nixfmt

nixos/common/common.nix

@@ -1,8 +1,5 @@
 { config, lib, pkgs, ... }: {
-  imports = [
-    ./users
-    ./modules
-  ];
+  imports = [ ./users ./modules ];
 
   # Clean /tmp on boot.
   boot.tmp.cleanOnBoot = true;

nixos/common/generic-lxc.nix

@@ -2,7 +2,11 @@ _: {
   # See also: https://blog.xirion.net/posts/nixos-proxmox-lxc/
 
   # Supress systemd services that don't work (correctly) on LXC
-  systemd.suppressedSystemUnits = [ "dev-mqueue.mount" "sys-kernel-debug.mount" "sys-fs-fuse-connections.mount" ];
+  systemd.suppressedSystemUnits = [
+    "dev-mqueue.mount"
+    "sys-kernel-debug.mount"
+    "sys-fs-fuse-connections.mount"
+  ];
 
   # https://github.com/NixOS/nixpkgs/issues/157449#issuecomment-1459299764
   boot.specialFileSystems."/run".options = [ "rshared" ];

nixos/common/hm-modules/catppuccin.nix

@@ -2,9 +2,7 @@
 with lib;
 let cfg = config.themes.v.catppuccin;
 in {
-  options.themes.v.catppuccin = {
-    enable = mkEnableOption "catppuccin";
-  };
+  options.themes.v.catppuccin = { enable = mkEnableOption "catppuccin"; };
   config = let
     theme = "Catppuccin-Pink-Dark";
     cursorTheme = config.home.pointerCursor.name;

nixos/common/hm-modules/default.nix

@@ -1,8 +1 @@
-{ ... }: {
-  imports = [
-    ./catppuccin.nix
-    ./nvim.nix
-    ./riff.nix
-    ./vscode.nix
-  ];
-}
+{ ... }: { imports = [ ./catppuccin.nix ./nvim.nix ./riff.nix ./vscode.nix ]; }

nixos/common/hm-modules/nvim.nix

@@ -2,9 +2,7 @@
 with lib;
 let cfg = config.programs.v.nvim;
 in {
-  options.programs.v.nvim = {
-    enable = mkEnableOption "nvim";
-  };
+  options.programs.v.nvim = { enable = mkEnableOption "nvim"; };
   config = mkIf cfg.enable {
     programs.nixvim = {
       enable = true;

nixos/common/modules/default.nix

@@ -1,9 +1,3 @@
 { ... }: {
-  imports = [
-    ./dns.nix
-    ./flood.nix
-    ./gnome
-    ./unpackerr.nix
-    ./vault.nix
-  ];
+  imports = [ ./dns.nix ./flood.nix ./gnome ./unpackerr.nix ./vault.nix ];
 }

nixos/common/modules/dns.nix

@@ -9,13 +9,13 @@ let
   ipv6Hosts = filter (hasAttr "ip6") flat_hosts;
 
   localData = { hostname, realm, ip, ... }: ''"${hostname}.${realm}. A ${ip}"'';
-  local6Data = { hostname, realm, ip6, ... }: ''"${hostname}.${realm}. AAAA ${ip6}"'';
+  local6Data = { hostname, realm, ip6, ... }:
+    ''"${hostname}.${realm}. AAAA ${ip6}"'';
   ptrData = { hostname, realm, ip, ... }: ''"${ip} ${hostname}.${realm}"'';
   ptr6Data = { hostname, realm, ip6, ... }: ''"${ip6} ${hostname}.${realm}"'';
 
   cfg = config.services.v.dns;
-in
-{
+in {
   options.services.v.dns = {
     enable = mkEnableOption "v.dns";
 
@@ -50,7 +50,8 @@ in
             use-syslog = "yes";
             module-config = ''"validator iterator"'';
 
-            local-zone = map (localdomain: ''"${localdomain}}." transparent'') domains;
+            local-zone =
+              map (localdomain: ''"${localdomain}}." transparent'') domains;
             local-data = (map localData ipv4Host) ++ (map local6Data ipv6Hosts);
             local-data-ptr = (map ptrData ipv4Host) ++ (map ptr6Data ipv6Hosts);
 
@@ -83,10 +84,7 @@ in
           })
           (mkIf (cfg.mode == "laptop") {
             interface = [ "127.0.0.1" "::1" ];
-            access-control = [
-              "127.0.0.1/32 allow_snoop"
-              "::1 allow_snoop"
-            ];
+            access-control = [ "127.0.0.1/32 allow_snoop" "::1 allow_snoop" ];
           })
         ];
       };

nixos/common/modules/flood.nix

@@ -147,6 +147,7 @@ in {
     };
 
     # This is needed to create the dataDir with the correct permissions.
-    systemd.tmpfiles.rules = [ "d '${cfg.dataDir}' 0755 ${cfg.user} ${cfg.group} -" ];
+    systemd.tmpfiles.rules =
+      [ "d '${cfg.dataDir}' 0755 ${cfg.user} ${cfg.group} -" ];
   };
 }

nixos/common/modules/gnome/hm.nix

@@ -48,8 +48,6 @@ in {
     "image/x-icns" = "org.gnome.eog.desktop";
   };
 
-
-
   dconf.settings = {
     "org/gnome/desktop/input-sources" = {
       sources = [ (mkTuple [ "xkb" "us+altgr-intl" ]) ];

nixos/common/modules/unpackerr.nix

@@ -57,8 +57,7 @@ let
       '';
     };
   };
-in
-{
+in {
   options.services.unpackerr = {
     enable = mkEnableOption "unpackerr";
 
@@ -258,62 +257,61 @@ in
       after = [ "network.target" ];
       description = "unpackerr system service";
       # Filter out all unset variables else unpackerr complains
-      environment = filterAttrs (_n: v: stringLength v > 0)
-        {
-          # General options
-          UN_DEBUG = "${toString cfg.debug}";
-          UN_INTERVAL = "${cfg.interval}";
-          UN_START_DELAY = "${cfg.startDelay}";
-          UN_RETRY_DELAY = "${cfg.retryDelay}";
-          UN_MAX_RETRIES = "${toString cfg.maxRetries}";
-          UN_PARALLEL = "${toString cfg.parallel}";
-          UN_FILE_MODE = "${cfg.fileMode}";
-          UN_DIR_MODE = "${cfg.dirMode}";
+      environment = filterAttrs (_n: v: stringLength v > 0) {
+        # General options
+        UN_DEBUG = "${toString cfg.debug}";
+        UN_INTERVAL = "${cfg.interval}";
+        UN_START_DELAY = "${cfg.startDelay}";
+        UN_RETRY_DELAY = "${cfg.retryDelay}";
+        UN_MAX_RETRIES = "${toString cfg.maxRetries}";
+        UN_PARALLEL = "${toString cfg.parallel}";
+        UN_FILE_MODE = "${cfg.fileMode}";
+        UN_DIR_MODE = "${cfg.dirMode}";
 
-          # Sonarr
-          UN_SONARR_0_URL = "${cfg.sonarr.url}";
-          UN_SONARR_0_API_KEY = "${cfg.sonarr.apiKey}";
-          UN_SONARR_0_PATHS_0 = "${cfg.sonarr.paths}";
-          UN_SONARR_0_PROTOCOLS = "${cfg.sonarr.protocols}";
-          UN_SONARR_0_TIMEOUT = "${cfg.sonarr.timeout}";
-          UN_SONARR_0_DELETE_ORIG = "${toString cfg.sonarr.deleteOrginal}";
-          UN_SONARR_0_DELETE_DELAY = "${cfg.sonarr.deleteDelay}";
+        # Sonarr
+        UN_SONARR_0_URL = "${cfg.sonarr.url}";
+        UN_SONARR_0_API_KEY = "${cfg.sonarr.apiKey}";
+        UN_SONARR_0_PATHS_0 = "${cfg.sonarr.paths}";
+        UN_SONARR_0_PROTOCOLS = "${cfg.sonarr.protocols}";
+        UN_SONARR_0_TIMEOUT = "${cfg.sonarr.timeout}";
+        UN_SONARR_0_DELETE_ORIG = "${toString cfg.sonarr.deleteOrginal}";
+        UN_SONARR_0_DELETE_DELAY = "${cfg.sonarr.deleteDelay}";
 
-          # Radarr
-          UN_RADARR_0_URL = "${cfg.radarr.url}";
-          UN_RADARR_0_API_KEY = "${cfg.radarr.apiKey}";
-          UN_RADARR_0_PATHS_0 = "${cfg.radarr.paths}";
-          UN_RADARR_0_PROTOCOLS = "${cfg.radarr.protocols}";
-          UN_RADARR_0_TIMEOUT = "${cfg.radarr.timeout}";
-          UN_RADARR_0_DELETE_ORIG = "${toString cfg.radarr.deleteOrginal}";
-          UN_RADARR_0_DELETE_DELAY = "${cfg.radarr.deleteDelay}";
+        # Radarr
+        UN_RADARR_0_URL = "${cfg.radarr.url}";
+        UN_RADARR_0_API_KEY = "${cfg.radarr.apiKey}";
+        UN_RADARR_0_PATHS_0 = "${cfg.radarr.paths}";
+        UN_RADARR_0_PROTOCOLS = "${cfg.radarr.protocols}";
+        UN_RADARR_0_TIMEOUT = "${cfg.radarr.timeout}";
+        UN_RADARR_0_DELETE_ORIG = "${toString cfg.radarr.deleteOrginal}";
+        UN_RADARR_0_DELETE_DELAY = "${cfg.radarr.deleteDelay}";
 
-          # Lidarr
-          UN_LIDARR_0_URL = "${cfg.lidarr.url}";
-          UN_LIDARR_0_API_KEY = "${cfg.lidarr.apiKey}";
-          UN_LIDARR_0_PATHS_0 = "${cfg.lidarr.paths}";
-          UN_LIDARR_0_PROTOCOLS = "${cfg.lidarr.protocols}";
-          UN_LIDARR_0_TIMEOUT = "${cfg.lidarr.timeout}";
-          UN_LIDARR_0_DELETE_ORIG = "${toString cfg.lidarr.deleteOrginal}";
-          UN_LIDARR_0_DELETE_DELAY = "${cfg.lidarr.deleteDelay}";
+        # Lidarr
+        UN_LIDARR_0_URL = "${cfg.lidarr.url}";
+        UN_LIDARR_0_API_KEY = "${cfg.lidarr.apiKey}";
+        UN_LIDARR_0_PATHS_0 = "${cfg.lidarr.paths}";
+        UN_LIDARR_0_PROTOCOLS = "${cfg.lidarr.protocols}";
+        UN_LIDARR_0_TIMEOUT = "${cfg.lidarr.timeout}";
+        UN_LIDARR_0_DELETE_ORIG = "${toString cfg.lidarr.deleteOrginal}";
+        UN_LIDARR_0_DELETE_DELAY = "${cfg.lidarr.deleteDelay}";
 
-          # Readarr
-          UN_READARR_0_URL = "${cfg.readarr.url}";
-          UN_READARR_0_API_KEY = "${cfg.readarr.apiKey}";
-          UN_READARR_0_PATHS_0 = "${cfg.readarr.paths}";
-          UN_READARR_0_PROTOCOLS = "${cfg.readarr.protocols}";
-          UN_READARR_0_TIMEOUT = "${cfg.readarr.timeout}";
-          UN_READARR_0_DELETE_ORIG = "${toString cfg.readarr.deleteOrginal}";
-          UN_READARR_0_DELETE_DELAY = "${cfg.readarr.deleteDelay}";
+        # Readarr
+        UN_READARR_0_URL = "${cfg.readarr.url}";
+        UN_READARR_0_API_KEY = "${cfg.readarr.apiKey}";
+        UN_READARR_0_PATHS_0 = "${cfg.readarr.paths}";
+        UN_READARR_0_PROTOCOLS = "${cfg.readarr.protocols}";
+        UN_READARR_0_TIMEOUT = "${cfg.readarr.timeout}";
+        UN_READARR_0_DELETE_ORIG = "${toString cfg.readarr.deleteOrginal}";
+        UN_READARR_0_DELETE_DELAY = "${cfg.readarr.deleteDelay}";
 
-          # Folder
-          UN_FOLDER_0_PATH = "${cfg.folder.path}";
-          UN_FOLDER_0_EXTRACT_PATH = "${cfg.folder.extractPath}";
-          UN_FOLDER_0_DELETE_AFTER = "${cfg.folder.deleteAfter}";
-          UN_FOLDER_0_DELETE_ORIGINAL = "${toString cfg.folder.deleteOrginal}";
-          UN_FOLDER_0_DELETE_FILES = "${toString cfg.folder.deleteFiles}";
-          UN_FOLDER_0_MOVE_BACK = "${toString cfg.folder.moveBack}";
-        } // cfg.extraConfig;
+        # Folder
+        UN_FOLDER_0_PATH = "${cfg.folder.path}";
+        UN_FOLDER_0_EXTRACT_PATH = "${cfg.folder.extractPath}";
+        UN_FOLDER_0_DELETE_AFTER = "${cfg.folder.deleteAfter}";
+        UN_FOLDER_0_DELETE_ORIGINAL = "${toString cfg.folder.deleteOrginal}";
+        UN_FOLDER_0_DELETE_FILES = "${toString cfg.folder.deleteFiles}";
+        UN_FOLDER_0_MOVE_BACK = "${toString cfg.folder.moveBack}";
+      } // cfg.extraConfig;
       serviceConfig = {
         User = cfg.user;
         Group = cfg.group;

nixos/common/users/default.nix

@@ -1,9 +1,5 @@
-{ config, pkgs, lib, ... }:
-{
-  imports = [
-    ./laura.nix
-    ./victor.nix
-  ];
+{ config, pkgs, lib, ... }: {
+  imports = [ ./laura.nix ./victor.nix ];
 
   # Setup ZSH to use grml config
   programs.zsh = {
@@ -35,7 +31,8 @@
   # Configure the root account
   users.extraUsers.root = {
     # Allow my SSH keys for logging in as root.
-    openssh.authorizedKeys.keys = config.users.extraUsers.victor.openssh.authorizedKeys.keys;
+    openssh.authorizedKeys.keys =
+      config.users.extraUsers.victor.openssh.authorizedKeys.keys;
     # Also use zsh for root
     shell = pkgs.zsh;
   };

nixos/common/users/victor.nix

@@ -1,5 +1,5 @@
 { pkgs, ... }: {
-    # The block that specifies my user account.
+  # The block that specifies my user account.
   users.extraUsers.victor = {
     # This account is intended for a non-system user.
     isNormalUser = true;
@@ -18,6 +18,7 @@
     ];
 
     # Make me admin
-    extraGroups = [ "systemd-journal" "wheel" "networkmanager" "libvirtd" "dialout" ];
+    extraGroups =
+      [ "systemd-journal" "wheel" "networkmanager" "libvirtd" "dialout" ];
   };
 }

nixos/hosts/hades/bastion/configuration.nix

@@ -1,5 +1,4 @@
-{ pkgs, lib, ... }:
-{
+{ pkgs, lib, ... }: {
   networking.interfaces.eth0.useDHCP = true;
 
   # mosh ssh

nixos/hosts/hades/bazarr/configuration.nix

@@ -1,5 +1,4 @@
-_:
-{
+_: {
   system.stateVersion = "22.11";
   networking.interfaces.eth0.useDHCP = true;
 

nixos/hosts/hades/dns/configuration.nix

@@ -1,5 +1,4 @@
-{ pkgs, ... }:
-{
+{ pkgs, ... }: {
   imports = [ ];
 
   # This value determines the NixOS release from which the default

nixos/hosts/hades/docker-registry-proxy/configuration.nix

@@ -1,17 +1,19 @@
 { config, ... }:
-let vs = config.vault-secrets.secrets; in
-{
+let vs = config.vault-secrets.secrets;
+in {
   system.stateVersion = "22.05";
 
   networking.interfaces.eth0.useDHCP = true;
 
   # the registry port and metrics port
-  networking.firewall.allowedTCPPorts = [ config.services.dockerRegistry.port 5001 ];
+  networking.firewall.allowedTCPPorts =
+    [ config.services.dockerRegistry.port 5001 ];
 
   vault-secrets.secrets.docker-registry = { };
 
   # Sets the minio user and password
-  systemd.services.docker-registry.serviceConfig.EnvironmentFile = "${vs.docker-registry}/environment";
+  systemd.services.docker-registry.serviceConfig.EnvironmentFile =
+    "${vs.docker-registry}/environment";
 
   services.dockerRegistry = {
     enable = true;

nixos/hosts/hades/docker-registry/configuration.nix

@@ -1,17 +1,19 @@
 { config, ... }:
-let vs = config.vault-secrets.secrets; in
-{
+let vs = config.vault-secrets.secrets;
+in {
   system.stateVersion = "22.05";
 
   networking.interfaces.eth0.useDHCP = true;
 
   # the registry port and metrics port
-  networking.firewall.allowedTCPPorts = [ config.services.dockerRegistry.port 5001 ];
+  networking.firewall.allowedTCPPorts =
+    [ config.services.dockerRegistry.port 5001 ];
 
   vault-secrets.secrets.docker-registry = { };
 
   # Sets the minio user and password
-  systemd.services.docker-registry.serviceConfig.EnvironmentFile = "${vs.docker-registry}/environment";
+  systemd.services.docker-registry.serviceConfig.EnvironmentFile =
+    "${vs.docker-registry}/environment";
 
   services.dockerRegistry = {
     enable = true;
@@ -34,15 +36,13 @@ let vs = config.vault-secrets.secrets; in
       http.debug.prometheus.enabled = true;
 
       # Webhooks
-      notifications.endpoints = [
-        {
-          name = "keel";
-          url = "http://10.10.10.17:9300/v1/webhooks/registry";
-          timeout = "500ms";
-          treshold = 5;
-          backoff = "1s";
-        }
-      ];
+      notifications.endpoints = [{
+        name = "keel";
+        url = "http://10.10.10.17:9300/v1/webhooks/registry";
+        timeout = "500ms";
+        treshold = 5;
+        backoff = "1s";
+      }];
     };
   };
 }

nixos/hosts/hades/jackett/configuration.nix

@@ -1,5 +1,4 @@
-_:
-{
+_: {
   system.stateVersion = "21.05";
   networking.interfaces.eth0.useDHCP = true;
 

nixos/hosts/hades/lucy/hardware-configuration.nix

@@ -4,24 +4,30 @@
 { lib, modulesPath, ... }:
 
 {
-  imports =
-    [ (modulesPath + "/profiles/qemu-guest.nix")
-    ];
+  imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
 
-  boot.initrd.availableKernelModules = [ "uhci_hcd" "ehci_pci" "ahci" "virtio_pci" "virtio_scsi" "sd_mod" "sr_mod" ];
+  boot.initrd.availableKernelModules = [
+    "uhci_hcd"
+    "ehci_pci"
+    "ahci"
+    "virtio_pci"
+    "virtio_scsi"
+    "sd_mod"
+    "sr_mod"
+  ];
   boot.initrd.kernelModules = [ ];
   boot.kernelModules = [ ];
   boot.extraModulePackages = [ ];
 
-  fileSystems."/" =
-    { device = "/dev/disk/by-uuid/749c02fd-209d-4974-917e-38b749d10ec2";
-      fsType = "ext4";
-    };
+  fileSystems."/" = {
+    device = "/dev/disk/by-uuid/749c02fd-209d-4974-917e-38b749d10ec2";
+    fsType = "ext4";
+  };
 
-  fileSystems."/boot" =
-    { device = "/dev/disk/by-uuid/D021-72EB";
-      fsType = "vfat";
-    };
+  fileSystems."/boot" = {
+    device = "/dev/disk/by-uuid/D021-72EB";
+    fsType = "vfat";
+  };
 
   swapDevices = [ ];
 

nixos/hosts/hades/minio/configuration.nix

@@ -1,6 +1,5 @@
 { config, pkgs, ... }:
-let
-  vs = config.vault-secrets.secrets;
+let vs = config.vault-secrets.secrets;
 in {
   system.stateVersion = "22.11";
 

nixos/hosts/hades/nginx/configuration.nix

@@ -28,7 +28,6 @@ in {
   security.acme.acceptTerms = true;
   security.acme.preliminarySelfsigned = true;
 
-
   services.nginx = {
     enable = true;
     recommendedProxySettings = true;

nixos/hosts/hades/overseerr/configuration.nix

@@ -31,9 +31,7 @@
           # LOG_LEVEL = "debug";
           TZ = "Europe/Amsterdam";
         };
-        ports = [
-          "5055:5055"
-        ];
+        ports = [ "5055:5055" ];
         volumes = [ "/var/lib/overseerr/config:/app/config" ];
       };
     };

nixos/hosts/hades/prowlarr/configuration.nix

@@ -1,5 +1,4 @@
-_:
-{
+_: {
   networking.interfaces.eth0.useDHCP = true;
   system.stateVersion = "22.11";
 
@@ -15,9 +14,7 @@ _:
     containers = {
       flaresolverr = {
         image = "flaresolverr/flaresolverr:v3.1.2";
-        ports = [
-          "8191:8191"
-        ];
+        ports = [ "8191:8191" ];
       };
     };
   };

nixos/hosts/hades/rtorrent/rtorrent.nix

@@ -1,116 +1,115 @@
-{ config, lib, pkgs, ... }:
-{
+{ config, lib, pkgs, ... }: {
   services.rtorrent = {
     enable = true;
     port = 54945; # Port Forwarded in mullvad
     downloadDir = "/mnt/storage/torrents/r";
     package = pkgs.jesec-rtorrent;
-    configText = let cfg = config.services.rtorrent; in
-      pkgs.lib.mkForce ''
-        # rTorrent runtime directory (cfg.basedir) [default: "$HOME/.local/share/rtorrent"]
-        method.insert = cfg.basedir, private|const|string, (cat,"${cfg.dataDir}/")
+    configText = let cfg = config.services.rtorrent;
+    in pkgs.lib.mkForce ''
+      # rTorrent runtime directory (cfg.basedir) [default: "$HOME/.local/share/rtorrent"]
+      method.insert = cfg.basedir, private|const|string, (cat,"${cfg.dataDir}/")
 
-        # Default download directory (cfg.download) [default: "$(cfg.basedir)/download"]
-        method.insert = cfg.download, private|const|string, (cat,"${cfg.downloadDir}")
+      # Default download directory (cfg.download) [default: "$(cfg.basedir)/download"]
+      method.insert = cfg.download, private|const|string, (cat,"${cfg.downloadDir}")
 
-        # RPC Socket
-        method.insert = cfg.rpcsock, private|const|string, (cat,"${cfg.rpcSocket}")
+      # RPC Socket
+      method.insert = cfg.rpcsock, private|const|string, (cat,"${cfg.rpcSocket}")
 
-        # Log directory (cfg.logs) [default: "$(cfg.basedir)/log"]
-        method.insert = cfg.logs,     private|const|string, (cat,(cfg.basedir),"log/")
-        method.insert = cfg.logfile,  private|const|string, (cat,(cfg.logs),"rtorrent-",(system.time),".log")
+      # Log directory (cfg.logs) [default: "$(cfg.basedir)/log"]
+      method.insert = cfg.logs,     private|const|string, (cat,(cfg.basedir),"log/")
+      method.insert = cfg.logfile,  private|const|string, (cat,(cfg.logs),"rtorrent-",(system.time),".log")
 
-        # Torrent session directory (cfg.session) [default: "$(cfg.basedir)/.session"]
-        method.insert = cfg.session,  private|const|string, (cat,(cfg.basedir),".session/")
+      # Torrent session directory (cfg.session) [default: "$(cfg.basedir)/.session"]
+      method.insert = cfg.session,  private|const|string, (cat,(cfg.basedir),".session/")
 
-        # Watch (drop to add) directories (cfg.watch) [default: "$(cfg.basedir)/watch"]
-        method.insert = cfg.watch,    private|const|string, (cat,(cfg.basedir),"watch/")
+      # Watch (drop to add) directories (cfg.watch) [default: "$(cfg.basedir)/watch"]
+      method.insert = cfg.watch,    private|const|string, (cat,(cfg.basedir),"watch/")
 
-        # Create directories
-        fs.mkdir.recursive = (cat,(cfg.basedir))
+      # Create directories
+      fs.mkdir.recursive = (cat,(cfg.basedir))
 
-        fs.mkdir = (cat,(cfg.download))
-        fs.mkdir = (cat,(cfg.logs))
-        fs.mkdir = (cat,(cfg.session))
+      fs.mkdir = (cat,(cfg.download))
+      fs.mkdir = (cat,(cfg.logs))
+      fs.mkdir = (cat,(cfg.session))
 
-        fs.mkdir = (cat,(cfg.watch))
-        fs.mkdir = (cat,(cfg.watch),"/load")
-        fs.mkdir = (cat,(cfg.watch),"/start")
+      fs.mkdir = (cat,(cfg.watch))
+      fs.mkdir = (cat,(cfg.watch),"/load")
+      fs.mkdir = (cat,(cfg.watch),"/start")
 
-        # Drop to "$(cfg.watch)/load" to add torrent
-        schedule2 = watch_load, 11, 10, ((load.verbose, (cat, (cfg.watch), "load/*.torrent")))
+      # Drop to "$(cfg.watch)/load" to add torrent
+      schedule2 = watch_load, 11, 10, ((load.verbose, (cat, (cfg.watch), "load/*.torrent")))
 
-        # Drop to "$(cfg.watch)/start" to add torrent and start downloading
-        schedule2 = watch_start, 10, 10, ((load.start_verbose, (cat, (cfg.watch), "start/*.torrent")))
+      # Drop to "$(cfg.watch)/start" to add torrent and start downloading
+      schedule2 = watch_start, 10, 10, ((load.start_verbose, (cat, (cfg.watch), "start/*.torrent")))
 
-        # Listening port for incoming peer traffic
-        network.port_range.set = ${toString cfg.port}-${toString cfg.port}
-        network.port_random.set = no
+      # Listening port for incoming peer traffic
+      network.port_range.set = ${toString cfg.port}-${toString cfg.port}
+      network.port_random.set = no
 
-        # Distributed Hash Table and Peer EXchange
-        dht.mode.set = disable
-        dht.port.set = 6881
-        protocol.pex.set = yes
+      # Distributed Hash Table and Peer EXchange
+      dht.mode.set = disable
+      dht.port.set = 6881
+      protocol.pex.set = yes
 
-        # UDP tracker support
-        trackers.use_udp.set = yes
+      # UDP tracker support
+      trackers.use_udp.set = yes
 
-        # Peer settings
-        throttle.max_uploads.set = 100
-        throttle.max_uploads.global.set = 250
-        throttle.min_peers.normal.set = 20
-        throttle.max_peers.normal.set = 60
-        throttle.min_peers.seed.set = 30
-        throttle.max_peers.seed.set = 80
-        trackers.numwant.set = 80
+      # Peer settings
+      throttle.max_uploads.set = 100
+      throttle.max_uploads.global.set = 250
+      throttle.min_peers.normal.set = 20
+      throttle.max_peers.normal.set = 60
+      throttle.min_peers.seed.set = 30
+      throttle.max_peers.seed.set = 80
+      trackers.numwant.set = 80
 
-        protocol.encryption.set = allow_incoming,try_outgoing,enable_retry
+      protocol.encryption.set = allow_incoming,try_outgoing,enable_retry
 
-        # Limits for file handle resources, this is optimized for
-        # an `ulimit` of 1024 (a common default). You MUST leave
-        # a ceiling of handles reserved for rTorrent's internal needs!
-        network.max_open_files.set = 600
-        network.max_open_sockets.set = 300
+      # Limits for file handle resources, this is optimized for
+      # an `ulimit` of 1024 (a common default). You MUST leave
+      # a ceiling of handles reserved for rTorrent's internal needs!
+      network.max_open_files.set = 600
+      network.max_open_sockets.set = 300
 
-        # Memory resource usage (increase if you have a large number of items loaded,
-        # and/or the available resources to spend)
-        pieces.memory.max.set = 1800M
-        network.xmlrpc.size_limit.set = 32M
+      # Memory resource usage (increase if you have a large number of items loaded,
+      # and/or the available resources to spend)
+      pieces.memory.max.set = 1800M
+      network.xmlrpc.size_limit.set = 32M
 
-        # Basic operational settings
-        session.path.set = (cat, (cfg.session))
-        directory.default.set = (cat, (cfg.download))
-        log.execute = (cat, (cfg.logs), "execute.log")
+      # Basic operational settings
+      session.path.set = (cat, (cfg.session))
+      directory.default.set = (cat, (cfg.download))
+      log.execute = (cat, (cfg.logs), "execute.log")
 
-        # Other operational settings
-        encoding.add = utf8
-        system.umask.set = 0027
-        system.cwd.set = (directory.default)
-        #schedule2 = low_diskspace, 5, 60, ((close_low_diskspace, 500M))
-        #pieces.hash.on_completion.set = no
+      # Other operational settings
+      encoding.add = utf8
+      system.umask.set = 0027
+      system.cwd.set = (directory.default)
+      #schedule2 = low_diskspace, 5, 60, ((close_low_diskspace, 500M))
+      #pieces.hash.on_completion.set = no
 
-        # HTTP and SSL
-        network.http.max_open.set = 50
-        network.http.dns_cache_timeout.set = 25
+      # HTTP and SSL
+      network.http.max_open.set = 50
+      network.http.dns_cache_timeout.set = 25
 
-        #network.http.ssl_verify_peer.set = 1
-        #network.http.ssl_verify_host.set = 1
+      #network.http.ssl_verify_peer.set = 1
+      #network.http.ssl_verify_host.set = 1
 
-        # Run the rTorrent process as a daemon in the background
-        system.daemon.set = true
+      # Run the rTorrent process as a daemon in the background
+      system.daemon.set = true
 
-        # XML-RPC interface
-        network.scgi.open_local = (cat,(cfg.rpcsock))
-        schedule = scgi_group,0,0,"execute.nothrow=chown,\":rtorrent\",(cfg.rpcsock)"
-        schedule = scgi_permission,0,0,"execute.nothrow=chmod,\"g+w,o=\",(cfg.rpcsock)"
+      # XML-RPC interface
+      network.scgi.open_local = (cat,(cfg.rpcsock))
+      schedule = scgi_group,0,0,"execute.nothrow=chown,\":rtorrent\",(cfg.rpcsock)"
+      schedule = scgi_permission,0,0,"execute.nothrow=chmod,\"g+w,o=\",(cfg.rpcsock)"
 
-        # Logging:
-        #   Levels = critical error warn notice info debug
-        #   Groups = connection_* dht_* peer_* rpc_* storage_* thread_* tracker_* torrent_*
-        print = (cat, "Logging to ", (cfg.logfile))
-        log.open_file = "log", (cfg.logfile)
-        log.add_output = "debug", "log"
-      '';
+      # Logging:
+      #   Levels = critical error warn notice info debug
+      #   Groups = connection_* dht_* peer_* rpc_* storage_* thread_* tracker_* torrent_*
+      print = (cat, "Logging to ", (cfg.logfile))
+      log.open_file = "log", (cfg.logfile)
+      log.add_output = "debug", "log"
+    '';
   };
 }
 

nixos/hosts/hades/sonarr/configuration.nix

@@ -1,5 +1,4 @@
-_:
-{
+_: {
   system.stateVersion = "21.05";
   networking.interfaces.eth0.useDHCP = true;
 

nixos/hosts/hades/unifi/configuration.nix

@@ -1,5 +1,4 @@
-{ pkgs, lib, ... }:
-{
+{ pkgs, lib, ... }: {
   system.stateVersion = "21.05";
   networking.interfaces.eth0.useDHCP = true;
 

nixos/hosts/hades/unpackerr/configuration.nix

@@ -1,7 +1,6 @@
 { config, ... }:
 let vs = config.vault-secrets.secrets;
-in
-{
+in {
   networking.interfaces.eth0.useDHCP = true;
 
   fileSystems."/mnt/storage" = {

nixos/hosts/olympus/bastion/hardware-configuration.nix

@@ -6,7 +6,8 @@
 {
   imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
 
-  boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "virtio_pci" "virtio_scsi" "sd_mod" "sr_mod" ];
+  boot.initrd.availableKernelModules =
+    [ "ata_piix" "uhci_hcd" "virtio_pci" "virtio_scsi" "sd_mod" "sr_mod" ];
   boot.initrd.kernelModules = [ ];
   boot.kernelModules = [ ];
   boot.extraModulePackages = [ ];
@@ -16,6 +17,7 @@
     fsType = "ext4";
   };
 
-  swapDevices = [{ device = "/dev/disk/by-uuid/63d90b92-cdde-4795-a3ab-9566ae88f43d"; }];
+  swapDevices =
+    [{ device = "/dev/disk/by-uuid/63d90b92-cdde-4795-a3ab-9566ae88f43d"; }];
 
 }

nixos/hosts/olympus/dns/configuration.nix

@@ -1,5 +1,4 @@
-{ pkgs, ... }:
-{
+{ pkgs, ... }: {
   imports = [ ];
 
   # This value determines the NixOS release from which the default

nixos/hosts/olympus/gitea/configuration.nix

@@ -3,10 +3,8 @@
 # and in the NixOS manual (accessible by running ‘nixos-help’).
 
 { lib, config, pkgs, ... }:
-let
-  vs = config.vault-secrets.secrets;
-in
-{
+let vs = config.vault-secrets.secrets;
+in {
   imports = [ ];
 
   # This value determines the NixOS release from which the default
@@ -22,7 +20,8 @@ in
 
   environment.noXlibs = lib.mkForce false;
 
-  networking.firewall.allowedTCPPorts = [ config.services.gitea.settings.server.HTTP_PORT ];
+  networking.firewall.allowedTCPPorts =
+    [ config.services.gitea.settings.server.HTTP_PORT ];
 
   services.openssh.startWhenNeeded = false;
 
@@ -37,10 +36,8 @@ in
   };
 
   system.activationScripts.gitea-theme =
-    let
-      target_dir = "${config.services.gitea.stateDir}/custom/public/css/";
-    in
-    lib.stringAfter [ "var" ] ''
+    let target_dir = "${config.services.gitea.stateDir}/custom/public/css/";
+    in lib.stringAfter [ "var" ] ''
       mkdir -p ${target_dir}
       ln -sf ${pkgs.v.gitea-agatheme} "${target_dir}/theme-agatheme.css"
     '';
@@ -54,9 +51,7 @@ in
     mailerPasswordFile = "${vs.gitea}/mailPassword";
 
     settings = {
-      actions = {
-        "ENABLED" = true;
-      };
+      actions = { "ENABLED" = true; };
       repository = {
         "ENABLE_PUSH_CREATE_USER" = true;
         "DEFAULT_PUSH_CREATE_PRIVATE" = false;

nixos/hosts/olympus/mailserver/configuration.nix

@@ -3,8 +3,8 @@
 # and in the NixOS manual (accessible by running ‘nixos-help’).
 
 { config, pkgs, ... }:
-let vs = config.vault-secrets.secrets; in
-{
+let vs = config.vault-secrets.secrets;
+in {
   imports = [ ];
 
   # This value determines the NixOS release from which the default
@@ -22,9 +22,7 @@ let vs = config.vault-secrets.secrets; in
     10.42.42.6 vault.olympus
   '';
 
-  vault-secrets.secrets.mailserver = {
-    services = [ "dovecot2" "postfix" ];
-  };
+  vault-secrets.secrets.mailserver = { services = [ "dovecot2" "postfix" ]; };
 
   mailserver = {
     enable = true;
@@ -36,7 +34,8 @@ let vs = config.vault-secrets.secrets; in
       # People
       "v@0x76.dev" = {
         hashedPasswordFile = "${vs.mailserver}/v@0x76.dev";
-        aliases = [ "v@meowy.tech" "postmaster@0x76.dev" "postmaster@meowy.tech" ];
+        aliases =
+          [ "v@meowy.tech" "postmaster@0x76.dev" "postmaster@meowy.tech" ];
       };
       "laura@meowy.tech" = {
         hashedPasswordFile = "${vs.mailserver}/laura@meowy.tech";
@@ -79,7 +78,8 @@ let vs = config.vault-secrets.secrets; in
 
   services.roundcube = {
     enable = true;
-    package = pkgs.roundcube.withPlugins (plugins: [ plugins.persistent_login ]);
+    package =
+      pkgs.roundcube.withPlugins (plugins: [ plugins.persistent_login ]);
     plugins = [
       "archive"
       # "enigma"
@@ -98,9 +98,7 @@ let vs = config.vault-secrets.secrets; in
     '';
   };
 
-  services.nginx = {
-    enable = true;
-  };
+  services.nginx = { enable = true; };
 
   security.acme.acceptTerms = true;
   security.acme.defaults.email = "v@0x76.dev";

nixos/hosts/olympus/minecraft/configuration.nix

@@ -2,8 +2,7 @@
 # your system.  Help is available in the configuration.nix(5) man page
 # and in the NixOS manual (accessible by running ‘nixos-help’).
 
-{ lib, pkgs, ... }:
-{
+{ lib, pkgs, ... }: {
   imports = [ ];
 
   # This value determines the NixOS release from which the default

nixos/hosts/olympus/mosquitto/configuration.nix

@@ -4,8 +4,7 @@
 
 { config, pkgs, ... }:
 let mosquittoPort = 1883;
-in
-{
+in {
   imports = [ ];
 
   # This value determines the NixOS release from which the default

nixos/hosts/olympus/ntfy/configuration.nix

@@ -20,7 +20,8 @@
 
   networking.firewall.allowedTCPPorts = [ 80 ];
 
-  services.ntfy-sh = let datadir = "/var/lib/ntfy"; in {
+  services.ntfy-sh = let datadir = "/var/lib/ntfy";
+  in {
     enable = true;
     settings = {
       base-url = "https://ntfy.0x76.dev";

nixos/hosts/olympus/outline/configuration.nix

@@ -3,8 +3,8 @@
 # and in the NixOS manual (accessible by running ‘nixos-help’).
 
 { config, ... }:
-let vs = config.vault-secrets.secrets; in
-{
+let vs = config.vault-secrets.secrets;
+in {
   imports = [ ];
 
   # This value determines the NixOS release from which the default
@@ -16,9 +16,7 @@ let vs = config.vault-secrets.secrets; in
   system.stateVersion = "22.11"; # Did you read the comment?
 
   # Additional packages
-  networking.firewall.allowedTCPPorts = [
-    config.services.outline.port
-  ];
+  networking.firewall.allowedTCPPorts = [ config.services.outline.port ];
 
   vault-secrets.secrets.outline = {
     inherit (config.services.outline) user group;
@@ -40,7 +38,7 @@ let vs = config.vault-secrets.secrets; in
       uploadBucketName = "outline";
       region = "us-east-1"; # fake
     };
-  oidcAuthentication = {
+    oidcAuthentication = {
       displayName = "Dex";
       userinfoUrl = "https://dex.0x76.dev/userinfo";
       tokenUrl = "https://dex.0x76.dev/token";

nixos/hosts/olympus/synapse/configuration.nix

@@ -7,8 +7,7 @@ let
   vs = config.vault-secrets.secrets;
   port = 8008;
   metricsPort = 9000;
-in
-{
+in {
   imports = [ ];
 
   # This value determines the NixOS release from which the default
@@ -53,66 +52,60 @@ in
       "${vs.synapse}/email_password" # Also contains the rest of the email config
     ];
 
-    settings =
-    let log_file = pkgs.writeText "log.yml" ''
-version: 1
+    settings = let
+      log_file = pkgs.writeText "log.yml" ''
+        version: 1
 
-formatters:
-    structured:
-        class: synapse.logging.TerseJsonFormatter
+        formatters:
+            structured:
+                class: synapse.logging.TerseJsonFormatter
 
-handlers:
-    file:
-        class: logging.handlers.TimedRotatingFileHandler
-        formatter: structured
-        filename: /var/lib/matrix-synapse/synapse.log
-        when: midnight
-        backupCount: 3  # Does not include the current log file.
-        encoding: utf8
+        handlers:
+            file:
+                class: logging.handlers.TimedRotatingFileHandler
+                formatter: structured
+                filename: /var/lib/matrix-synapse/synapse.log
+                when: midnight
+                backupCount: 3  # Does not include the current log file.
+                encoding: utf8
 
-loggers:
-    synapse:
-        level: INFO
-        handlers: [file]
-    ''; in
-      {
-        server_name = "meowy.tech";
-        enable_registration = true;
-        public_baseurl = "https://chat.meowy.tech";
-        enable_metrics = true;
-        max_upload_size = "100M";
-        registration_requires_token = true;
-        media_retention = {
-          remote_media_lifetime = "90d";
-        };
-        log_config =  "${log_file}";
-        listeners = [
-          {
-            inherit port;
-            bind_addresses = [ "0.0.0.0" ];
-            type = "http";
-            tls = false;
-            x_forwarded = true;
-            resources = [
-              {
-                names = [ "client" "federation" ];
-                compress = true;
-              }
-            ];
-          }
-          {
-            port = metricsPort;
-            bind_addresses = [ "0.0.0.0" ];
-            type = "metrics";
-            tls = false;
-            resources = [
-              {
-                names = [ "metrics" ];
-                compress = false;
-              }
-            ];
-          }
-        ];
-      };
+        loggers:
+            synapse:
+                level: INFO
+                handlers: [file]
+      '';
+    in {
+      server_name = "meowy.tech";
+      enable_registration = true;
+      public_baseurl = "https://chat.meowy.tech";
+      enable_metrics = true;
+      max_upload_size = "100M";
+      registration_requires_token = true;
+      media_retention = { remote_media_lifetime = "90d"; };
+      log_config = "${log_file}";
+      listeners = [
+        {
+          inherit port;
+          bind_addresses = [ "0.0.0.0" ];
+          type = "http";
+          tls = false;
+          x_forwarded = true;
+          resources = [{
+            names = [ "client" "federation" ];
+            compress = true;
+          }];
+        }
+        {
+          port = metricsPort;
+          bind_addresses = [ "0.0.0.0" ];
+          type = "metrics";
+          tls = false;
+          resources = [{
+            names = [ "metrics" ];
+            compress = false;
+          }];
+        }
+      ];
+    };
   };
 }

nixos/hosts/olympus/unifi/configuration.nix

@@ -22,7 +22,7 @@
   services.unifi = {
     enable = true;
     unifiPackage = pkgs.unifi;
-    mongodbPackage = pkgs.mongodb-4_2; 
+    mongodbPackage = pkgs.mongodb-4_2;
     openFirewall = true;
   };
 }

nixos/hosts/olympus/victoriametrics/configuration.nix

@@ -6,8 +6,7 @@
 let
   vmPort = 8428;
   vs = config.vault-secrets.secrets;
-in
-{
+in {
   imports = [ ];
 
   # This value determines the NixOS release from which the default
@@ -21,7 +20,8 @@ in
   # Additional packages
   environment.systemPackages = with pkgs; [ ];
 
-  networking.firewall.allowedTCPPorts = [ vmPort config.services.grafana.settings.server.http_port ];
+  networking.firewall.allowedTCPPorts =
+    [ vmPort config.services.grafana.settings.server.http_port ];
   networking.firewall.allowedUDPPorts = [ vmPort ];
 
   services.victoriametrics = {
@@ -42,12 +42,10 @@ in
       scrape_configs = [
         {
           job_name = "nginx";
-          static_configs = [
-            {
-              targets = [ "nginx.olympus:9113" ];
-              labels.app = "nginx";
-            }
-          ];
+          static_configs = [{
+            targets = [ "nginx.olympus:9113" ];
+            labels.app = "nginx";
+          }];
         }
         {
           job_name = "synapse";

nixos/hosts/thalassa/aoife/hardware-configuration.nix

@@ -4,29 +4,27 @@
 { config, lib, modulesPath, ... }:
 
 {
-  imports =
-    [ (modulesPath + "/installer/scan/not-detected.nix")
-    ];
+  imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
 
-  boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "thunderbolt" "usb_storage" "sd_mod" "sdhci_pci" ];
+  boot.initrd.availableKernelModules =
+    [ "nvme" "xhci_pci" "thunderbolt" "usb_storage" "sd_mod" "sdhci_pci" ];
   boot.initrd.kernelModules = [ ];
   boot.kernelModules = [ "kvm-amd" ];
   boot.extraModulePackages = [ ];
 
-  fileSystems."/" =
-    { device = "/dev/disk/by-uuid/c184866a-9a53-4a9f-9a1f-493792af7ea9";
-      fsType = "btrfs";
-      options = [ "subvol=@" ];
-    };
+  fileSystems."/" = {
+    device = "/dev/disk/by-uuid/c184866a-9a53-4a9f-9a1f-493792af7ea9";
+    fsType = "btrfs";
+    options = [ "subvol=@" ];
+  };
 
-  fileSystems."/boot/efi" =
-    { device = "/dev/disk/by-uuid/5BB8-7503";
-      fsType = "vfat";
-    };
+  fileSystems."/boot/efi" = {
+    device = "/dev/disk/by-uuid/5BB8-7503";
+    fsType = "vfat";
+  };
 
   swapDevices =
-    [ { device = "/dev/disk/by-uuid/bedb5b75-578e-441f-a9eb-2ecff1f4cfca"; }
-    ];
+    [{ device = "/dev/disk/by-uuid/bedb5b75-578e-441f-a9eb-2ecff1f4cfca"; }];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's
@@ -36,6 +34,7 @@
   # networking.interfaces.wlp4s0.useDHCP = lib.mkDefault true;
 
   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
-  hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+  hardware.cpu.amd.updateMicrocode =
+    lib.mkDefault config.hardware.enableRedistributableFirmware;
   # high-resolution display
 }

nixos/hosts/thalassa/eevee/configuration.nix

@@ -3,17 +3,14 @@
 # and in the NixOS manual (accessible by running ‘nixos-help’).
 
 { pkgs, inputs, ... }: {
-  imports = [
-    ../../../common/desktop
-    ./hardware-configuration.nix
-    ./hardware.nix
-  ];
+  imports =
+    [ ../../../common/desktop ./hardware-configuration.nix ./hardware.nix ];
 
   # Bootloader.
   boot = {
     kernelPackages = pkgs.linuxPackages_latest;
     initrd = {
-      kernelModules =  [ "nvidia" "nvidia_modeset" "nvidia_uvm" "nvidia_drm" ];
+      kernelModules = [ "nvidia" "nvidia_modeset" "nvidia_uvm" "nvidia_drm" ];
     };
   };
 

nixos/hosts/thalassa/eevee/hardware-configuration.nix

@@ -4,29 +4,27 @@
 { config, lib, modulesPath, ... }:
 
 {
-  imports =
-    [ (modulesPath + "/installer/scan/not-detected.nix")
-    ];
+  imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
 
-  boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" ];
+  boot.initrd.availableKernelModules =
+    [ "xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" ];
   boot.initrd.kernelModules = [ ];
   boot.kernelModules = [ "kvm-intel" ];
   boot.extraModulePackages = [ ];
 
-  fileSystems."/" =
-    { device = "/dev/disk/by-uuid/947a98af-9a4e-4811-a2ca-9aa00b319e9c";
-      fsType = "btrfs";
-      options = [ "subvol=@" ];
-    };
+  fileSystems."/" = {
+    device = "/dev/disk/by-uuid/947a98af-9a4e-4811-a2ca-9aa00b319e9c";
+    fsType = "btrfs";
+    options = [ "subvol=@" ];
+  };
 
-  fileSystems."/boot/efi" =
-    { device = "/dev/disk/by-uuid/D883-F146";
-      fsType = "vfat";
-    };
+  fileSystems."/boot/efi" = {
+    device = "/dev/disk/by-uuid/D883-F146";
+    fsType = "vfat";
+  };
 
   swapDevices =
-    [ { device = "/dev/disk/by-uuid/a99402e1-6f2a-4c4b-b69f-aae2fd13ffc0"; }
-    ];
+    [{ device = "/dev/disk/by-uuid/a99402e1-6f2a-4c4b-b69f-aae2fd13ffc0"; }];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's
@@ -37,5 +35,6 @@
 
   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
   powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";
-  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+  hardware.cpu.intel.updateMicrocode =
+    lib.mkDefault config.hardware.enableRedistributableFirmware;
 }

nixos/hosts/thalassa/null/hardware-configuration.nix

@@ -4,37 +4,36 @@
 { config, lib, modulesPath, ... }:
 
 {
-  imports =
-    [ (modulesPath + "/installer/scan/not-detected.nix")
-    ];
+  imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
 
-  boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "rtsx_pci_sdmmc" ];
+  boot.initrd.availableKernelModules =
+    [ "xhci_pci" "ahci" "nvme" "rtsx_pci_sdmmc" ];
   boot.initrd.kernelModules = [ ];
   boot.kernelModules = [ "kvm-intel" ];
   boot.extraModulePackages = [ ];
 
-  fileSystems."/" =
-    { device = "/dev/disk/by-uuid/d4f56e5b-2509-4e63-8324-65a35c71e90c";
-      fsType = "btrfs";
-      options = [ "subvol=@" ];
-    };
+  fileSystems."/" = {
+    device = "/dev/disk/by-uuid/d4f56e5b-2509-4e63-8324-65a35c71e90c";
+    fsType = "btrfs";
+    options = [ "subvol=@" ];
+  };
 
-  fileSystems."/nix" =
-    { device = "/dev/disk/by-uuid/d4f56e5b-2509-4e63-8324-65a35c71e90c";
-      fsType = "btrfs";
-      options = [ "subvol=@/nix" ];
-    };
+  fileSystems."/nix" = {
+    device = "/dev/disk/by-uuid/d4f56e5b-2509-4e63-8324-65a35c71e90c";
+    fsType = "btrfs";
+    options = [ "subvol=@/nix" ];
+  };
 
-  fileSystems."/home" =
-    { device = "/dev/disk/by-uuid/d4f56e5b-2509-4e63-8324-65a35c71e90c";
-      fsType = "btrfs";
-      options = [ "subvol=@home" ];
-    };
+  fileSystems."/home" = {
+    device = "/dev/disk/by-uuid/d4f56e5b-2509-4e63-8324-65a35c71e90c";
+    fsType = "btrfs";
+    options = [ "subvol=@home" ];
+  };
 
-  fileSystems."/boot/efi" =
-    { device = "/dev/disk/by-uuid/D478-6F66";
-      fsType = "vfat";
-    };
+  fileSystems."/boot/efi" = {
+    device = "/dev/disk/by-uuid/D478-6F66";
+    fsType = "vfat";
+  };
 
   swapDevices = [ ];
 
@@ -48,5 +47,6 @@
 
   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
   powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";
-  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+  hardware.cpu.intel.updateMicrocode =
+    lib.mkDefault config.hardware.enableRedistributableFirmware;
 }

nixos/hosts/thalassa/null/home/neovim.nix

@@ -10,10 +10,10 @@
 
     plugins = {
       nix.enable = true;
-      treesitter = { 
+      treesitter = {
         enable = true;
         nixGrammars = false;
-        ensureInstalled = [];
+        ensureInstalled = [ ];
       };
       surround.enable = true;
       fugitive.enable = true;

nixos/hosts/thalassa/null/networking.nix

@@ -1,5 +1,4 @@
-_:
-{
+_: {
   services.v.dns = {
     enable = true;
     openFirewall = false;
@@ -30,21 +29,11 @@ _:
             ca_cert="/etc/ssl/certs/ca-bundle.crt"
           '';
         };
-        "Pikachu 5G" = {
-          psk = "@PIKACHU_PASSWORD@";
-        };
-        "sha256('yeet')" = {
-          psk = "@SHA256_PASSWORD@";
-        };
-        "wired" = {
-          psk = "@WIRED_PASSWORD@";
-        };
-        "meowy hotspot" = {
-          psk = "@HOTSPOT_PASSWORD@";
-        };
-        "WiFi Roest" = {
-          psk = "@WIFI_ROEST_PASSWORD@";
-        };
+        "Pikachu 5G" = { psk = "@PIKACHU_PASSWORD@"; };
+        "sha256('yeet')" = { psk = "@SHA256_PASSWORD@"; };
+        "wired" = { psk = "@WIRED_PASSWORD@"; };
+        "meowy hotspot" = { psk = "@HOTSPOT_PASSWORD@"; };
+        "WiFi Roest" = { psk = "@WIFI_ROEST_PASSWORD@"; };
       };
     };
 

nixos/hosts/thalassa/null/rescue-boot.nix

@@ -11,9 +11,7 @@ let
   module = {
     system.stateVersion = "22.11";
     boot.supportedFilesystems = [ "btrfs" "ext4" ];
-    environment.systemPackages = with pkgs; [
-      git
-    ];
+    environment.systemPackages = with pkgs; [ git ];
   };
 in {
   boot.loader.systemd-boot = {
@@ -22,7 +20,9 @@ in {
         title Rescue Boot
         linux /rescue-kernel
         initrd /rescue-initrd
-        options init=${netboot.config.system.build.toplevel}/init ${toString netboot.config.boot.kernelParams}
+        options init=${netboot.config.system.build.toplevel}/init ${
+          toString netboot.config.boot.kernelParams
+        }
       '';
     };
 

nixos/pkgs/dnd-5e-latex-template/default.nix

@@ -1,4 +1,5 @@
-{ stdenvNoCC, fetchFromGitHub }: stdenvNoCC.mkDerivation rec {
+{ stdenvNoCC, fetchFromGitHub }:
+stdenvNoCC.mkDerivation rec {
   pname = "dnd-5e-latex-template";
   version = "0.8.0";
   tlType = "run";
@@ -13,16 +14,14 @@
   phases = [ "installPhase" ];
 
   installPhase = ''
-      runHook preInstall
+    runHook preInstall
 
-      path="$out/tex/latex/${pname}"
-      mkdir -p "$path"
-      cp -r $src/* $path
+    path="$out/tex/latex/${pname}"
+    mkdir -p "$path"
+    cp -r $src/* $path
 
-      runHook postInstall
+    runHook postInstall
   '';
 
-  meta = {
-    description = "DnD 5e latex template";
-  };
+  meta = { description = "DnD 5e latex template"; };
 }

nixos/pkgs/gitea-agatheme/default.nix

@@ -1,9 +1,11 @@
-{ stdenvNoCC, fetchurl }: stdenvNoCC.mkDerivation {
+{ stdenvNoCC, fetchurl }:
+stdenvNoCC.mkDerivation {
   pname = "gitea-agatheme";
   version = "1.2";
 
   src = fetchurl {
-    url = "https://git.lain.faith/attachments/290e2304-92a3-4991-8703-fbbf52f31340";
+    url =
+      "https://git.lain.faith/attachments/290e2304-92a3-4991-8703-fbbf52f31340";
     sha256 = "424f4e232c7d759485cdf1bcde9edde50f2992cf6bde61c21f71eae03a905543";
   };
 

nixos/pkgs/glitch-soc/default.nix

@@ -1,12 +1,10 @@
-{ lib, stdenv, nodejs-slim, bundlerEnv, nixosTests
-, yarn, callPackage, imagemagick, ffmpeg, file, ruby_3_0, writeShellScript
-, fetchYarnDeps, fixup_yarn_lock
+{ lib, stdenv, nodejs-slim, bundlerEnv, nixosTests, yarn, callPackage
+, imagemagick, ffmpeg, file, ruby_3_0, writeShellScript, fetchYarnDeps
+, fixup_yarn_lock
 
-  # Allow building a fork or custom version of Mastodon:
-, pname ? "mastodon"
-, version ? import ./version.nix
-, srcOverride ? null
-, dependenciesDir ? ./.  # Should contain gemset.nix, yarn.nix and package.json.
+# Allow building a fork or custom version of Mastodon:
+, pname ? "mastodon", version ? import ./version.nix, srcOverride ? null
+, dependenciesDir ? ./. # Should contain gemset.nix, yarn.nix and package.json.
 }:
 
 stdenv.mkDerivation rec {
@@ -14,7 +12,8 @@ stdenv.mkDerivation rec {
 
   # Using overrideAttrs on src does not build the gems and modules with the overridden src.
   # Putting the callPackage up in the arguments list also does not work.
-  src = if srcOverride != null then srcOverride else callPackage ./source.nix {};
+  src =
+    if srcOverride != null then srcOverride else callPackage ./source.nix { };
 
   mastodon-gems = bundlerEnv {
     name = "${pname}-gems-${version}";
@@ -42,11 +41,17 @@ stdenv.mkDerivation rec {
 
     yarnOfflineCache = fetchYarnDeps {
       yarnLock = "${src}/yarn.lock";
-     # sha256 = lib.fakeSha256;
-     sha256 = "sha256-5KmPgKE1QRPoTjeSYidKt/z9vzWzTOoJVr5dNtofKJY=";
+      # sha256 = lib.fakeSha256;
+      sha256 = "sha256-5KmPgKE1QRPoTjeSYidKt/z9vzWzTOoJVr5dNtofKJY=";
     };
 
-    nativeBuildInputs = [ fixup_yarn_lock nodejs-slim yarn mastodon-gems mastodon-gems.wrappedRuby ];
+    nativeBuildInputs = [
+      fixup_yarn_lock
+      nodejs-slim
+      yarn
+      mastodon-gems
+      mastodon-gems.wrappedRuby
+    ];
 
     RAILS_ENV = "production";
     NODE_ENV = "production";
@@ -114,11 +119,12 @@ stdenv.mkDerivation rec {
 
   passthru = {
     tests.mastodon = nixosTests.mastodon;
-    updateScript = callPackage ./update.nix {};
+    updateScript = callPackage ./update.nix { };
   };
 
   meta = with lib; {
-    description = "Self-hosted, globally interconnected microblogging software based on ActivityPub";
+    description =
+      "Self-hosted, globally interconnected microblogging software based on ActivityPub";
     homepage = "https://joinmastodon.org";
     license = licenses.agpl3Plus;
     platforms = [ "x86_64-linux" "i686-linux" "aarch64-linux" ];

nixos/pkgs/glitch-soc/source.nix

@@ -1,5 +1,6 @@
 # This file was generated by pkgs.mastodon.updateScript.
-{ fetchgit, applyPatches }: let
+{ fetchgit, applyPatches }:
+let
   src = fetchgit {
     url = "https://github.com/glitch-soc/mastodon.git";
     rev = "c18884de32b60152600ec95ed42cdf9c00fdab7a";
@@ -7,5 +8,5 @@
   };
 in applyPatches {
   inherit src;
-  patches = [];
+  patches = [ ];
 }

nixos/pkgs/glitch-soc/update.nix

@@ -1,24 +1,22 @@
-{ runCommand
-, lib
-, makeWrapper
-, yarn2nix
-, bundix
-, coreutils
-, diffutils
-, nix-prefetch-git
-, gnused
-, jq
-}:
+{ runCommand, lib, makeWrapper, yarn2nix, bundix, coreutils, diffutils
+, nix-prefetch-git, gnused, jq }:
 let
-  binPath = lib.makeBinPath [ yarn2nix bundix coreutils diffutils nix-prefetch-git gnused jq ];
-in
-runCommand "mastodon-update-script"
-{
+  binPath = lib.makeBinPath [
+    yarn2nix
+    bundix
+    coreutils
+    diffutils
+    nix-prefetch-git
+    gnused
+    jq
+  ];
+in runCommand "mastodon-update-script" {
   nativeBuildInputs = [ makeWrapper ];
 
   meta = {
     maintainers = with lib.maintainers; [ happy-river ];
-    description = "Utility to generate Nix expressions for Mastodon's dependencies";
+    description =
+      "Utility to generate Nix expressions for Mastodon's dependencies";
     platforms = lib.platforms.unix;
   };
 } ''

nixos/templates/iso-graphical.nix

@@ -6,9 +6,7 @@
   # use the latest Linux kernel
   boot.kernelPackages = pkgs.linuxPackages_latest;
 
-  environment.systemPackages = with pkgs; [
-    git
-  ];
+  environment.systemPackages = with pkgs; [ git ];
 
   # Needed for https://github.com/NixOS/nixpkgs/issues/58959
   boot.supportedFilesystems = lib.mkForce [ "btrfs" "ext4" ];

nixos/templates/iso.nix

@@ -1,15 +1,12 @@
 { pkgs, modulesPath, lib, ... }: {
-  imports = [
-    "${modulesPath}/installer/cd-dvd/installation-cd-minimal.nix"
-  ];
+  imports = [ "${modulesPath}/installer/cd-dvd/installation-cd-minimal.nix" ];
 
   # use the latest Linux kernel
   boot.kernelPackages = pkgs.linuxPackages_latest;
 
-  environment.systemPackages = with pkgs; [
-    git
-  ];
+  environment.systemPackages = with pkgs; [ git ];
 
   # Needed for https://github.com/NixOS/nixpkgs/issues/58959
-  boot.supportedFilesystems = lib.mkForce [ "btrfs" "reiserfs" "vfat" "f2fs" "xfs" "ntfs" "cifs" ];
+  boot.supportedFilesystems =
+    lib.mkForce [ "btrfs" "reiserfs" "vfat" "f2fs" "xfs" "ntfs" "cifs" ];
 }