modules/_home/default.nix

@@ -8,7 +8,6 @@ in {
     kitty
     claude-code
     mpv
-    obsidian
   ];
 
   # Symlinks in ~/.jdks/ - path scanned by IntelliJ on Linux by default

modules/_home/niri.nix

@@ -1,6 +1,6 @@
 { config, pkgs, ... }:
 let
-  wallpaper = "${../../wallpapers/astronaut.png}";
+  wallpaper = "${config.home.homeDirectory}/repos/nixos/wallpapers/astronaut.png";
 in {
   services.swayidle = {
     enable = true;
@@ -69,6 +69,7 @@ in {
     text = ''
       #!/usr/bin/env bash
       swww-daemon &
+      sleep 0.5
       swww img "${wallpaper}" --transition-type none
     '';
   };

modules/_home/theme.nix

@@ -16,6 +16,11 @@
       name = "Gruvbox-Plus-Dark";
       package = pkgs.gruvbox-plus-icons;
     };
+    cursorTheme = {
+      name = "Bibata-Modern-Ice";
+      package = pkgs.bibata-cursors;
+      size = 24;
+    };
   };
 
   qt = {

modules/core.nix

@@ -23,7 +23,10 @@
       memoryPercent = 300;
     };
 
-    services.xserver.enable = false;
+    services.xserver = {
+      enable = false;
+      xkb.layout = "en";
+    };
 
     environment.systemPackages = with pkgs; [
       curl
@@ -34,6 +37,7 @@
       unrar
       p7zip
       nvd
+      obsidian
     ]; 
 
     networking.networkmanager.enable = true;

modules/den.nix

@@ -26,10 +26,8 @@ in {
     includes = [
       den.provides.hostname
       den.aspects.core
-      den.aspects.services
       den.aspects.wayland
       den.aspects.niri
-      den.aspects.portable
       den.aspects.notebook-specific
       den.aspects.dev
       den.aspects.creative
@@ -44,10 +42,8 @@ in {
     includes = [
       den.provides.hostname
       den.aspects.core
-      den.aspects.services
       den.aspects.wayland
       den.aspects.niri
-      den.aspects.portable
       den.aspects.work-specific
       den.aspects.secrets
       den.aspects.dev
@@ -61,7 +57,6 @@ in {
     includes = [
       den.provides.hostname
       den.aspects.core
-      den.aspects.services
       den.aspects.wayland
       den.aspects.niri
       den.aspects.desktop-specific
@@ -97,6 +92,7 @@ in {
         backupFileExtension  = "backup";
         extraSpecialArgs = { inherit inputs identity; };
       };
+      security.sudo.wheelNeedsPassword = false;
     };
     homeManager = {
       imports = [

modules/desktop.nix

@@ -28,8 +28,6 @@
       };
     };
 
-    security.sudo.wheelNeedsPassword = false;
-
     services.xserver.videoDrivers = [ "nvidia" ];
 
     boot = {

modules/dev.nix

@@ -5,7 +5,7 @@ in {
   den.aspects.dev.nixos = { pkgs, ... }:
   let
     pkgs-unstable = import inputs.nixpkgs-unstable {
-      system = pkgs.stdenv.hostPlatform.system;
+      system = pkgs.system;
       config.allowUnfree = true;
     };
   in {
@@ -24,7 +24,6 @@ in {
 
       # Infrastructure
       docker-compose
-      jq
 
       # IDE
       jetbrains.idea
@@ -68,6 +67,23 @@ in {
       JAVA_HOME = "${pkgs-unstable.openjdk8}";
     };
 
+    systemd.tmpfiles.rules = [
+      "d /var/lib/payara41 0755 ${username} users -"
+    ];
+
+    system.activationScripts.payaraJava = ''
+      asenv=/var/lib/payara41/glassfish/config/asenv.conf
+      if [ -f "$asenv" ]; then
+        ${pkgs.gnused}/bin/sed -i '/^AS_JAVA=/d' "$asenv"
+        echo 'AS_JAVA="${pkgs-unstable.openjdk8}"' >> "$asenv"
+      fi
+
+      domain_xml=/var/lib/payara41/glassfish/domains/domain1/config/domain.xml
+      if [ -f "$domain_xml" ]; then
+        ${pkgs.gnused}/bin/sed -i 's|java-home="[^"]*"|java-home="${pkgs-unstable.openjdk8}/lib/openjdk"|' "$domain_xml"
+      fi
+    '';
+
     virtualisation.docker.enable = true;
     users.users.${username}.extraGroups = [ "docker" ];
   };

modules/notebook.nix

@@ -1,4 +1,4 @@
-{ den, inputs, ... }: {
+{ den, inputs, lib, ... }: {
   den.aspects.notebook-specific.nixos = { pkgs, ... }: {
     imports = [
       ./_hardware/notebook-hardware.nix
@@ -11,7 +11,24 @@
       enable32Bit = true;
     };
 
+    security.sudo.wheelNeedsPassword = lib.mkForce true;
+
+    networking.firewall = {
+      enable          = true;
+      allowedTCPPorts = [];
+      allowedUDPPorts = [];
+    };
+
     services.thermald.enable = true;
+    powerManagement.enable   = true;
+
+    services.tlp = {
+      enable   = true;
+      settings = {
+        CPU_SCALING_GOVERNOR_ON_AC  = "performance";
+        CPU_SCALING_GOVERNOR_ON_BAT = "powersave";
+      };
+    };
 
     boot = {
       initrd.availableKernelModules = [ "xhci_pci" "ahci" "usbhid" "sd_mod" ];

modules/portable.nix

@@ -1,17 +0,0 @@
-{ den, lib, ... }: {
-  den.aspects.portable.nixos = {
-    security.sudo.wheelNeedsPassword = lib.mkForce true;
-
-    networking.firewall.enable = true;
-
-    powerManagement.enable = true;
-
-    services.tlp = {
-      enable   = true;
-      settings = {
-        CPU_SCALING_GOVERNOR_ON_AC  = "performance";
-        CPU_SCALING_GOVERNOR_ON_BAT = "powersave";
-      };
-    };
-  };
-}

modules/services.nix

@@ -1,5 +1,5 @@
 { den, ... }: {
-  den.aspects.services.nixos = {
+  den.aspects.core.nixos = { pkgs, ... }: {
     services = {
       libinput.enable = true;
       fstrim.enable = true;
@@ -14,10 +14,10 @@
         jack.enable = true;
         extraConfig.pipewire."92-low-latency" = {
           "content.properties" = {
-            "default.clock.rate"        = 48000;
+          "default.clock.rate" = 48000;
-            "default.clock.quantum"     = 256;
+          "default.clock.quantum" = 256;
-            "default.clock.min-quantum" = 256;
+          "default.clock.min-quantum" = 256;
-            "default.clock.max-quantum" = 256;
+          "default.clock.max-quantum" = 256;
           };
         };
         extraConfig.pipewire-pulse."92-low-latency" = {
@@ -25,9 +25,9 @@
             {
               name = "libpipewire-module-protocol-pulse";
               args = {
-                pulse.min.req     = "256/48000";
+                pulse.min.req = "256/48000";
                 pulse.default.req = "256/48000";
-                pulse.max.req     = "256/48000";
+                pulse.max.req = "256/48000";
                 pulse.min.quantum = "256/48000";
                 pulse.max.quantum = "256/48000";
               };

modules/wayland.nix

@@ -8,6 +8,7 @@
 
       # Browser / Electron Wayland backends
       MOZ_ENABLE_WAYLAND           = "1";
+      MOZ_USE_XINPUT2              = "1";
       ELECTRON_OZONE_PLATFORM_HINT = "wayland";
       NIXOS_OZONE_WL               = "1";
 

modules/work.nix

@@ -1,4 +1,4 @@
-{ den, inputs, ... }: {
+{ den, inputs, lib, config, ... }: {
   den.aspects.work-specific.nixos = { pkgs, config, ... }: {
     imports = [
       ./_hardware/work-hardware.nix
@@ -41,6 +41,24 @@
       __GLX_VENDOR_LIBRARY_NAME = "nvidia";
     };
 
+    security.sudo.wheelNeedsPassword = lib.mkForce true;
+
+    networking.firewall = {
+      enable          = true;
+      allowedTCPPorts = [];
+      allowedUDPPorts = [];
+    };
+
+    powerManagement.enable = true;
+
+    services.tlp = {
+      enable   = true;
+      settings = {
+        CPU_SCALING_GOVERNOR_ON_AC  = "performance";
+        CPU_SCALING_GOVERNOR_ON_BAT = "powersave";
+      };
+    };
+
     boot = {
       initrd.kernelModules = [ "amdgpu" ];
       kernelModules        = [ "kvm-amd" "nvidia" "nvidia_modeset" "nvidia_uvm" "nvidia_drm" ];