feat: further fixups

kat/gui/gtk.nix

@@ -6,7 +6,7 @@
   gtk = {
     enable = true;
     font = {
-      name = "Iosevka Comfy";
+      name = "Iosevka";
       size = 9;
     };
     iconTheme = {

kat/gui/mako.nix

@@ -18,7 +18,7 @@ in {
 
   programs.mako = {
     enable = true;
-    font = "Iosevka Comfy 10";
+    font = "Iosevka 10";
     defaultTimeout = 3000;
     borderColor = palette.base08;
     backgroundColor = "${palette.base00}BF";

kat/gui/sway.nix

@@ -117,9 +117,9 @@ in {
       };
 
       fonts = {
-        names = [ "Iosevka Comfy"];
+        names = [ "Iosevka"];
         style = "Regular";
-        size = 10.0;
+        size = 12.0;
       };
 
       terminal = "${pkgs.wezterm}/bin/wezterm";

kat/gui/swaylock.nix

@@ -9,7 +9,7 @@
         indicator = true;
         indicator-radius = 110;
         indicator-thickness = 8;
-        font = "Iosevka Comfy";
+        font = "Iosevka";
         font-size = "12px";
         clock = true;
         datestr = "%F";

kat/gui/waybar.sass

@@ -7,7 +7,7 @@
   border: none
   border-radius: 0
   background: none
-  font-family: "Iosevka Comfy", "Font Awesome 6 Free", "Font Awesome 6 Brands"
+  font-family: "Iosevka", "Font Awesome 6 Free", "Font Awesome 6 Brands"
   font-size: $font_size
   min-height: 8px
   text-shadow: none

modules/home/base16.nix

@@ -14,8 +14,8 @@ in with lib; {
       variables = mkOption {
         type = attrsOf str;
         default = (cfg.palette // cfg.palette' // {
-          term_font = "Iosevka Comfy";
-          font = "Iosevka Comfy";
+          term_font = "Iosevka";
+          font = "Iosevka";
           font_size = "12px";
         });
       };

nixos/common/access.nix

@@ -2,11 +2,8 @@
 # TODO: solve lib usage
 inherit (lib.lists) concatLists elem;
 inherit (lib.attrsets) mapAttrsToList;
-in {
-  users.users.root = {
+commonUser = {
   shell = pkgs.zsh;
-    hashedPassword =
-      "$6$i28yOXoo$/WokLdKds5ZHtJHcuyGrH2WaDQQk/2Pj0xRGLgS8UcmY2oMv3fw2j/85PRpsJJwCB2GBRYRK5LlvdTleHd3mB.";
   openssh.authorizedKeys.keys = concatLists (mapAttrsToList
         (name: user:
          if elem "wheel" user.extraGroups then
@@ -15,4 +12,24 @@ in {
          [ ])
         config.users.users);
 };
+in {
+  security.sudo.extraRules = [{
+    users = [ "deploy" ];
+    commands = [ {
+      command = "ALL";
+      options = [
+        "NOPASSWD"
+        "SETENV"
+      ];
+    } ];
+  }];
+  users.users = {
+    root = commonUser // {
+      hashedPassword =
+        "$6$i28yOXoo$/WokLdKds5ZHtJHcuyGrH2WaDQQk/2Pj0xRGLgS8UcmY2oMv3fw2j/85PRpsJJwCB2GBRYRK5LlvdTleHd3mB.";
+    };
+    deploy = commonUser // {
+      isNormalUser = true;
+    };
+  };
 }

nixos/common/network.nix

@@ -1,5 +1,7 @@
-_: {
-  networking.nftables.enable = true;
-
+{ machine, ... }: {
+  networking = {
+    hostName = machine;
+    nftables.enable = true;
+  };
   services.tailscale.enable = true;
 }

nixos/gui/fonts.nix

@@ -1,12 +1,9 @@
 { pkgs, ... }: {
   fonts = {
-    fonts = (with pkgs; [
+    fonts = with pkgs; [
       twitter-color-emoji
-    ]) ++ (with pkgs.iosevka-comfy; [
-      comfy
-      comfy-motion
-      comfy-wide
-    ]);
+      iosevka-bin
+    ];
     enableDefaultFonts = true;
     fontDir.enable = true;
     fontconfig = {

systems/default.nix

@@ -123,7 +123,7 @@
           };
           hostname = "${name}.inskip.me";
           sshOpts = ["-p" "${builtins.toString (builtins.head inputs.self.nixosConfigurations.${name}.config.services.openssh.ports)}"];
-          sshUser = "root";
+          sshUser = "deploy";
           user = "root";
           autoRollback = true;
           magicRollback = true;