all: Attempt to move back towards buildability in CI. Update.

config/hosts/goliath.nix

@@ -112,6 +112,7 @@
         ".config/Mumble"
         ".config/Element"
         ".config/hedgedoc"
+        ".ApacheDirectoryStudio"
         ".gnupg"
         ".mozilla"
         "neorg"
@@ -123,7 +124,7 @@
       ];
       files = [
         ".ssh/known_hosts"
-	".zsh_history"
+        ".zsh_history"
       ];
     };
   };

config/profiles/vfio/profile.nix

@@ -60,6 +60,9 @@ in
     security.wrappers = {
       qemu-bridge-helper = {
         source = "${pkgs.qemu-vfio}/libexec/qemu-bridge-helper";
+        capabilities = "cap_net_admin+ep";
+        owner = "root";
+        group = "root";
       };
     };
 

config/services/synapse.nix

@@ -19,7 +19,11 @@ with lib;
         path = "secrets/mautrix-telegram";
         inherit field;
       }) [ "api-hash" "api-id" "as-token" "hs-token" ]
-  // {
+      // (mapListToAttrs (field:
+        nameValuePair "synapse-saml2-${field}" {
+          path = "secrets/synapse-saml2-${field}";
+        }) ["cert" "key"])
+      // {
     matrix-registration = {
       path = "secrets/matrix-registration";
     };
@@ -43,13 +47,13 @@ with lib;
   };
 
   secrets.files.saml2-cert = {
-    source = config.kw.secrets.repo.synapse-cert.source;
+    text = tf.variables.synapse-saml2-cert.ref;
     owner = "matrix-synapse";
     group = "matrix-synapse";
   };
 
   secrets.files.saml2-privkey = {
-    source = config.kw.secrets.repo.synapse-key.source;
+    text = tf.variables.synapse-saml2-key.ref;
     owner = "matrix-synapse";
     group = "matrix-synapse";
   };

config/users/kat/dev/packages.nix

@@ -1,5 +1,12 @@
 { config, pkgs, ... }:
 
 {
-  home.packages = with pkgs; [ hyperfine hexyl tokei nixpkgs-fmt pandoc ];
+  home.packages = with pkgs; [
+    hyperfine
+    hexyl
+    tokei
+    nixpkgs-fmt
+    pandoc
+    apache-directory-studio
+  ];
 }

config/users/kat/gui/firefox/default.nix

@@ -20,11 +20,6 @@ in
     ff-main = "firefox -P main";
   };
 
-  programs.browserpass = {
-    enable = true;
-    browsers = [ "firefox" ];
-  };
-
   home.sessionVariables = {
     XDG_CURRENT_DESKTOP = "sway";
   };
@@ -40,7 +35,6 @@ in
       a11ycss
       canvasblocker
       view-image
-      pkgs.nur.repos.crazazy.firefox-addons.new-tab-override
       wappalyzer
       auto-tab-discard
       bitwarden

config/users/kat/gui/packages.nix

@@ -3,7 +3,7 @@
 {
   home.packages = with pkgs; [
     _1password
-    bpytop
+    btop
     bitwarden
     element-wayland
     exiftool

config/users/kat/personal/pass.nix

@@ -1,12 +0,0 @@
-{ config, pkgs, ... }:
-
-{
-  programs.password-store = {
-    enable = true;
-    package = pkgs.pass-wayland.withExtensions (exts: [ exts.pass-otp exts.pass-import ]);
-    settings = {
-      PASSWORD_STORE_DIR = "${config.home.homeDirectory}/.password-store";
-      PASSWORD_STORE_CLIP_TIME = "60";
-    };
-  };
-}

config/users/kat/sway/waybar/default.nix

@@ -7,7 +7,7 @@
     enable = true;
     settings = [{
       modules-left = [ "sway/workspaces" "sway/mode" "sway/window" ];
-      modules-center = [ "clock" "clock#arc" "clock#miku" "clock#hex" ];
+      modules-center = [ "clock" "clock#s" "clock#arc" "clock#miku" "clock#hex" ];
       modules-right = [
         "pulseaudio"
         "cpu"
@@ -102,6 +102,12 @@
           ];
           interval = 1;
         };
+        "clock#s" = {
+          format = "-{:%H}";
+          tooltip = true;
+          timezone = "America/Chicago";
+          tooltip-format = "{:%A, %F %R %z (%Z)}";
+        };
         "clock#arc" = {
           format = "-{:%H}";
           tooltip = true;

config/users/kat/sway/waybar/waybar.sass

@@ -21,6 +21,9 @@
   @extend %extend_1
   background: $base00t
   color: $base07
+  &.s
+    background: $base0Ft
+
   &.arc
     background: $base0Bt
 
@@ -28,7 +31,7 @@
     background: $base0Ct
 
   &.hex
-    background: $base0Ft
+    background: $base0Et
 
 #memory
   @extend %extend_1