# .dotfiles

NixOS + Home Manager configuration for jashton's machines, built as a single flake.

## NixOS Flakes Structure

```
.
├── flake.nix / flake.lock   Inputs + the 3 nixosConfigurations (violet, lilac, lavender)
├── hosts/<name>/            Per-machine entrypoint + hardware.nix
├── system/                  Shared NixOS (system-level) configuration
├── home/                    Home Manager configuration for user "jashton"
├── secrets/ + .sops.yaml    sops-nix encrypted secrets
└── ports.registry           State file written by the find-open-port script
```

**`flake.nix`** pins `nixpkgs` to `nixos-26.05` (plus an `nixpkgs-unstable` follower), and pulls in `home-manager`, `sops-nix`, `niri` (compositor), `wvkbd-src` (on-screen keyboard source), the DankMaterialShell trio (`dms`, `dms-plugin-registry`, `danksearch`), and `nixos-hardware`. Its `outputs` define three `nixosConfigurations`, one per host — each wires up the niri/dms-plugin-registry/sops-nix NixOS modules and a `home-manager.users.jashton` block importing `home/jashton.nix` (plus the `danksearch` home module).

**`hosts/`** — one directory per machine, each with `default.nix` (hostname + host-specific services/hardware tweaks, imports `../../system`) and `hardware.nix` (generated hardware scan):
- `violet` — imports the ThinkPad-specific security module (`system/security/thinkpad.nix`), disables lid-switch suspend, has (disabled) TLP power-profile tuning, and enables `input-remapper`.
- `lilac` — Framework laptop (Intel Core Ultra series 3, via `nixos-hardware`), fingerprint reader + Thunderbolt/bolt + Intel graphics acceleration.
- `lavender` — minimal host, just graphics enablement.
- Both `violet`/`lilac` open a Thunderbolt-networking point-to-point link (`thunderbolt0`, ports 4242).

**`system/`** — shared NixOS config imported by every host, split by concern:
- `packages.nix` — system-wide packages, unfree allowed, plus a hand-written `unix` script (`sudo nixos-rebuild switch`, then auto-commits/pushes the dotfiles repo on success) and Steam setup.
- `core/` — `boot.nix` (systemd-boot, `uinput` module), `audio.nix` (PipeWire/Bluetooth tuning), `env.nix` (zsh + oh-my-zsh, Nerd Font, flakes enabled, shell aliases), `locale.nix` (Denver/en_US), `power.nix` (deep sleep).
- `security/` — `sops.nix` (age-via-SSH-host-key secrets), `sudo.nix` (passwordless `tlp` for jashton), `systemd.nix`, `thinkpad.nix` (fprintd), `users.nix` (user/group defs).
- `network/` — NetworkManager + firewall, plus `pi-hole.nix` (a Pi-hole container run via Podman `oci-containers`).
- `services/` — currently an empty placeholder module (compositor/greeter services are declared per-host instead, see `hosts/violet/default.nix`).
- `virtualisation/` — Podman (with Docker compat), Waydroid, VirtualBox, libvirtd.

**`home/`** — Home Manager config for `jashton`:
- `jashton.nix` — top-level user config: session vars, SSH client config (aliases for `lavender`/`violet`/`lilac`/`heliotrope`), the `lan-mouse` user service, workspace directory scaffolding (`~/dev`, `~/school`, etc.), a `custom_wvkbd` package override (builds `wvkbd` from `wvkbd-src` against the `.custom.h` files below), and a set of hand-written shell tools installed as packages: `jroot`/`jbuild`/`jrun`/`jtest`/`jclean` (Java project tooling — see below), `fkill` (interactive `pkill` by name), `find-open-port` (dev-port registry in `ports.registry`).
- `programs/` — `default.nix` imports `alacritty.nix` (terminal theme/font), `git.nix` (identity + ignores), `nvim.nix` (full Neovim config: LSP, completion, Java/jdtls + DAP debugging — see Keybinds). `keymap.custom.h`, `layout.custom.h`, `config.custom.h` (+ `.bak` backups) are C source overrides for wvkbd's `mobintl` on-screen-keyboard layout, spliced into the `custom_wvkbd` build in `jashton.nix`.
- `desktop/` — `default.nix` imports `niri.nix` (the niri compositor config, touch-gesture daemon, and on-screen-keyboard launcher — see Keybinds); `wvkbd.nix` is currently an empty stub.

**`secrets/secrets.yaml`** + **`.sops.yaml`** — sops-encrypted secrets (currently Vaultwarden client id/secret), decrypted at activation time using each host's SSH host key as the age identity.

## Keybinds

### Niri (compositor, `home/desktop/niri.nix`)
`Mod` is niri's default modifier (Super/Windows key).

| Bind | Action |
|---|---|
| `Mod+Return` | Spawn Alacritty |
| `Mod+Space` | Toggle DMS spotlight launcher |
| `Mod+F` | Fullscreen focused window |
| `Mod+V` | Toggle floating for focused window |
| `Mod+X` | Close focused window |
| `Mod+H` / `Mod+L` | Focus column left / right |
| `Mod+J` / `Mod+K` | Focus window down / up |
| `Mod+Shift+H` / `Mod+Shift+L` | Move column left / right |
| `Mod+Shift+J` / `Mod+Shift+K` | Move column to workspace down / up |
| `Mod+U` / `Mod+N` | Focus workspace up / down |
| `Mod+Shift+P` | Toggle overview |
| `Mod+P` | Toggle the on-screen keyboard (signals `wvkbd-mobintl`) |
| `Mod+Shift+E` | Quit niri |
| `Print` | Screenshot (interactive) |
| `Ctrl+Print` | Screenshot whole screen |
| `XF86AudioRaiseVolume` / `XF86AudioLowerVolume` | Volume ±5% |
| `XF86AudioMute` | Toggle mute |
| `XF86MonBrightnessUp` / `XF86MonBrightnessDown` | Brightness ±5 (via `dms ipc call brightness`) |

### Touchscreen gestures (`lisgd`, launched at niri startup, `home/desktop/niri.nix`)
| Gesture | Action |
|---|---|
| 3-finger swipe left → right | Focus column left |
| 3-finger swipe right → left | Focus column right |
| 3-finger swipe up → down | Focus workspace up |
| 3-finger swipe down → up | Focus workspace down |
| 4-finger swipe down → up | Toggle DMS spotlight |
| 1-finger swipe down → up, starting from the bottom edge | Toggle the on-screen keyboard |
| 1-finger swipe up → down, starting from the top edge | Maximize window to edges |

### On-screen keyboard (custom `wvkbd-mobintl` build, `home/programs/{layout,config,keymap}.custom.h`)
- Toggle show/hide: `Mod+P` or the bottom-edge swipe gesture above (both send `SIGRTMIN` to `wvkbd-mobintl`).
- The "⌨" key (`NextLayer`) cycles keyboard layers: `Full ⇄ Special` in portrait, `Landscape ⇄ LandscapeSpecial` in landscape.
- `Abc` (in the `Special` layer) returns to the base layer.
- `Cmp` (Compose) + a letter opens that letter's accent/diacritic picker (e.g. `Cmp` then `e` → é/è/ê/ë/ē…).
- The `q` key doubles as a shortcut into the emoji layer.
- Alternate script layouts exist in the layout source (Cyrillic, Arabic, Persian, Greek, Georgian, Hebrew) but are not wired into the active `layers[]` cycle — only `Full`/`Special` (portrait) and `Landscape`/`LandscapeSpecial` (landscape) are reachable from the running config.

### Neovim (`home/programs/nvim.nix`, leader = `<Space>`)
General:
| Bind | Action |
|---|---|
| `<leader>w` | Write file |
| `<leader>q` | Quit |
| `<leader>wq` | Write and quit |
| `<leader>x` | `chmod +x` the current file |
| `Q` | Disabled (no-op) |
| `o` / `O` | Open a line below/above, stay in normal mode |
| `jj` (insert mode) | Escape to normal mode |

Completion (insert mode, nvim-cmp):
| Bind | Action |
|---|---|
| `<C-Space>` | Trigger completion |
| `<CR>` | Confirm selection |
| `<C-n>` / `<C-p>` | Next / previous item |

Java LSP (buffer-local, active once `jdtls` attaches to a `.java` file):
| Bind | Action |
|---|---|
| `gd` | Go to definition |
| `gr` | Find references |
| `K` | Hover docs |
| `<leader>rn` | Rename symbol |
| `<leader>ca` | Code action |
| `<leader>f` | Format buffer |
| `<leader>oi` | Organize imports |

Debugging (nvim-dap / nvim-dap-ui, global):
| Bind | Action |
|---|---|
| `<leader>db` | Toggle breakpoint |
| `<leader>dB` | Conditional breakpoint (prompts for condition) |
| `<leader>dc` | Continue / start session (prompts for a config if none is running) |
| `<leader>dn` | Step over |
| `<leader>di` | Step into |
| `<leader>du` | Step out |
| `<leader>dr` | Toggle the debug REPL |
| `<leader>dq` | Terminate session |
| `<leader>de` (normal + visual) | Evaluate expression under cursor / selection |

### Other applications
- **Alacritty** (`home/programs/alacritty.nix`) — only theme/font/window settings are configured; keybindings are Alacritty's unmodified defaults.
- Everything else installed (LibreWolf, Thunderbird, Discord, VLC, Zathura, etc.) is installed via `home.packages`/`environment.systemPackages` with no keybind customization in this repo — they run with upstream defaults.
- `input-remapper` is enabled on `violet` (`hosts/violet/default.nix`) but has no remapping profile committed in this repo.