chore: update dependencies, add basecamp secrets, improve desktop environment

- Update opencode to v1.1.34
- Add new opencode agents (Prometheus, Metis, Momus, Atlas) and categories
- Switch m3ta-nixpkgs back to local path
- Add basecamp client credentials for m3-ares and m3-kratos
- Set NIXOS_OZONE_WL=1 for better Wayland app support in Hyprland
- Remove redundant wrl.enable from flatpak portal config

.beads/issues.jsonl

@@ -0,0 +1,2 @@
+{"id":"nixos-config-gx2","title":"form","status":"tombstone","priority":2,"issue_type":"task","created_at":"2026-01-11T11:49:21.688289476+01:00","created_by":"m3tam3re","updated_at":"2026-01-11T11:51:36.426124223+01:00","deleted_at":"2026-01-11T11:51:36.426124223+01:00","deleted_by":"daemon","delete_reason":"delete","original_type":"task"}
+{"id":"nixos-config-n4l","title":"Create Gitea action for nix-update package updates","description":"Create a Gitea action to automatically update packages in this nixos-config repository using nix-update.\n\n**Context:**\n- Gitea instance is already running on m3-atlas at code.m3ta.dev (configured in hosts/m3-atlas/services/gitea.nix)\n- The repository is self-hosted on this Gitea instance\n- nix-update is already referenced in home/features/cli/default.nix\n- Currently no Gitea workflows exist (.gitea/ directory does not exist)\n\n**Goal:**\nAutomate package updates by creating a Gitea Actions workflow that:\n1. Runs nix-update periodically (e.g., weekly or on schedule)\n2. Updates package definitions in pkgs/ directory\n3. Creates pull requests with the updates\n4. Uses appropriate secrets/credentials for the Gitea instance\n\n**Requirements:**\n- Create .gitea/workflows/ directory structure\n- Define workflow file with nix-update command\n- Configure triggers (schedule, manual, or on repository events)\n- Set up proper permissions and secrets\n- Test the workflow execution\n\n**Current Repository State:**\n- pkgs/default.nix exists but is minimal (currently just a comment)\n- Multiple nixpkgs inputs are used (unstable, 25.11, locked, master)\n- Custom m3ta-nixpkgs overlay at code.m3ta.dev/m3tam3re/nixpkgs\n- Uses agenix for secrets management\n\n**Related Files:**\n- hosts/m3-atlas/services/gitea.nix (existing Gitea configuration)\n- hosts/common/ports.nix (port management)\n- home/features/cli/default.nix (nix-update reference)\n\n**Acceptance Criteria:**\n- [ ] Create .gitea/workflows directory\n- [ ] Implement nix-update workflow YAML\n- [ ] Configure appropriate triggers\n- [ ] Test workflow on the repository\n- [ ] Document setup and configuration","status":"closed","priority":2,"issue_type":"feature","owner":"p@m3ta.dev","created_at":"2026-01-13T20:39:49.838916335+01:00","created_by":"m3tm3re","updated_at":"2026-01-13T20:51:43.833041989+01:00","closed_at":"2026-01-13T20:51:43.833041989+01:00","close_reason":"Closed"}

.beads/sync_base.jsonl

@@ -0,0 +1,2 @@
+{"id":"nixos-config-gx2","title":"form","status":"tombstone","priority":2,"issue_type":"task","created_at":"2026-01-11T11:49:21.688289476+01:00","created_by":"m3tam3re","updated_at":"2026-01-11T11:51:36.426124223+01:00","deleted_at":"2026-01-11T11:51:36.426124223+01:00","deleted_by":"daemon","delete_reason":"delete","original_type":"task"}
+{"id":"nixos-config-n4l","title":"Create Gitea action for nix-update package updates","description":"Create a Gitea action to automatically update packages in this nixos-config repository using nix-update.\n\n**Context:**\n- Gitea instance is already running on m3-atlas at code.m3ta.dev (configured in hosts/m3-atlas/services/gitea.nix)\n- The repository is self-hosted on this Gitea instance\n- nix-update is already referenced in home/features/cli/default.nix\n- Currently no Gitea workflows exist (.gitea/ directory does not exist)\n\n**Goal:**\nAutomate package updates by creating a Gitea Actions workflow that:\n1. Runs nix-update periodically (e.g., weekly or on schedule)\n2. Updates package definitions in pkgs/ directory\n3. Creates pull requests with the updates\n4. Uses appropriate secrets/credentials for the Gitea instance\n\n**Requirements:**\n- Create .gitea/workflows/ directory structure\n- Define workflow file with nix-update command\n- Configure triggers (schedule, manual, or on repository events)\n- Set up proper permissions and secrets\n- Test the workflow execution\n\n**Current Repository State:**\n- pkgs/default.nix exists but is minimal (currently just a comment)\n- Multiple nixpkgs inputs are used (unstable, 25.11, locked, master)\n- Custom m3ta-nixpkgs overlay at code.m3ta.dev/m3tam3re/nixpkgs\n- Uses agenix for secrets management\n\n**Related Files:**\n- hosts/m3-atlas/services/gitea.nix (existing Gitea configuration)\n- hosts/common/ports.nix (port management)\n- home/features/cli/default.nix (nix-update reference)\n\n**Acceptance Criteria:**\n- [ ] Create .gitea/workflows directory\n- [ ] Implement nix-update workflow YAML\n- [ ] Configure appropriate triggers\n- [ ] Test workflow on the repository\n- [ ] Document setup and configuration","status":"closed","priority":2,"issue_type":"feature","owner":"p@m3ta.dev","created_at":"2026-01-13T20:39:49.838916335+01:00","created_by":"m3tm3re","updated_at":"2026-01-13T20:51:43.833041989+01:00","closed_at":"2026-01-13T20:51:43.833041989+01:00","close_reason":"Closed"}

flake.lock

@@ -24,11 +24,11 @@
     "agents": {
       "flake": false,
       "locked": {
-        "lastModified": 1767965833,
+        "lastModified": 1768756367,
-        "narHash": "sha256-8tKEfJU4bxlgPJwUTUDQkVJMbwWQMiYt+moLjMIFeVY=",
+        "narHash": "sha256-s6AVS1NHXtfc9m4ccSM1+VzC2pjE6dfx9RT7JmELZpo=",
         "ref": "refs/heads/master",
-        "rev": "3e20c82603a4ddedf04ff001adf943723a49dc37",
+        "rev": "8ebb30fb2b50026034ba87e8c0aca63b09a993b3",
-        "revCount": 7,
+        "revCount": 10,
         "type": "git",
         "url": "https://code.m3ta.dev/m3tam3re/AGENTS"
       },
@@ -82,11 +82,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1766150702,
+        "lastModified": 1768727946,
-        "narHash": "sha256-P0kM+5o+DKnB6raXgFEk3azw8Wqg5FL6wyl9jD+G5a4=",
+        "narHash": "sha256-le2GY+ZR6uRHMuOAc60sBR3gBD2BEk1qOZ3S5C/XFpU=",
         "owner": "nix-community",
         "repo": "disko",
-        "rev": "916506443ecd0d0b4a0f4cf9d40a3c22ce39b378",
+        "rev": "558e84658d0eafc812497542ad6ca0d9654b3b0f",
         "type": "github"
       },
       "original": {
@@ -162,11 +162,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1767930051,
+        "lastModified": 1768836546,
-        "narHash": "sha256-YXtqo8h5bAbqC64XAPMMsZdYk8XkwkyNj/7XOsIyVf8=",
+        "narHash": "sha256-nJZkTamcXXMW+SMYiGFB6lB8l0aJw0xjssfN8xYd/Fs=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "297a08510894822ddd93ee2cfc66d6ac65a3cebb",
+        "rev": "b56c5ad14fcf8b5bc887463552483bf000ca562a",
         "type": "github"
       },
       "original": {
@@ -240,20 +240,18 @@
     },
     "m3ta-nixpkgs": {
       "inputs": {
-        "nixpkgs": "nixpkgs_3"
+        "nixpkgs": "nixpkgs_3",
+        "opencode": "opencode"
       },
       "locked": {
-        "lastModified": 1767842383,
+        "lastModified": 1769186400,
-        "narHash": "sha256-+AajfKU6fOTT1bf3YSgpyV5kk/965y3zg6pQ9cWF6Bg=",
+        "narHash": "sha256-9e9yvKJPufg0mTroH+vUUzxp+eX1tvy5QLSzKSw6uLI=",
-        "ref": "refs/heads/master",
+        "path": "/home/m3tam3re/p/NIX/nixpkgs",
-        "rev": "be7cd917a015e24e328eee684f5df2cba2a88254",
+        "type": "path"
-        "revCount": 26,
-        "type": "git",
-        "url": "https://code.m3ta.dev/m3tam3re/nixpkgs"
       },
       "original": {
-        "type": "git",
+        "path": "/home/m3tam3re/p/NIX/nixpkgs",
-        "url": "https://code.m3ta.dev/m3tam3re/nixpkgs"
+        "type": "path"
       }
     },
     "nix-colors": {
@@ -293,7 +291,7 @@
     "nixos-generators": {
       "inputs": {
         "nixlib": "nixlib",
-        "nixpkgs": "nixpkgs_4"
+        "nixpkgs": "nixpkgs_5"
       },
       "locked": {
         "lastModified": 1764234087,
@@ -390,11 +388,11 @@
     },
     "nixpkgs-master": {
       "locked": {
-        "lastModified": 1767950769,
+        "lastModified": 1768844247,
-        "narHash": "sha256-oT4Tj7O9361bmMbPwuAcH2zgj2fUZao7F32Bkah+AmE=",
+        "narHash": "sha256-vAPadjf0C/6Xcb/5YO30S38lSV8/gNKRwWSfpS6SGNY=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "3cf525869eaad0c4105795523d158d6985d40885",
+        "rev": "ba686298c491728b8ee1774c8520665293517540",
         "type": "github"
       },
       "original": {
@@ -406,11 +404,11 @@
     },
     "nixpkgs-stable": {
       "locked": {
-        "lastModified": 1767799921,
+        "lastModified": 1768621446,
-        "narHash": "sha256-r4GVX+FToWVE2My8VVZH4V0pTIpnu2ZE8/Z4uxGEMBE=",
+        "narHash": "sha256-6YwHV1cjv6arXdF/PQc365h1j+Qje3Pydk501Rm4Q+4=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "d351d0653aeb7877273920cd3e823994e7579b0b",
+        "rev": "72ac591e737060deab2b86d6952babd1f896d7c5",
         "type": "github"
       },
       "original": {
@@ -438,11 +436,11 @@
     },
     "nixpkgs_3": {
       "locked": {
-        "lastModified": 1766309749,
+        "lastModified": 1768127708,
-        "narHash": "sha256-3xY8CZ4rSnQ0NqGhMKAy5vgC+2IVK0NoVEzDoOh4DA4=",
+        "narHash": "sha256-1Sm77VfZh3mU0F5OqKABNLWxOuDeHIlcFjsXeeiPazs=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "a6531044f6d0bef691ea18d4d4ce44d0daa6e816",
+        "rev": "ffbc9f8cbaacfb331b6017d5a5abb21a492c9a38",
         "type": "github"
       },
       "original": {
@@ -453,6 +451,22 @@
       }
     },
     "nixpkgs_4": {
+      "locked": {
+        "lastModified": 1768393167,
+        "narHash": "sha256-n2063BRjHde6DqAz2zavhOOiLUwA3qXt7jQYHyETjX8=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "2f594d5af95d4fdac67fba60376ec11e482041cb",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixpkgs-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs_5": {
       "locked": {
         "lastModified": 1736657626,
         "narHash": "sha256-FWlPMUzp0lkQBdhKlPqtQdqmp+/C+1MBiEytaYfrCTY=",
@@ -468,13 +482,13 @@
         "type": "github"
       }
     },
-    "nixpkgs_5": {
+    "nixpkgs_6": {
       "locked": {
-        "lastModified": 1767767207,
+        "lastModified": 1768564909,
-        "narHash": "sha256-Mj3d3PfwltLmukFal5i3fFt27L6NiKXdBezC1EBuZs4=",
+        "narHash": "sha256-Kell/SpJYVkHWMvnhqJz/8DqQg2b6PguxVWOuadbHCc=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "5912c1772a44e31bf1c63c0390b90501e5026886",
+        "rev": "e4bae1bd10c9c57b2cf517953ab70060a828ee6f",
         "type": "github"
       },
       "original": {
@@ -484,7 +498,7 @@
         "type": "github"
       }
     },
-    "nixpkgs_6": {
+    "nixpkgs_7": {
       "locked": {
         "lastModified": 1710272261,
         "narHash": "sha256-g0bDwXFmTE7uGDOs9HcJsfLFhH7fOsASbAuOzDC+fhQ=",
@@ -508,11 +522,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1767950946,
+        "lastModified": 1768844638,
-        "narHash": "sha256-1uAvkp3rbtF4fdjiiXfGydNOLFcG6J0/LXbHFgQLxKY=",
+        "narHash": "sha256-d0kHY4VjvpkAtOJxcN9xM9UvYZIxWs9f/gybe2+wHzI=",
         "owner": "nix-community",
         "repo": "NUR",
-        "rev": "3fabc71263f7765c342740db5360a2308ece715d",
+        "rev": "5089b930f2ee6d34412f9d2c625bbe3926bb4bee",
         "type": "github"
       },
       "original": {
@@ -521,6 +535,25 @@
         "type": "github"
       }
     },
+    "opencode": {
+      "inputs": {
+        "nixpkgs": "nixpkgs_4"
+      },
+      "locked": {
+        "lastModified": 1769153255,
+        "narHash": "sha256-ardM8zEJWvTvsFMQZWivjGPB2uIqFw6QPAzrRjAHQKY=",
+        "owner": "anomalyco",
+        "repo": "opencode",
+        "rev": "c130dd425a32fe1c1cd3747ea6565b0e6bf50100",
+        "type": "github"
+      },
+      "original": {
+        "owner": "anomalyco",
+        "ref": "v1.1.34",
+        "repo": "opencode",
+        "type": "github"
+      }
+    },
     "root": {
       "inputs": {
         "agenix": "agenix",
@@ -531,7 +564,7 @@
         "m3ta-nixpkgs": "m3ta-nixpkgs",
         "nix-colors": "nix-colors",
         "nixos-generators": "nixos-generators",
-        "nixpkgs": "nixpkgs_5",
+        "nixpkgs": "nixpkgs_6",
         "nixpkgs-45570c2": "nixpkgs-45570c2",
         "nixpkgs-9e58ed7": "nixpkgs-9e58ed7",
         "nixpkgs-locked": "nixpkgs-locked",
@@ -544,7 +577,7 @@
     "rose-pine-hyprcursor": {
       "inputs": {
         "hyprlang": "hyprlang",
-        "nixpkgs": "nixpkgs_6",
+        "nixpkgs": "nixpkgs_7",
         "utils": "utils"
       },
       "locked": {

home/features/cli/default.nix

@@ -214,6 +214,7 @@
     llm
     lf
     nix-index
+    nix-update
     libnotify
     nushellPlugins.skim
     progress

home/features/cli/nushell.nix

@@ -68,6 +68,7 @@ in {
           ]
         }
 
+        # Aliases
         alias .. = cd ..
         alias ... = cd ...
         alias h = cd $env.HOME

home/features/coding/default.nix

@@ -23,6 +23,7 @@
         torch
         srt
       ]))
+    opencode-desktop
     pyrefly
     nixd
     alejandra

home/features/coding/opencode.nix

@@ -22,8 +22,10 @@
     enable = true;
     settings = {
       theme = "opencode";
-      plugin = ["oh-my-opencode" "opencode-beads" "opencode-anthropic-auth"];
+      plugin = ["oh-my-opencode" "opencode-beads" "opencode-antigravity-auth@beta"];
-      agent = builtins.fromJSON (builtins.readFile "${inputs.agents}/agent/agents.json");
+      agent =
+        builtins.fromJSON
+        (builtins.readFile "${inputs.agents}/agent/agents.json");
       formatter = {
         alejandra = {
           command = ["alejandra" "-q" "-"];
@@ -72,14 +74,138 @@
           enabled = true;
         };
       };
+      provider = {
+        google = {
+          models = {
+            antigravity-gemini-3-pro = {
+              name = "Gemini 3 Pro (Antigravity)";
+              limit = {
+                context = 1048576;
+                output = 65535;
+              };
+              modalities = {
+                input = ["text" "image" "pdf"];
+                output = ["text"];
+              };
+              variants = {
+                low = {thinkingLevel = "low";};
+                high = {thinkingLevel = "high";};
+              };
+            };
+            antigravity-gemini-3-flash = {
+              name = "Gemini 3 Flash (Antigravity)";
+              limit = {
+                context = 1048576;
+                output = 65536;
+              };
+              modalities = {
+                input = ["text" "image" "pdf"];
+                output = ["text"];
+              };
+              variants = {
+                minimal = {thinkingLevel = "minimal";};
+                low = {thinkingLevel = "low";};
+                medium = {thinkingLevel = "medium";};
+                high = {thinkingLevel = "high";};
+              };
+            };
+            antigravity-claude-sonnet-4-5 = {
+              name = "Claude Sonnet 4.5 (Antigravity)";
+              limit = {
+                context = 200000;
+                output = 64000;
+              };
+              modalities = {
+                input = ["text" "image" "pdf"];
+                output = ["text"];
+              };
+            };
+            antigravity-claude-sonnet-4-5-thinking = {
+              name = "Claude Sonnet 4.5 Thinking (Antigravity)";
+              limit = {
+                context = 200000;
+                output = 64000;
+              };
+              modalities = {
+                input = ["text" "image" "pdf"];
+                output = ["text"];
+              };
+              variants = {
+                low = {thinkingConfig = {thinkingBudget = 8192;};};
+                max = {thinkingConfig = {thinkingBudget = 32768;};};
+              };
+            };
+            antigravity-claude-opus-4-5-thinking = {
+              name = "Claude Opus 4.5 Thinking (Antigravity)";
+              limit = {
+                context = 200000;
+                output = 64000;
+              };
+              modalities = {
+                input = ["text" "image" "pdf"];
+                output = ["text"];
+              };
+              variants = {
+                low = {thinkingConfig = {thinkingBudget = 8192;};};
+                max = {thinkingConfig = {thinkingBudget = 32768;};};
+              };
+            };
+            "gemini-2.5-flash" = {
+              name = "Gemini 2.5 Flash (Gemini CLI)";
+              limit = {
+                context = 1048576;
+                output = 65536;
+              };
+              modalities = {
+                input = ["text" "image" "pdf"];
+                output = ["text"];
+              };
+            };
+            "gemini-2.5-pro" = {
+              name = "Gemini 2.5 Pro (Gemini CLI)";
+              limit = {
+                context = 1048576;
+                output = 65536;
+              };
+              modalities = {
+                input = ["text" "image" "pdf"];
+                output = ["text"];
+              };
+            };
+            "gemini-3-flash-preview" = {
+              name = "Gemini 3 Flash Preview (Gemini CLI)";
+              limit = {
+                context = 1048576;
+                output = 65536;
+              };
+              modalities = {
+                input = ["text" "image" "pdf"];
+                output = ["text"];
+              };
+            };
+            "gemini-3-pro-preview" = {
+              name = "Gemini 3 Pro Preview (Gemini CLI)";
+              limit = {
+                context = 1048576;
+                output = 65535;
+              };
+              modalities = {
+                input = ["text" "image" "pdf"];
+                output = ["text"];
+              };
+            };
+          };
+        };
+      };
     };
   };
 
   home.file.".config/opencode/oh-my-opencode.json".text = builtins.toJSON {
     "$schema" = "https://raw.githubusercontent.com/code-yeongyu/oh-my-opencode/master/assets/oh-my-opencode.schema.json";
+    google_auth = false;
     agents = {
       Sisyphus = {
-        model = "opencode/claude-opus-4-5";
+        model = "zai-coding-plan/glm-4.7";
         permission = {
           edit = "allow";
           bash = {
@@ -139,28 +265,28 @@
         };
       };
       librarian = {
-        model = "anthropic/claude-sonnet-4-5";
+        model = "opencode/glm-4.7-free";
         permission = {
           edit = "deny";
           bash = "deny";
         };
       };
       explore = {
-        model = "anthropic/claude-sonnet-4-5";
+        model = "zai-coding-plan/glm-4.5-air";
         permission = {
           edit = "deny";
           bash = "deny";
         };
       };
       oracle = {
-        model = "anthropic/claude-sonnet-4-5";
+        model = "zai-coding-plan/glm-4.7";
         permission = {
           edit = "deny";
           bash = "deny";
         };
       };
       frontend-ui-ux-engineer = {
-        model = "anthropic/claude-opus-4-5";
+        model = "zai-coding-plan/glm-4.7";
         permission = {
           edit = "allow";
           bash = {
@@ -180,19 +306,70 @@
         };
       };
       document-writer = {
-        model = "anthropic/claude-opus-4-5";
+        model = "zai-coding-plan/glm-4.5-air";
         permission = {
           edit = "allow";
           bash = "deny";
         };
       };
       multimodal-looker = {
-        model = "anthropic/claude-opus-4-5";
+        model = "zai-coding-plan/glm-4.7";
         permission = {
           edit = "deny";
           bash = "deny";
         };
       };
+      "Prometheus (Planner)" = {
+        model = "zai-coding-plan/glm-4.7";
+        permission = {
+          edit = "deny";
+          bash = "allow";
+        };
+      };
+      "Metis (Plan Consultant)" = {
+        model = "zai-coding-plan/glm-4.7";
+        permission = {
+          edit = "deny";
+          bash = "allow";
+        };
+      };
+      "Momus (Plan Reviewer)" = {
+        model = "zai-coding-plan/glm-4.7";
+        permission = {
+          edit = "deny";
+          bash = "allow";
+        };
+      };
+      "Atlas" = {
+        model = "zai-coding-plan/glm-4.7";
+        permission = {
+          edit = "deny";
+          bash = "allow";
+        };
+      };
+    };
+    "categories" = {
+      "visual-engineering" = {
+        "model" = "zai-coding-plan/glm-4.7";
+      };
+      "ultrabrain" = {
+        "model" = "zai-coding-plan/glm-4.7";
+      };
+      "artistry" = {
+        "model" = "zai-coding-plan/glm-4.7";
+      };
+      "quick" = {
+        "model" = "zai-coding-plan/glm-4.5-ai";
+      };
+      "unspecified-low" = {
+        "model" = "zai-coding-plan/glm-4.7";
+      };
+      "unspecified-high" = {
+        "model" = "zai-coding-plan/glm-4.7";
+      };
+      "writing" = {
+        "model" = "zai-coding-plan/glm-4.7";
+      };
     };
     disabled_mcps = ["context7" "websearch"];
   };

home/features/desktop/default.nix

@@ -13,6 +13,7 @@
     ./office.nix
     ./rofi.nix
     ./theme.nix
+    ./wallpapers.nix
     ./wayland.nix
     ./webapps.nix
   ];
@@ -144,7 +145,7 @@
     # google-chrome
     # gsettings-desktop-schemas
     # graphviz
-    # ksnip
+    ksnip
     msty-studio
     nwg-look
     # pamixer

home/features/desktop/hyprland.nix

@@ -18,9 +18,7 @@ in {
 
         exec-once = [
           "hyprpanel"
-          "hyprpaper"
+          "while ! hyprpaper-random; do sleep 0.5; done"
-          "hyprpaper-random"
-          "hypridle"
           "wl-paste --type text --watch cliphist store" # Stores only text data
           "wl-paste --type image --watch cliphist store" # Stores only image data "wl-paste -p -t text --watch clipman store -P --histpath=\"~/.local/share/clipman-primary.json\""
         ];
@@ -30,6 +28,10 @@ in {
           "HYPRCURSOR_THEME,Bibata-Modern-Ice"
           "WLR_NO_HARDWARE_CURSORS,1"
           "GTK_THEME,Dracula"
+          "XDG_CURRENT_DESKTOP,Hyprland"
+          "XDG_SESSION_TYPE,wayland"
+          "XDG_SESSION_DESKTOP,Hyprland"
+          "NIXOS_OZONE_WL,1"
         ];
 
         input = {
@@ -149,6 +151,7 @@ in {
           "match:initial_title .*streamlabs.com.*, decorate off"
           "match:initial_title .*streamlabs.com.*, no_shadow on"
           "match:initial_title .*streamlabs.com.*, no_blur on"
+          "border_color rgb(ffffff), match:xwayland 1"
         ];
         "$mainMod" = "SUPER";
         "$terminal" = "kitty";
@@ -172,6 +175,7 @@ in {
           "$mainMod SHIFT, V, togglefloating"
           "$mainMod, D, exec, uwsm app -- rofi -show drun -run-command \"uwsm app -- {cmd}\""
           "$mainMod, V, exec, uwsm app -- cliphist list | rofi -dmenu | cliphist decode | wl-copy"
+          "$mainMod, C, exec, bash -c 'FILE=/tmp/screenshot_$(date +%s).png; grim -g \"$(slurp)\" \"$FILE\" && ksnip \"$FILE\"'"
           "$mainMod SHIFT, S, exec, uwsm app -- rofi -show emoji"
           "$mainMod, P, exec, uwsm app -- rofi-pass"
           "$mainMod SHIFT, P, pseudo"
@@ -213,5 +217,100 @@ in {
         ];
       };
     };
+    services.hypridle = {
+      enable = true;
+      settings = {
+        general = {
+          before_sleep_cmd = "hyprlock";
+          after_sleep_cmd = "hyprctl dispatch dpms on";
+          inhibit_sleep = 3;
+        };
+
+        listener = [
+          {
+            timeout = 300; # 5 min
+            on-timeout = "hyprlock";
+          }
+          {
+            timeout = 420; # 5.5 min
+            on-timeout = "hyprctl dispatch dpms off";
+            on-resume = "hyprctl dispatch dpms on";
+          }
+        ];
+      };
+    };
+
+    services.hyprpaper.enable = true;
+
+    programs.hyprlock = {
+      enable = true;
+      settings = {
+        "$font" = "JetBrainsMono Nerd Font";
+        "$base" = "rgb(${config.colorScheme.palette.base00})";
+        "$text" = "rgb(${config.colorScheme.palette.base05})";
+        "$textAlpha" = "${config.colorScheme.palette.base05}";
+        "$accentAlpha" = "${config.colorScheme.palette.base0D}";
+        "$red" = "rgb(${config.colorScheme.palette.base08})";
+        "$yellow" = "rgb(${config.colorScheme.palette.base0A})";
+
+        general = {
+          hide_cursor = true;
+        };
+
+        background = {
+          monitor = "";
+          path = "${config.home.homeDirectory}/.config/hypr/wallpapers/wallhaven-lmmo8r.jpg";
+          blur_passes = 0;
+          color = "rgb(${config.colorScheme.palette.base00})";
+        };
+
+        label = [
+          {
+            monitor = "";
+            text = "$TIME";
+            color = "$text";
+            font_size = 90;
+            font_family = "$font";
+            position = "30, 0";
+            halign = "left";
+            valign = "top";
+          }
+          {
+            monitor = "";
+            text = ''cmd[update:43200000] echo "$(date +"%A, %d %B %Y")"'';
+            color = "$text";
+            font_size = 25;
+            font_family = "$font";
+            position = "30, -150";
+            halign = "left";
+            valign = "top";
+          }
+        ];
+
+        input-field = [
+          {
+            monitor = "";
+            size = "300, 60";
+            outline_thickness = 4;
+            dots_size = 0.2;
+            dots_spacing = 0.2;
+            dots_center = true;
+            outer_color = "rgb(${config.colorScheme.palette.base0D})";
+            inner_color = "rgb(${config.colorScheme.palette.base00})";
+            font_color = "rgb(${config.colorScheme.palette.base05})";
+            fade_on_empty = false;
+            placeholder_text = ''<span foreground="##${config.colorScheme.palette.base05}">󰌾  Logged in as <span foreground="##${config.colorScheme.palette.base0D}">$USER</span></span>'';
+            hide_input = false;
+            check_color = "rgb(${config.colorScheme.palette.base0D})";
+            fail_color = "rgb(${config.colorScheme.palette.base08})";
+            fail_text = ''<i>$FAIL <b>($ATTEMPTS)</b></i>'';
+            capslock_color = "rgb(${config.colorScheme.palette.base0A})";
+            position = "0, -35";
+            halign = "center";
+            valign = "center";
+          }
+        ];
+      };
+    };
   };
 }

home/features/desktop/rofi.nix

@@ -182,14 +182,22 @@ in {
     cli.rofi-project-opener = {
       enable = true;
       projectDirs = {
-        NIX = {
+        AI = {
-          path = "~/p/NIX";
+          path = "~/p/AI";
           args = "";
         };
         CHAT = {
           path = "~/p/CHAT";
           args = "--agent chiron";
         };
+        MISC = {
+          path = "~/p/MISC";
+          args = "--agent chiron-forge";
+        };
+        NIX = {
+          path = "~/p/NIX";
+          args = "";
+        };
       };
       terminal = pkgs.kitty;
       terminalCommand = "opencode %a";

home/features/desktop/wallpapers.nix

@@ -0,0 +1,18 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+with lib; let
+  cfg = config.features.desktop.wallpapers;
+in {
+  options.features.desktop.wallpapers = mkEnableOption "Wallpapers for Hyprland";
+
+  config = mkIf cfg {
+    xdg.configFile."hypr/wallpapers" = {
+      source = ../../m3tam3re/wallpapers;
+      recursive = true;
+    };
+  };
+}

home/m3tam3re/m3-ares.nix

@@ -57,6 +57,7 @@ with lib; {
           rofi.enable = true;
           fonts.enable = true;
           wayland.enable = true;
+          wallpapers = true;
         };
       };
     }

home/m3tam3re/m3-kratos.nix

@@ -56,6 +56,7 @@ with lib; {
           rofi.enable = true;
           fonts.enable = true;
           wayland.enable = true;
+          wallpapers = true;
         };
       };
     }

hosts/common/extraServices/flatpak.nix

@@ -14,7 +14,6 @@ in {
     xdg.portal = {
       # xdg desktop intergration (required for flatpak)
       enable = true;
-      wlr.enable = true;
       extraPortals = with pkgs; [
         xdg-desktop-portal-hyprland
       ];

hosts/m3-ares/hardware.nix

@@ -1,8 +1,10 @@
-{
+{ config, pkgs, inputs, ... }: {
-  config,
+  # Workaround for tuxedo-drivers module bug in unstable (nixpkgs#480391)
-  pkgs,
+  # The unstable module has a type error - use stable module until fix propagates
-  ...
+  disabledModules = [ "hardware/tuxedo-drivers.nix" ];
-}: {
+  imports =
+    [ "${inputs.nixpkgs-stable}/nixos/modules/hardware/tuxedo-drivers.nix" ];
+
   hardware.nvidia = {
     prime = {
       offload.enable = false;
@@ -36,18 +38,12 @@
     };
   };
 
-  environment.systemPackages = with pkgs; [
+  environment.systemPackages = with pkgs; [ tuxedo-backlight ];
-    tuxedo-backlight
+  security.sudo.extraRules = [{
-  ];
+    users = [ "@wheel" ];
-  security.sudo.extraRules = [
+    commands = [{
-    {
-      users = ["@wheel"];
-      commands = [
-        {
       command = "/run/current-system/sw/bin/set-backlight";
-          options = ["NOPASSWD"];
+      options = [ "NOPASSWD" ];
-        }
+    }];
-      ];
+  }];
-    }
-  ];
 }

hosts/m3-ares/secrets.nix

@@ -33,6 +33,14 @@
         file = ../../secrets/exa-key.age;
         owner = "m3tam3re";
       };
+      basecamp-client-id = {
+        file = ../../secrets/basecamp-client-id.age;
+        owner = "m3tam3re";
+      };
+      basecamp-client-secret = {
+        file = ../../secrets/basecamp-client-secret.age;
+        owner = "m3tam3re";
+      };
       tailscale-key.file = ../../secrets/tailscale-key.age;
       m3tam3re-secrets = {
         file = ../../secrets/m3tam3re-secrets.age;

hosts/m3-ares/services/default.nix

@@ -15,14 +15,14 @@
     gvfs.enable = true;
     trezord.enable = true;
     gnome.gnome-keyring.enable = true;
-    qdrant = {
+    # qdrant = {
-      enable = true;
+    #   enable = true;
-      settings = {
+    #   settings = {
-        service = {
+    #     service = {
-          host = "0.0.0.0";
+    #       host = "0.0.0.0";
-        };
+    #     };
-      };
+    #   };
-    };
+    # };
     upower.enable = true;
     avahi = {
       enable = true;

hosts/m3-atlas/secrets.nix

@@ -1,51 +1,35 @@
 {
   age = {
     secrets = {
-      baserow-env = {
+      baserow-env = { file = ../../secrets/baserow-env.age; };
-        file = ../../secrets/baserow-env.age;
+      ghost-env = { file = ../../secrets/ghost-env.age; };
-      };
-      ghost-env = {
-        file = ../../secrets/ghost-env.age;
-      };
       kestra-config = {
         file = ../../secrets/kestra-config.age;
         mode = "644";
       };
-      kestra-env = {
+      kestra-env = { file = ../../secrets/kestra-env.age; };
-        file = ../../secrets/kestra-env.age;
+      littlelink-m3tam3re = { file = ../../secrets/littlelink-m3tam3re.age; };
-      };
+      minio-root-cred = { file = ../../secrets/minio-root-cred.age; };
-      littlelink-m3tam3re = {
+      n8n-env = { file = ../../secrets/n8n-env.age; };
-        file = ../../secrets/littlelink-m3tam3re.age;
+      paperless-key = { file = ../../secrets/paperless-key.age; };
-      };
+      restreamer-env = { file = ../../secrets/restreamer-env.age; };
-      minio-root-cred = {
+      searx = { file = ../../secrets/searx.age; };
-        file = ../../secrets/minio-root-cred.age;
+      tailscale-key = { file = ../../secrets/tailscale-key.age; };
-      };
-      n8n-env = {
-        file = ../../secrets/n8n-env.age;
-      };
-      paperless-key = {
-        file = ../../secrets/paperless-key.age;
-      };
-      restreamer-env = {
-        file = ../../secrets/restreamer-env.age;
-      };
-      searx = {
-        file = ../../secrets/searx.age;
-      };
-      tailscale-key = {
-        file = ../../secrets/tailscale-key.age;
-      };
       traefik = {
         file = ../../secrets/traefik.age;
         owner = "traefik";
       };
-      vaultwarden-env = {
+      vaultwarden-env = { file = ../../secrets/vaultwarden-env.age; };
-        file = ../../secrets/vaultwarden-env.age;
-      };
       m3tam3re-secrets = {
         file = ../../secrets/m3tam3re-secrets.age;
         owner = "m3tam3re";
       };
+      gitea-runner-token = {
+        file = ../../secrets/gitea-runner-token.age;
+        mode = "600";
+        owner = "gitea-runner";
+        group = "gitea-runner";
+      };
     };
   };
 }

hosts/m3-atlas/services/default.nix

@@ -2,6 +2,7 @@
   imports = [
     ./containers
     ./gitea.nix
+    ./gitea-actions-runner.nix
     ./headscale.nix
     ./minio.nix
     ./mysql.nix

hosts/m3-atlas/services/gitea-actions-runner.nix

@@ -0,0 +1,57 @@
+{
+  config,
+  pkgs,
+  ...
+}: {
+  services.gitea-actions-runner = {
+    instances.default = {
+      enable = true;
+      name = "${config.networking.hostName}-runner";
+      url = "https://code.m3ta.dev";
+      tokenFile = config.age.secrets.gitea-runner-token.path;
+
+      # nixos:host is primary, ubuntu is fallback
+      labels = [
+        "nixos:host"
+      ];
+
+      # Host execution packages
+      hostPackages = with pkgs; [
+        bash
+        curl
+        coreutils
+        git
+        jq
+        nix
+        nix-update
+        nodejs
+        # Add any other tools you need for nix-update workflows
+      ];
+
+      # Advanced settings
+      settings = {
+        runner = {
+          capacity = 4; # One job at a time (increase if you have resources)
+          timeout = "4h"; # Nix builds can take a while
+        };
+        cache = {enabled = true;};
+        container = {
+          enable_ipv6 = true;
+          privileged = false;
+        };
+      };
+    };
+  };
+
+  # User management (auto-created by module, but ensuring proper setup)
+  users.users.gitea-runner = {
+    home = "/var/lib/gitea-runner";
+    group = "gitea-runner";
+    isSystemUser = true;
+    createHome = true;
+  };
+  users.groups.gitea-runner = {};
+
+  # Firewall: Allow Podman bridge networks for cache actions
+  networking.firewall.trustedInterfaces = ["br-+"];
+}

hosts/m3-kratos/secrets.nix

@@ -5,9 +5,7 @@
         file = ../../secrets/anytype-key.age;
         owner = "m3tam3re";
       };
-      tailscale-key = {
+      tailscale-key = { file = ../../secrets/tailscale-key.age; };
-        file = ../../secrets/tailscale-key.age;
-      };
       wg-DE = {
         file = ../../secrets/wg-DE.age;
         path = "/etc/wireguard/DE.conf";
@@ -40,6 +38,14 @@
         file = ../../secrets/exa-key.age;
         owner = "m3tam3re";
       };
+      basecamp-client-id = {
+        file = ../../secrets/basecamp-client-id.age;
+        owner = "m3tam3re";
+      };
+      basecamp-client-secret = {
+        file = ../../secrets/basecamp-client-secret.age;
+        owner = "m3tam3re";
+      };
     };
   };
 }

hosts/m3-kratos/services/default.nix

@@ -15,7 +15,7 @@
     gvfs.enable = true;
     trezord.enable = true;
     gnome.gnome-keyring.enable = true;
-    qdrant.enable = false;
+    qdrant.enable = true;
     stirling-pdf.enable = true;
     avahi = {
       enable = true;

overlays/default.nix

@@ -8,7 +8,6 @@
   # You can change versions, add patches, set compilation flags, anything really.
   # https://nixos.wiki/wiki/Overlays
   modifications = final: prev: {
-    qdrant = inputs.nixpkgs-stable.legacyPackages.${prev.system}.qdrant;
     #   n8n = import ./mods/n8n.nix {inherit prev;};
 
     #   brave = prev.brave.override {

secrets.nix

@@ -1,22 +1,20 @@
 let
   # SYSTEMS
-  m3-ares = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG+M4CygEQ29eTmLqgyIAFCxy0rgfO23klNiARBEA+3s";
+  m3-ares =
-  m3-kratos = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDl+LtFGsk/A7BvxwiUCyq5wjRzGtQSrBJzzLGxINF4O";
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG+M4CygEQ29eTmLqgyIAFCxy0rgfO23klNiARBEA+3s";
-  m3-helios = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIyHuLITpI+M45ZZem33wDusY2X988mBoWpD1HDeZNRJ";
+  m3-kratos =
-  m3-atlas = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINBYK1wsFkUPIb/lX1BH7+VyXmmGSbdEFHnvhAOcaC7H";
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDl+LtFGsk/A7BvxwiUCyq5wjRzGtQSrBJzzLGxINF4O";
+  m3-helios =
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIyHuLITpI+M45ZZem33wDusY2X988mBoWpD1HDeZNRJ";
+  m3-atlas =
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINBYK1wsFkUPIb/lX1BH7+VyXmmGSbdEFHnvhAOcaC7H";
 
   # USERS
-  m3tam3re = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC3YEmpYbM+cpmyD10tzNRHEn526Z3LJOzYpWEKdJg8DaYyPbDn9iyVX30Nja2SrW4Wadws0Y8DW+Urs25/wVB6mKl7jgPJVkMi5hfobu3XAz8gwSdjDzRSWJrhjynuaXiTtRYED2INbvjLuxx3X8coNwMw58OuUuw5kNJp5aS2qFmHEYQErQsGT4MNqESe3jvTP27Z5pSneBj45LmGK+RcaSnJe7hG+KRtjuhjI7RdzMeDCX73SfUsal+rHeuEw/mmjYmiIItXhFTDn8ZvVwpBKv7xsJG90DkaX2vaTk0wgJdMnpVIuIRBa4EkmMWOQ3bMLGkLQeK/4FUkNcvQ/4+zcZsg4cY9Q7Fj55DD41hAUdF6SYODtn5qMPsTCnJz44glHt/oseKXMSd556NIw2HOvihbJW7Rwl4OEjGaO/dF4nUw4c9tHWmMn9dLslAVpUuZOb7ykgP0jk79ldT3Dv+2Hj0CdAWT2cJAdFX58KQ9jUPT3tBnObSF1lGMI7t77VU=";
+  m3tam3re =
-  users = [
+    "ssh-rsa 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";
-    m3tam3re
+  users = [ m3tam3re ];
-  ];
 
-  systems = [
+  systems = [ m3-atlas m3-ares m3-helios m3-kratos ];
-    m3-atlas
-    m3-ares
-    m3-helios
-    m3-kratos
-  ];
 in {
   "secrets/anytype-key.age".publicKeys = systems ++ users;
   "secrets/anytype-key-ares.age".publicKeys = systems ++ users;
@@ -31,6 +29,9 @@ in {
   "secrets/paperless-key.age".publicKeys = systems ++ users;
   "secrets/ref-key.age".publicKeys = systems ++ users;
   "secrets/exa-key.age".publicKeys = systems ++ users;
+  "secrets/basecamp-client-id.age".publicKeys = systems ++ users;
+  "secrets/basecamp-client-secret.age".publicKeys = systems ++ users;
+  "secrets/gitea-runner-token.age".publicKeys = systems ++ users;
   "secrets/restreamer-env.age".publicKeys = systems ++ users;
   "secrets/searx.age".publicKeys = systems ++ users;
   "secrets/tailscale-key.age".publicKeys = systems ++ users;

secrets/basecamp-client-secret.age

@@ -0,0 +1,21 @@
+age-encryption.org/v1
+-> ssh-ed25519 4NLKrw eqiq6a9Ht012v9ryAt2uZwpCU5/DFbiMZIkH0A/ovhc
+c2ubOjYEc6RjhrZUCyKvB7chJwlCBv1KeIXdXlYcyNA
+-> ssh-ed25519 5kwcsA R+KKgXolqFgs3sPFKLWBj8CYMHvsE0vcoPYjqgaYSDc
+jdl1BcHDXY3lvAfFKeHl8lNgbjbxLPOL+5OaPBsJC5o
+-> ssh-ed25519 9d4YIQ KYeIi3u2JB3efI5pSlc4up2wgAvR+X1xsHuRSZmr5RY
+Qy6wagBuOXuy5b23stKEc/zfMpN53/56LKMgPFd5fwo
+-> ssh-ed25519 3Bcr1w yYclbDnxBkGQF+MmcqNDG2VHZDcXK01Orl2c0L4auy4
+wbC9r7P4hnJT+V0Ic3Pk9nQ5ZUoPL+/qR9Ab5OHv3d0
+-> ssh-rsa DQlE7w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+--- 6X7pxwraQpXikkDgLrY3ay7zcwdk9U9LHx/MP8jEgcw
+<3‘jÂ<6A>ö¼uWÙF“’DæÙŸ™$Hð¹Ç†s)àSÚˆ›/ïÂëº pí3üA‰Sö^ùïóïVß‹u@9‡»µ´rš+L2

secrets/gitea-runner-token.age

@@ -0,0 +1,5 @@
+age-encryption.org/v1
+-> ssh-ed25519 4NLKrw yQsk1NS2ujPzm4WJLl/CYi0EZRCIFvgJP2aLG09KJQE
+H2QT+huNTEpE2ndSeyL38e1JW1Z+UEHObqhZQ66E28M
+--- 1lhPBj02CB6BsouveThOL4pyTKXQhrUro59YXz0+fRk
+qœË=÷¼V<C2BC>wÃ×Ü®1A<31>½ß²uš!óI›(ÏÄ?¤CC"ßÞ‹’3.ëÎåŽãsŒô :"úÔº|¦ÑæÆçY2”þ\ï<>ýˆ›Í¨«