf;

  cfg = config.${namespace}.shell.toolset.git;
-in
-{
+in {
  options.${namespace}.shell.toolset.git = {
    enable = mkEnableOption "version-control system";
  };
@ -29,14 +33,6 @@ in
      git = {
        enable = true;
        package = pkgs.gitFull;
-        difftastic = {
-          enable = true;
-          options = {
-            background = "dark";
-            color = "always";
-            display = "inline";
-          };
-        };

        ignores = [
          # General:
@ -69,7 +65,7 @@ in
          "*.elc"
        ];

-        extraConfig = {
+        settings = {
          init.defaultBranch = "main";
          core = {
            editor = "nvim";
@ -106,6 +102,16 @@ in
          };
        };
      };
+
+      difftastic = {
+        enable = true;
+        git.enable = true;
+        options = {
+          background = "dark";
+          color = "always";
+          display = "inline";
+        };
+      };
    };
  };
 }
--- a/modules/nixos/application/steam/default.nix
+++ b/modules/nixos/application/steam/default.nix
@ -1,10 +1,15 @@
-{ inputs, config, lib, pkgs, namespace, ... }:
-let
+{
+  inputs,
+  config,
+  lib,
+  pkgs,
+  namespace,
+  ...
+}: let
  inherit (lib) mkIf mkEnableOption;

  cfg = config.${namespace}.application.steam;
-in
-{
+in {
  options.${namespace}.application.steam = {
    enable = mkEnableOption "enable steam";
  };
@ -13,7 +18,7 @@ in
    programs = {
      steam = {
        enable = true;
-        package = pkgs.steam-small.override {
+        package = pkgs.steam.override {
          extraEnv = {
            DXVK_HUD = "compiler";
            MANGOHUD = true;
--- a/modules/nixos/services/authentication/himmelblau/default.nix
+++ b/modules/nixos/services/authentication/himmelblau/default.nix
@ -1,9 +1,14 @@
-{ inputs, lib, config, namespace, ... }: let
+{
+  inputs,
+  lib,
+  config,
+  namespace,
+  ...
+}: let
  inherit (lib) mkEnableOption mkIf;

  cfg = config.${namespace}.services.authentication.himmelblau;
-in
-{
+in {
  imports = [inputs.himmelblau.nixosModules.himmelblau];

  options.${namespace}.services.authentication.himmelblau = {
@ -14,7 +19,7 @@ in
    services.himmelblau = {
      enable = true;
      settings = {
-        domains = [];
+        domain = "";
        pam_allow_groups = [];
        local_groups = [];
      };
--- a/modules/nixos/services/authentication/zitadel/default.nix
+++ b/modules/nixos/services/authentication/zitadel/default.nix
@ -23,7 +23,7 @@ in
            default = false;
            example = "true";
            description = ''
-              True sets the org as default org for the instance. Only one org can be default org. 
+              True sets the '${org}' org as default org for the instance. Only one org can be default org.
              Nothing happens if you set it to false until you set another org as default org.
            '';
          };
@ -335,14 +335,6 @@ in
    ;

    append = attrList: set: set // (listToAttrs attrList);
-    forEach = src: key: set: 
-    let
-      _key = concatMapStringsSep "_" (k: "\${item.${k}}") key;
-    in
-    { 
-      forEach = "{ for item in ${src} : \"${_key}\" => item }"; 
-    }
-    // set;

    config' = config;

@ -352,7 +344,21 @@ in

      modules = [
        ({ config, lib, ... }: {
-          config = {
+          config =
+          let
+            forEach = src: key: set:
+            let
+              _key = concatMapStringsSep "_" (k: "\${item.${k}}") key;
+            in
+            {
+              forEach = lib.tfRef ''{
+                for item in ${src} :
+                "''${item.org}_''${item.name}" => item
+              }'';
+            }
+          // set;
+          in
+          {
            terraform.required_providers.zitadel = {
              source = "zitadel/zitadel";
              version = "2.2.0";
@ -549,9 +555,11 @@ in
      wantedBy = [ "multi-user.target" ];
      wants = [ "zitadel.service" ];

-      script = ''
-        #!/usr/bin/env bash
-
+      script =
+      let
+        tofu = lib.getExe pkgs.opentofu;
+      in
+      ''
        if [ "$(systemctl is-active zitadel)" != "active" ]; then
          echo "Zitadel is not running"
          exit 1
@ -564,11 +572,11 @@ in
        cp -f ${terraformConfiguration} config.tf.json

        # Initialize OpenTofu
-        ${lib.getExe pkgs.opentofu} init
+        ${tofu} init

        # Run the infrastructure code
-        # ${lib.getExe pkgs.opentofu} plan
-        ${lib.getExe pkgs.opentofu} apply -auto-approve
+        ${tofu} plan -refresh=false -out=tfplan
+        ${tofu} apply -auto-approve tfplan
      '';

      serviceConfig = {
--- a/modules/nixos/services/communication/matrix/default.nix
+++ b/modules/nixos/services/communication/matrix/default.nix
@ -1,5 +1,10 @@
-{ config, lib, pkgs, namespace, ... }:
-let
+{
+  config,
+  lib,
+  pkgs,
+  namespace,
+  ...
+}: let
  inherit (builtins) toString toJSON;
  inherit (lib) mkIf mkEnableOption;

@ -10,8 +15,7 @@ let
  port = 4001;

  database = "synapse";
-in
-{
+in {
  options.${namespace}.services.communication.matrix = {
    enable = mkEnableOption "Matrix server (Synapse)";
  };
--- a/modules/nixos/services/development/forgejo/default.nix
+++ b/modules/nixos/services/development/forgejo/default.nix
@ -1,12 +1,16 @@
-{ config, lib, pkgs, namespace, ... }:
-let
+{
+  config,
+  lib,
+  pkgs,
+  namespace,
+  ...
+}: let
  inherit (builtins) toString;
  inherit (lib) mkIf mkEnableOption mkOption;

  cfg = config.${namespace}.services.development.forgejo;
  domain = "git.amarth.cloud";
-in
-{
+in {
  options.${namespace}.services.development.forgejo = {
    enable = mkEnableOption "Forgejo";

@ -180,6 +184,14 @@ in
      };
    };

+    users = {
+      users."gitea-runner" = {
+        isSystemUser = true;
+        group = "gitea-runner";
+      };
+      groups."gitea-runner" = {};
+    };
+
    sops.secrets = {
      "forgejo/action_runner_token" = {
        owner = "gitea-runner";
--- a/modules/nixos/services/media/default.nix
+++ b/modules/nixos/services/media/default.nix
@ -1,13 +1,19 @@
-{ pkgs, lib, namespace, config, inputs, system, ... }:
-let
+{
+  pkgs,
+  lib,
+  namespace,
+  config,
+  inputs,
+  system,
+  ...
+}: let
  inherit (lib) mkIf mkEnableOption mkOption;
  inherit (lib.types) str;

  cfg = config.${namespace}.services.media;

  arr = ["radarr"];
-in
-{
+in {
  options.${namespace}.services.media = {
    enable = mkEnableOption "Enable media services";

@ -73,7 +79,8 @@ in
        arr
        |> lib.imap (i: service: {
          name = service;
-          value = {
+          value =
+            {
              enable = true;
              openFirewall = true;

@ -98,12 +105,19 @@ in
                };
              };
            }
-          // (if service != "prowlarr" then { user = cfg.user; group = cfg.group; } else {});
+            // (
+              if service != "prowlarr"
+              then {
+                user = cfg.user;
+                group = cfg.group;
+              }
+              else {}
+            );
        })
-        |> lib.listToAttrs
-      ;
+        |> lib.listToAttrs;
    in
-    arr-services // {
+      arr-services
+      // {
        bazarr = {
          enable = true;
          openFirewall = true;
@ -133,6 +147,10 @@ in

          serverConfig = {
            LegalNotice.Accepted = true;
+
+            Prefecences.WebUI = {
+              Username = "admin";
+            };
          };

          user = cfg.user;
@ -149,14 +167,14 @@ in
          group = cfg.group;
        };

-      postgresql = 
-      let
+        postgresql = let
          databases = arr |> lib.concatMap (s: [s "${s}-log"]);
-      in
-      {
+        in {
          enable = true;
          ensureDatabases = arr;
-        ensureUsers = arr |> lib.map (service: {
+          ensureUsers =
+            arr
+            |> lib.map (service: {
              name = service;
              ensureDBOwnership = true;
            });
@ -172,14 +190,17 @@ in
        };
      };

-    systemd.services.radarrApplyTerraform = 
-    let
+    systemd.services.radarrApplyTerraform = let
      # this is a nix package, the generated json file to be exact
      terraformConfiguration = inputs.terranix.lib.terranixConfiguration {
        inherit system;

        modules = [
-          ({ config, lib, ... }: {
+          ({
+            config,
+            lib,
+            ...
+          }: {
            config = {
              variable = {
                api_key = {
@ -207,8 +228,7 @@ in
          })
        ];
      };
-    in
-    {
+    in {
      description = "Radarr terraform apply";

      wantedBy = ["multi-user.target"];
@ -255,7 +275,8 @@ in
    systemd.services.jellyfin.serviceConfig.killSignal = lib.mkForce "SIGKILL";

    sops = {
-      secrets =
+      secrets = let
+        arrSecrets =
          arr
          |> lib.map (service: {
            name = "${service}/apikey";
@ -265,11 +286,15 @@ in
              restartUnits = ["${service}.service"];
            };
          })
-        |> lib.listToAttrs
-      ;
+          |> lib.listToAttrs;
+      in
+        arrSecrets
+        // {
+          # "qbittorrent/password" = {};
+          "qbittorrent/password_hash" = {};
+        };

-      templates = 
-        let
+      templates = let
        apikeys =
          arr
          |> lib.map (service: {
@ -299,9 +324,21 @@ in
            };
          })
          |> lib.listToAttrs;
+
+        qbittorrent = {
+          "qbittorrent/password.conf" = {
+            owner = cfg.user;
+            group = cfg.group;
+            restartUnits = ["qbittorrent.service"];
+            path = "${config.services.qbittorrent.profileDir}/qBittorrent/config/password.conf";
+            content = ''
+              [Preferences]
+              WebUI\Password_PBKDF2="${config.sops.placeholder."qbittorrent/password_hash"}"
+            '';
+          };
+        };
      in
-        apikeys // tfvars
-      ;
+        apikeys // tfvars // qbittorrent;
    };
  };
 }
--- a/modules/nixos/services/media/mydia/default.nix
+++ b/modules/nixos/services/media/mydia/default.nix
@ -0,0 +1,86 @@
+{
+  config,
+  lib,
+  namespace,
+  inputs,
+  system,
+  ...
+}: let
+  inherit (lib) mkIf mkEnableOption;
+
+  cfg = config.${namespace}.services.media.mydia;
+in {
+  imports = [
+    inputs.mydia.nixosModules.default
+  ];
+
+  options.${namespace}.services.media.mydia = {
+    enable = mkEnableOption "Enable Mydia";
+  };
+
+  config = mkIf cfg.enable {
+    services.mydia = {
+      enable = true;
+
+      port = 2010;
+      listenAddress = "0.0.0.0";
+      openFirewall = true;
+
+      mediaLibraries = [
+        "/var/mydia/movies"
+        "/var/mydia/series"
+      ];
+
+      database = {
+        # type = "sqlite";
+        # uri = "file:///var/lib/mydia/mydia.db";
+        type = "postgres";
+        uri = "postgres://mydia@localhost:5432/mydia?sslmode=disable";
+        passwordFile = config.sops.secrets."mydia/qbittorrent_password".path;
+      };
+
+      secretKeyBaseFile = config.sops.secrets."mydia/secret_key_base".path;
+      guardianSecretKeyFile = config.sops.secrets."mydia/guardian_secret".path;
+
+      oidc = {
+        enable = true;
+        issuer = "https://auth.kruining.eu";
+        clientIdFile = config.sops.secrets."mydia/oidc_id".path;
+        clientSecretFile = config.sops.secrets."mydia/oidc_secret".path;
+        scopes = ["openid" "profile" "email"];
+      };
+
+      downloadClients = {
+        qbittorrent = {
+          type = "qbittorrent";
+          host = "localhost";
+          port = 2008;
+          username = "admin";
+          passwordFile = config.sops.secrets."mydia/qbittorrent_password".path;
+          useSsl = false;
+        };
+      };
+    };
+
+    sops.secrets = let
+      base =
+        ["secret_key_base" "guardian_secret" "oidc_id" "oidc_secret"]
+        |> lib.map (name:
+          lib.nameValuePair "mydia/${name}" {
+            owner = config.services.mydia.user;
+            group = config.services.mydia.group;
+            restartUnits = ["mydia.service"];
+          })
+        |> lib.listToAttrs;
+    in
+      base
+      // {
+        "mydia/qbittorrent_password" = {
+          owner = config.services.mydia.user;
+          group = config.services.mydia.group;
+          restartUnits = ["mydia.service"];
+          key = "qbittorrent/password";
+        };
+      };
+  };
+}
--- a/modules/nixos/services/media/servarr/default.nix
+++ b/modules/nixos/services/media/servarr/default.nix
@ -1,11 +1,17 @@
-{ pkgs, config, lib, namespace, inputs, system, ... }:
-let
+{
+  pkgs,
+  config,
+  lib,
+  namespace,
+  inputs,
+  system,
+  ...
+}: let
  inherit (builtins) toString;
  inherit (lib) mkIf mkEnableOption mkOption types;

  cfg = config.${namespace}.services.media.servarr;
-in
-{
+in {
  options.${namespace}.services.media = {
    servarr = mkOption {
      type = types.attrsOf (types.submodule ({name, ...}: {
@ -30,7 +36,11 @@ in
  config = {
    services =
      cfg
-      |> lib.mapAttrsToList  (service: { enable, port, ... }: (mkIf enable {
+      |> lib.mapAttrsToList (service: {
+        enable,
+        port,
+        ...
+      }: (mkIf enable {
        "${service}" = {
          enable = true;
          openFirewall = true;
@ -58,31 +68,44 @@ in
        };
      }))
      |> lib.mergeAttrsList
-      |> (set: set // {
-        postgres = {
+      |> (set:
+        set
+        // {
+          postgresql = {
            ensureDatabases = cfg |> lib.attrNames;
-          ensureUsers = cfg |> lib.attrNames |> lib.map (service: {
+            ensureUsers =
+              cfg
+              |> lib.attrNames
+              |> lib.map (service: {
                name = service;
                ensureDBOwnership = true;
              });
          };
-      })
-    ;
+        });

    systemd =
      cfg
-      |> lib.mapAttrsToList  (service: { enable, debug, port, rootFolders, ... }: (mkIf enable {
+      |> lib.mapAttrsToList (service: {
+        enable,
+        debug,
+        port,
+        rootFolders,
+        ...
+      }: (mkIf enable {
        tmpfiles.rules = [
          "d /var/lib/${service}ApplyTerraform 0755 ${service} ${service} -"
        ];

-        services."${service}ApplyTerraform" = 
-        let
+        services."${service}ApplyTerraform" = let
          terraformConfiguration = inputs.terranix.lib.terranixConfiguration {
            inherit system;

            modules = [
-              ({ config, lib, ... }: {
+              ({
+                config,
+                lib,
+                ...
+              }: {
                config = {
                  variable = {
                    api_key = {
@ -105,15 +128,13 @@ in
                    "${service}_root_folder" =
                      rootFolders
                      |> lib.imap (i: f: lib.nameValuePair "local${toString i}" {path = f;})
-                      |> lib.listToAttrs
-                    ;
+                      |> lib.listToAttrs;
                  };
                };
              })
            ];
          };
-        in
-        {
+        in {
          description = "${service} terraform apply";

          wantedBy = ["multi-user.target"];
@ -141,7 +162,11 @@ in

            # Run the infrastructure code
            ${lib.getExe pkgs.opentofu} \
-            ${if debug then "plan" else "apply -auto-approve"} \
+            ${
+              if debug
+              then "plan"
+              else "apply -auto-approve"
+            } \
            -var-file='${config.sops.templates."${service}/config.tfvars".path}'
          '';

@ -158,16 +183,14 @@ in
          };
        };
      }))
-      |> lib.mergeAttrsList
-    ;
+      |> lib.mergeAttrsList;

    users.users =
      cfg
      |> lib.mapAttrsToList (service: {enable, ...}: (mkIf enable {
        "${service}".extraGroups = ["media"];
      }))
-      |> lib.mergeAttrsList
-    ;
+      |> lib.mergeAttrsList;

    sops =
      cfg
@ -198,11 +221,9 @@ in
          };
        };
      }))
-      |> lib.mergeAttrsList
-    ;
+      |> lib.mergeAttrsList;
  };

-
  #   cfg
  #   |> lib.mapAttrsToList  (service: { enable, debug, port, rootFolders, ... }: (mkIf enable {

--- a/modules/nixos/services/security/vaultwarden/default.nix
+++ b/modules/nixos/services/security/vaultwarden/default.nix
@ -1,5 +1,10 @@
-{ pkgs, config, lib, namespace, ... }:
-let
+{
+  pkgs,
+  config,
+  lib,
+  namespace,
+  ...
+}: let
  inherit (builtins) toString;
  inherit (lib) mkIf mkEnableOption mkOption types getAttrs toUpper concatMapAttrsStringSep;

@ -12,14 +17,15 @@ let
      };

      file = mkOption {
-        type = types.str;
-        description = '''';
+        type = types.path;
+        description = ''
+          Path to sqlite database file.
+        '';
      };
    };
  });

-  databaseProviderPostgresql = types.submodule ({ ... }: 
-  let
+  databaseProviderPostgresql = types.submodule ({...}: let
    urlOptions = lib.${namespace}.options.mkUrlOptions {
      host = {
        description = ''
@ -40,9 +46,9 @@ let
        example = "postgres";
      };
    };
-  in
+  in {
+    options =
      {
-    options = {
        type = mkOption {
          type = types.enum ["postgresql"];
        };
@ -66,10 +72,10 @@ let
            [Source](https://www.postgresql.org/docs/current/libpq-ssl.html#LIBPQ-SSL-SSLMODE-STATEMENTS)
          '';
        };
-    } // (urlOptions |> getAttrs [ "protocol" "host" "port" ]);
+      }
+      // (urlOptions |> getAttrs ["protocol" "host" "port"]);
  });
-in
-{
+in {
  options.${namespace}.services.security.vaultwarden = {
    enable = mkEnableOption "enable vaultwarden";

@ -183,15 +189,15 @@ in
          owner = config.users.users.vaultwarden.name;
          group = config.users.groups.vaultwarden.name;
        };
-        temp-db-output.content = 
-          let 
+        temp-db-output.content = let
          config =
            cfg.database
-              |> ({ type, ... }@db: 
-                if type == "sqlite" then
-                  { inherit (db) type file; }
-                else if type == "postgresql" then
-                  { 
+            |> (
+              {type, ...} @ db:
+                if type == "sqlite"
+                then {inherit (db) type file;}
+                else if type == "postgresql"
+                then {
                  inherit (db) type;
                  url = lib.${namespace}.strings.toUrl {
                    inherit (db) protocol host port;
@ -201,13 +207,10 @@ in
                    };
                  };
                }
-                else
-                  {}
+                else {}
            )
-              |> concatMapAttrsStringSep "\n" (n: v: "${toUpper n}=${v}")
-            ;
-          in
-          ''
+            |> concatMapAttrsStringSep "\n" (n: v: "${toUpper n}=${v}");
+        in ''
          # GENERATED VALUES
          ${config}
        '';
--- a/modules/nixos/shells/default.nix
+++ b/modules/nixos/shells/default.nix
@ -1,2 +1,2 @@
-{ ... }:
-{}
+{...}: {
+}
--- a/shells/default/default.nix
+++ b/shells/default/default.nix
@ -1,5 +1,10 @@
-{ mkShell, inputs, pkgs, ... }:
-
+{
+  mkShell,
+  inputs,
+  pkgs,
+  stdenv,
+  ...
+}:
 mkShell {
  packages = with pkgs; [
    bash
@ -7,6 +12,10 @@ mkShell {
    just
    yq
    pwgen
-    inputs.clan-core.packages.x86_64-linux.clan-cli
+    alejandra
+    nil
+    nixd
+    openssl
+    inputs.clan-core.packages.${stdenv.hostPlatform.system}.clan-cli
  ];
 }
--- a/systems/x86_64-linux/ulmo/default.nix
+++ b/systems/x86_64-linux/ulmo/default.nix
@ -1,5 +1,4 @@
-{ ... }:
-{
+{...}: {
  imports = [
    ./disks.nix
    ./hardware.nix
@ -8,7 +7,10 @@
  networking = {
    interfaces.enp2s0 = {
      ipv6.addresses = [
-        { address = "2a0d:6e00:1dc9:0::dead:beef"; prefixLength = 64; }
+        {
+          address = "2a0d:6e00:1dc9:0::dead:beef";
+          prefixLength = 64;
+        }
      ];

      useDHCP = true;
@ -110,6 +112,12 @@
                    grantTypes = ["authorizationCode"];
                    responseTypes = ["code"];
                  };
+
+                  mydia = {
+                    redirectUris = ["http://localhost:2010/auth/oidc/callback"];
+                    grantTypes = ["authorizationCode"];
+                    responseTypes = ["code"];
+                  };
                };
              };
            };
@ -131,8 +139,16 @@
            };

            triggers = [
-              { flowType = "customiseToken"; triggerType = "preUserinfoCreation"; actions = [ "flattenRoles" ]; }
-              { flowType = "customiseToken"; triggerType = "preAccessTokenCreation"; actions = [ "flattenRoles" ]; }
+              {
+                flowType = "customiseToken";
+                triggerType = "preUserinfoCreation";
+                actions = ["flattenRoles"];
+              }
+              {
+                flowType = "customiseToken";
+                triggerType = "preAccessTokenCreation";
+                actions = ["flattenRoles"];
+              }
            ];
          };
        };
@ -146,6 +162,7 @@

      media.enable = true;
      media.homer.enable = true;
+      media.mydia.enable = true;
      media.nfs.enable = true;
      media.servarr = {
        # radarr = {
--- a/systems/x86_64-linux/ulmo/secrets.yml
+++ b/systems/x86_64-linux/ulmo/secrets.yml
@ -19,6 +19,14 @@ lidarr:
    apikey: ENC[AES256_GCM,data:I2eKaxidmxem7C7ukmyIfwASNqrkS4vEOiCcU5kSNY6DR0pXsYg0PBdgu8vzK6llbXODLdG5t55BordIWvVRJGAauo0FMvtp59NSNpza7cK68tdKGvNefD6bqhUIR06BY11niQ==,iv:48AD7cd17TlWY5yAagepLOIVwgxhD/d13Pnup6GsWDA=,tag:teOVtW8opE99hqAXQwvlrA==,type:str]
 prowlarr:
    apikey: ENC[AES256_GCM,data:pyZ2WGEs/PlIdhDsQq2TPGJbplkd5fLF0ZkBjITqIJlnAzYHb+rl+KOM4rHqQcI6yAJM8X1Y3ymGrD7vG7GiRxB7yoEG13SKhZIWOddTnxIhbkz81RfrL2fUJIydOaP6sS//9Q==,iv:Tr6MWoC6nC7rdVTOjT1T2itT+lVL4GnUiAr5/+IHAs0=,tag:keIJNuGeVht8+xSN3FnBGA==,type:str]
+mydia:
+    oidc_id: ENC[AES256_GCM,data:LfYWh9EC0aio3w1Xsj/jtU6z,iv:+dX9KkNtfQMYSX4yr83KyXalWMD/aWby7fC8aL4ZT3I=,tag:CvdbMoMTuC9FohTMIE5pmg==,type:str]
+    oidc_secret: ENC[AES256_GCM,data:PgI4hmP/3wt9uj+1QvCYcT8Wav0hgCRADouzWM3V695SSfXfbwDgez8tA/tm1/1jymAU2F2sZH8G2hZ1cdHyHQ==,iv:h3o3jsTmnoNE3+mGX12J3ZU0/6PlQNjdndEvaj/czj0=,tag:p3+p4E8fBtR7a8UpM8cUsg==,type:str]
+    secret_key_base: ENC[AES256_GCM,data:yG7HJ5r74Qtxbeyf8F6dA0uHv2pQ8YAJKlKiKjS+m24JRvJWQaTThJ+c5HbuUa6R3e9XtVHchhlVPkF0Is/b+g==,iv:v65xdRr4JdKZmBtjZ08/J3LLqnphSGt9QfVPNQ2x/xg=,tag:n7tD2dhr4IJn1LWM9WW8UA==,type:str]
+    guardian_secret: ENC[AES256_GCM,data:OjnNFSHlecL+qXwlhTm++itRM6ga5E5KrSJxbgIUpbMEkIWgu3xhRtnPdipXbedgall0XdO/s+jnWCagZX94BA==,iv:DukdKvm9vey8BWUiml20tgA/Vji1XVX4+sUPge9nTk0=,tag:q3HdvgUYqR0APiaFz0ul5Q==,type:str]
+qbittorrent:
+    password_hash: ENC[AES256_GCM,data:QWuQYmfBn9eLDYztH7TmQvw74MvmzCQ98OlBtyjm1Icr2c63epRuHWzQbm+Q+1jrCSiQreOB3ZyjLzkeV6SlLonryUSD71uBWVwctgPXO0XDrxE1Vi6dkiwC3TF65JTMDhyjDLEj1YkiMP25Fz5NidJTP/r9GlXTfM7gjWo=,iv:bpgL5IoAv+1PUtgNIjLcbzN8C9z55ndypz4LEELAhLc=,tag:VB+XTCwLeIEYKnOr/0f7zA==,type:str]
+    password: ENC[AES256_GCM,data:UepYY6UjJV/jo2aXTOEnKRtsjSqOSYPQlKlrAa7rf9rdnt2UXGjCkvN+A72pICuIBCAmhXZBAUMvmWTV9trk6NREHe0cY1xTC7pNv3x9TM/ZQmH498pbT/95pYAKwouHp9heJQ==,iv:FzjF+xPoaOp+gplxpz940V2dkWSTWe8dWUxexCoxxHc=,tag:TDZsboq9fEmmBrwJN/HTpQ==,type:str]
 sops:
    age:
        - recipient: age19qfpf980tadguqq44zf6xwvjvl428dyrj46ha3n6aeqddwhtnuqqml7etq
@ -39,7 +47,7 @@ sops:
            TTRWaHhpNWlkVDFmMFN4ZTNHMUxyNVkKV693pzTKRkZboQCMPr9IyMGSgxfuHXcb
            Y6BNcp6Qg6PWtX5QI7wRkPNINAK1TEbRBba+b8h6gMmVU4DliQyFiQ==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-11-19T09:51:26Z"
-    mac: ENC[AES256_GCM,data:pMMkxHPochpI8si/oHhU7MHqC1JjNhMP7HCRNQQEkwBQI489xiC02t+qUwpmG4oIheqi8lEcZPpL4t9HzRN9sZImaI2LrJn3cHFojHzXzo7FPfvfUilZe1+JXLfm+wn+bflAEutIcfDiZc/MjiKOxRHwZy5Pr41Mj6uPIUr62zk=,iv:GwvMVgJ6m1DQcRZMVzshbuMK/Kx8vE8Ym83KbxuvYRg=,tag:wVSol9LDRzoFjQppB8J9gA==,type:str]
+    lastmodified: "2025-12-04T11:24:52Z"
+    mac: ENC[AES256_GCM,data:jIgkl1lcVDSlKqJs9fjaHUAZsGL+22T86/qqKyDziHl0+VU763Ezwm8P+la+55jIIT2zLhFcUjhn2BabBi90OeEPztAC4rGpZj6+ZZ0GDCj/JhjPAAo3LgAKOCG0Xgf8MZWr/rXd6bLhW7Qj36PMJnap26rjEiUZeSvpWS2dz8g=,iv:CDx8fBI9Dl1uwrbMD1fa7/h3C7haK3xZxJI59mtL1LA=,tag:2UDRFJoevGEBKZA/9eUiOw==,type:str]
    unencrypted_suffix: _unencrypted
    version: 3.11.0
Author	SHA1	Message	Date
Chris Kruining	3ff7ddc54a	Merge pull request 'feature/mydia' (#1 ) from feature/mydia into main Some checks failed Test action / kaas (push) Failing after 0s Details Reviewed-on: #1	2025-12-06 16:42:23 +00:00
Chris Kruining	98425c9dcc	kaas	2025-12-06 16:42:06 +00:00
Chris Kruining	a787c8c646	chore: update deps	2025-12-06 17:42:02 +01:00
chris	f079fa7487	chore(secrets): set secret "qbittorrent/password" for machine "ulmo"	2025-12-06 16:41:51 +00:00
chris	37600b7116	chore(secrets): set secret "qbittorrent/password_hash" for machine "ulmo"	2025-12-06 16:41:51 +00:00
Chris Kruining	2130c44388	.	2025-12-06 16:41:50 +00:00
Chris Kruining	70fd7c3d7a	.	2025-12-06 16:41:49 +00:00
Chris Kruining	7a7e8bb088	fix: zitadel script	2025-12-06 16:41:48 +00:00
Chris Kruining	5396c9bab6	chore: revert bash option	2025-12-06 16:41:47 +00:00
chris	0e57c4f425	chore(secrets): set secret "mydia/oidc_secret" for machine "ulmo"	2025-12-06 16:41:47 +00:00
chris	ac4cc09ab5	chore(secrets): set secret "mydia/oidc_id" for machine "ulmo"	2025-12-06 16:41:46 +00:00
Chris Kruining	b64cfa9e73	fix: forEach implementation in zitadel module	2025-12-06 16:41:46 +00:00
Chris Kruining	afbf168c35	kaas	2025-12-06 16:41:45 +00:00
chris	e6829d99ce	chore(secrets): set secret "mydia/guardian_secret" for machine "ulmo"	2025-12-06 16:41:44 +00:00
chris	11dc6e33d6	chore(secrets): set secret "mydia/secret_key_base" for machine "ulmo"	2025-12-06 16:41:43 +00:00
chris	413af80f9c	chore(secrets): set secret "mydia/secret_key_base" for machine "ulmo"	2025-12-06 16:41:42 +00:00
chris	1ee19c8865	chore(secrets): set secret "mydia/oidc_secret" for machine "ulmo"	2025-12-06 16:41:42 +00:00
chris	f04b540efb	chore(secrets): set secret "mydia/oidc_id" for machine "ulmo"	2025-12-06 16:41:41 +00:00
Chris Kruining	f6a504667e	feat: fix most issues with mydia	2025-12-06 16:41:41 +00:00
Chris Kruining	95520c14d1	chore: refactor code	2025-12-06 16:41:40 +00:00
Chris Kruining	93ad4f17f3	still complaining about missing ffmpeg....	2025-12-06 16:41:39 +00:00
Chris Kruining	78ed7d2a0a	feat: remove bun2nix this is not the route I ended up going for, so I removed the dependency again	2025-12-06 17:41:36 +01:00
Chris Kruining	cb1401fe47	feat: start implementation of package for mydia	2025-12-06 17:40:46 +01:00