flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/c6245e8' (2025-12-18)
  → 'github:NixOS/nixpkgs/a653104' (2025-12-21)

.gitattributes

@@ -1,4 +1,5 @@
 secrets/soundcloud_token filter=git-crypt diff=git-crypt
+secrets/bandcamp_token filter=git-crypt diff=git-crypt
 assets/bitwig/activation.bwreg filter=lfs diff=lfs merge=lfs -text
 assets/bitwig/bitwig-studio.deb filter=lfs diff=lfs merge=lfs -text
 assets/bitwig/bitwig.jar filter=lfs diff=lfs merge=lfs -text

Makefile

@@ -1,5 +1,6 @@
 switch:
-	sudo nixos-rebuild switch --flake path://$(PWD)#
+	nixos-rebuild switch --target-host root@localhost \
+    --build-host root@localhost --flake path://$(PWD)#panacea
 
 update:
 	nix flake update --commit-lock-file

flake.lock

@@ -25,11 +25,11 @@
     },
     "crane": {
       "locked": {
-        "lastModified": 1762538466,
+        "lastModified": 1765739568,
-        "narHash": "sha256-8zrIPl6J+wLm9MH5ksHcW7BUHo7jSNOu0/hA0ohOOaM=",
+        "narHash": "sha256-gQYx35Of4UDKUjAYvmxjUEh/DdszYeTtT6MDin4loGE=",
         "owner": "ipetkov",
         "repo": "crane",
-        "rev": "0cea393fffb39575c46b7a0318386467272182fe",
+        "rev": "67d2baff0f9f677af35db61b32b5df6863bcc075",
         "type": "github"
       },
       "original": {
@@ -85,12 +85,12 @@
         "nixpkgs": "nixpkgs_2"
       },
       "locked": {
-        "lastModified": 1762970173,
+        "lastModified": 1765254444,
-        "narHash": "sha256-sEdTVZblVsdwLNRGKShu+Aq9uYUYVgM57bsVaIDlmw4=",
+        "narHash": "sha256-kAO/ZeBnjaF+uqOP6qweXlRk2ylocLuv/9Dn8FsuPlU=",
-        "rev": "fb09415ca153b81a9c361c5fae7a056e04b69f21",
+        "rev": "3ccc0297525e51ac3d7905509e0616c9c8350108",
-        "revCount": 314,
+        "revCount": 316,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/DeterminateSystems/determinate/3.13.1/019a793a-86ab-768c-aeea-35a477c89058/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/DeterminateSystems/determinate/3.14.0/019b0160-c5de-7941-9c26-cb47bc17eec3/source.tar.gz"
       },
       "original": {
         "type": "tarball",
@@ -100,59 +100,37 @@
     "determinate-nixd-aarch64-darwin": {
       "flake": false,
       "locked": {
-        "narHash": "sha256-Xkp+uzaXBuZ4czEpKa2EPTUtGq71R9JTum3rkdA3gLI=",
+        "narHash": "sha256-6PWoqx52nvlWzlElTjcn7KAPKitfcKZYEFSsC3PoEoE=",
         "type": "file",
-        "url": "https://install.determinate.systems/determinate-nixd/tag/v3.13.1/macOS"
+        "url": "https://install.determinate.systems/determinate-nixd/tag/v3.14.0/macOS"
       },
       "original": {
         "type": "file",
-        "url": "https://install.determinate.systems/determinate-nixd/tag/v3.13.1/macOS"
+        "url": "https://install.determinate.systems/determinate-nixd/tag/v3.14.0/macOS"
       }
     },
     "determinate-nixd-aarch64-linux": {
       "flake": false,
       "locked": {
-        "narHash": "sha256-+1oyvQ0EOK8chhs/ghPwcx3pJQeBXkwNwM3F+nVFQnk=",
+        "narHash": "sha256-b1e25BUPL7Qf0QVbYlfZ/+QiClrP/SHIjMPtA47aOLc=",
         "type": "file",
-        "url": "https://install.determinate.systems/determinate-nixd/tag/v3.13.1/aarch64-linux"
+        "url": "https://install.determinate.systems/determinate-nixd/tag/v3.14.0/aarch64-linux"
       },
       "original": {
         "type": "file",
-        "url": "https://install.determinate.systems/determinate-nixd/tag/v3.13.1/aarch64-linux"
+        "url": "https://install.determinate.systems/determinate-nixd/tag/v3.14.0/aarch64-linux"
       }
     },
     "determinate-nixd-x86_64-linux": {
       "flake": false,
       "locked": {
-        "narHash": "sha256-XxThMTITG0L8/yrCPC//CmRDmFQxkb5/tcBYkxzZ2bo=",
+        "narHash": "sha256-8EI2f8IftPcRFlR6K4+cpIEAVf5UIeMCjHysEtVqDw0=",
         "type": "file",
-        "url": "https://install.determinate.systems/determinate-nixd/tag/v3.13.1/x86_64-linux"
+        "url": "https://install.determinate.systems/determinate-nixd/tag/v3.14.0/x86_64-linux"
       },
       "original": {
         "type": "file",
-        "url": "https://install.determinate.systems/determinate-nixd/tag/v3.13.1/x86_64-linux"
+        "url": "https://install.determinate.systems/determinate-nixd/tag/v3.14.0/x86_64-linux"
-      }
-    },
-    "fenix": {
-      "inputs": {
-        "nixpkgs": [
-          "lanzaboote",
-          "nixpkgs"
-        ],
-        "rust-analyzer-src": "rust-analyzer-src"
-      },
-      "locked": {
-        "lastModified": 1763361733,
-        "narHash": "sha256-ka7dpwH3HIXCyD2wl5F7cPLeRbqZoY2ullALsvxdPt8=",
-        "owner": "nix-community",
-        "repo": "fenix",
-        "rev": "6c8d48e3b0ae371b19ac1485744687b788e80193",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-community",
-        "repo": "fenix",
-        "type": "github"
       }
     },
     "flake-compat": {
@@ -208,27 +186,6 @@
         "url": "https://flakehub.com/f/hercules-ci/flake-parts/0.1"
       }
     },
-    "flake-parts_2": {
-      "inputs": {
-        "nixpkgs-lib": [
-          "lanzaboote",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1762980239,
-        "narHash": "sha256-8oNVE8TrD19ulHinjaqONf9QWCKK+w4url56cdStMpM=",
-        "owner": "hercules-ci",
-        "repo": "flake-parts",
-        "rev": "52a2caecc898d0b46b2b905f058ccc5081f842da",
-        "type": "github"
-      },
-      "original": {
-        "owner": "hercules-ci",
-        "repo": "flake-parts",
-        "type": "github"
-      }
-    },
     "git-hooks-nix": {
       "inputs": {
         "flake-compat": "flake-compat",
@@ -259,7 +216,7 @@
       "inputs": {
         "nixpkgs": [
           "lanzaboote",
-          "pre-commit-hooks-nix",
+          "pre-commit",
           "nixpkgs"
         ]
       },
@@ -301,20 +258,18 @@
     "lanzaboote": {
       "inputs": {
         "crane": "crane",
-        "fenix": "fenix",
-        "flake-compat": "flake-compat_2",
-        "flake-parts": "flake-parts_2",
         "nixpkgs": [
           "nixpkgs"
         ],
-        "pre-commit-hooks-nix": "pre-commit-hooks-nix"
+        "pre-commit": "pre-commit",
+        "rust-overlay": "rust-overlay"
       },
       "locked": {
-        "lastModified": 1763376718,
+        "lastModified": 1765887029,
-        "narHash": "sha256-bIYjIla2w6bzozkohYxsU/BP0hLs9w48ZwxBfg3cShE=",
+        "narHash": "sha256-s6LGO6kMlHRdnspV0LReSi47iaYaJ/Oveb4rM9fklPM=",
         "owner": "nix-community",
         "repo": "lanzaboote",
-        "rev": "0859944b08039342a9bb069e7edc1e62bb4d0e65",
+        "rev": "5a8c9b5339588bb6ec388da5d0a6e701a46a82c4",
         "type": "github"
       },
       "original": {
@@ -326,8 +281,8 @@
     "local-bitwig": {
       "flake": false,
       "locked": {
-        "lastModified": 1756285531,
+        "lastModified": 1765321606,
-        "narHash": "sha256-c4dw/u3mcspNZ/YErD0AWKMI5XeTBTsh5rP1Dzmp2u8=",
+        "narHash": "sha256-WteEWi5GPrGGfzLNTEmgQaH5/DAT/zeZofbBE6D+Po8=",
         "path": "/home/coolneng/Projects/panacea/assets/bitwig",
         "type": "path"
       },
@@ -345,12 +300,12 @@
         "nixpkgs-regression": "nixpkgs-regression"
       },
       "locked": {
-        "lastModified": 1762967009,
+        "lastModified": 1765252170,
-        "narHash": "sha256-uqYmH0KA8caQqX5u4BMarZsuDlC+71HRsH3h4f3DPCA=",
+        "narHash": "sha256-p98D44tYJMgB5Qet5S8cTQFdffk/GmoaGkpQtZ3hqJU=",
-        "rev": "ef054dc06e9701597bce0b0572af18cb4c7e7277",
+        "rev": "1ddd28880651054346c34009d7bb9de36f1db2c1",
-        "revCount": 23243,
+        "revCount": 23362,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/DeterminateSystems/nix-src/3.13.1/019a7931-26b0-77ae-a450-8aa6f7f95774/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/DeterminateSystems/nix-src/3.14.0/019b0159-8907-7fab-a120-9d287c7e6d2e/source.tar.gz"
       },
       "original": {
         "type": "tarball",
@@ -364,11 +319,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1763265660,
+        "lastModified": 1765267181,
-        "narHash": "sha256-Ad9Rd3ZAidrH01xP73S3CjPiyXo7ywZs3uCESjPwUdc=",
+        "narHash": "sha256-d3NBA9zEtBu2JFMnTBqWj7Tmi7R5OikoU2ycrdhQEws=",
         "owner": "Mic92",
         "repo": "nix-index-database",
-        "rev": "469ef53571ea80890c9497952787920c79c1ee6e",
+        "rev": "82befcf7dc77c909b0f2a09f5da910ec95c5b78f",
         "type": "github"
       },
       "original": {
@@ -379,11 +334,11 @@
     },
     "nixos-hardware": {
       "locked": {
-        "lastModified": 1762847253,
+        "lastModified": 1764440730,
-        "narHash": "sha256-BWWnUUT01lPwCWUvS0p6Px5UOBFeXJ8jR+ZdLX8IbrU=",
+        "narHash": "sha256-ZlJTNLUKQRANlLDomuRWLBCH5792x+6XUJ4YdFRjtO4=",
         "owner": "NixOS",
         "repo": "nixos-hardware",
-        "rev": "899dc449bc6428b9ee6b3b8f771ca2b0ef945ab9",
+        "rev": "9154f4569b6cdfd3c595851a6ba51bfaa472d9f3",
         "type": "github"
       },
       "original": {
@@ -440,12 +395,12 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1762482733,
+        "lastModified": 1764611609,
-        "narHash": "sha256-g/da4FzvckvbiZT075Sb1/YDNDr+tGQgh4N8i5ceYMg=",
+        "narHash": "sha256-yU9BNcP0oadUKupw0UKmO9BKDOVIg9NStdJosEbXf8U=",
-        "rev": "e1ebeec86b771e9d387dd02d82ffdc77ac753abc",
+        "rev": "8c29968b3a942f2903f90797f9623737c215737c",
-        "revCount": 890836,
+        "revCount": 905078,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/DeterminateSystems/nixpkgs-weekly/0.1.890836%2Brev-e1ebeec86b771e9d387dd02d82ffdc77ac753abc/019a716b-6ca7-7ecb-96bb-198e1651382f/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/DeterminateSystems/nixpkgs-weekly/0.1.905078%2Brev-8c29968b3a942f2903f90797f9623737c215737c/019add91-3add-7a0d-8a25-9569cbe01efe/source.tar.gz"
       },
       "original": {
         "type": "tarball",
@@ -454,25 +409,23 @@
     },
     "nixpkgs_3": {
       "locked": {
-        "lastModified": 1763283776,
+        "lastModified": 1766309749,
-        "narHash": "sha256-Y7TDFPK4GlqrKrivOcsHG8xSGqQx3A6c+i7novT85Uk=",
+        "narHash": "sha256-3xY8CZ4rSnQ0NqGhMKAy5vgC+2IVK0NoVEzDoOh4DA4=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "50a96edd8d0db6cc8db57dab6bb6d6ee1f3dc49a",
+        "rev": "a6531044f6d0bef691ea18d4d4ce44d0daa6e816",
         "type": "github"
       },
       "original": {
-        "id": "nixpkgs",
+        "owner": "NixOS",
         "ref": "nixos-unstable",
-        "type": "indirect"
+        "repo": "nixpkgs",
+        "type": "github"
       }
     },
-    "pre-commit-hooks-nix": {
+    "pre-commit": {
       "inputs": {
-        "flake-compat": [
+        "flake-compat": "flake-compat_2",
-          "lanzaboote",
-          "flake-compat"
-        ],
         "gitignore": "gitignore",
         "nixpkgs": [
           "lanzaboote",
@@ -480,11 +433,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1763319842,
+        "lastModified": 1765464257,
-        "narHash": "sha256-YG19IyrTdnVn0l3DvcUYm85u3PaqBt6tI6VvolcuHnA=",
+        "narHash": "sha256-dixPWKiHzh80PtD0aLuxYNQ0xP+843dfXG/yM3OzaYQ=",
         "owner": "cachix",
         "repo": "pre-commit-hooks.nix",
-        "rev": "7275fa67fbbb75891c16d9dee7d88e58aea2d761",
+        "rev": "09e45f2598e1a8499c3594fe11ec2943f34fe509",
         "type": "github"
       },
       "original": {
@@ -505,20 +458,24 @@
         "nixpkgs": "nixpkgs_3"
       }
     },
-    "rust-analyzer-src": {
+    "rust-overlay": {
-      "flake": false,
+      "inputs": {
+        "nixpkgs": [
+          "lanzaboote",
+          "nixpkgs"
+        ]
+      },
       "locked": {
-        "lastModified": 1762860488,
+        "lastModified": 1765680428,
-        "narHash": "sha256-rMfWMCOo/pPefM2We0iMBLi2kLBAnYoB9thi4qS7uk4=",
+        "narHash": "sha256-fyPmRof9SZeI14ChPk5rVPOm7ISiiGkwGCunkhM+eUg=",
-        "owner": "rust-lang",
+        "owner": "oxalica",
-        "repo": "rust-analyzer",
+        "repo": "rust-overlay",
-        "rev": "2efc80078029894eec0699f62ec8d5c1a56af763",
+        "rev": "eb3898d8ef143d4bf0f7f2229105fc51c7731b2f",
         "type": "github"
       },
       "original": {
-        "owner": "rust-lang",
+        "owner": "oxalica",
-        "ref": "nightly",
+        "repo": "rust-overlay",
-        "repo": "rust-analyzer",
         "type": "github"
       }
     },

flake.nix

@@ -11,7 +11,7 @@
   };
 
   inputs = {
-    nixpkgs.url = "nixpkgs/nixos-unstable";
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
     nixos-hardware.url = "github:NixOS/nixos-hardware";
     agenix = {
       url = "github:ryantm/agenix";

modules/audio.nix

@@ -17,6 +17,7 @@ let
     ];
   });
   soundcloud_token = builtins.readFile ../secrets/soundcloud_token;
+  bandcamp_token = builtins.readFile ../secrets/bandcamp_token;
 
 in
 {
@@ -98,6 +99,7 @@ in
         auth_token = soundcloud_token;
         explore_songs = 100;
       };
+      bandcamp.identity = bandcamp_token;
     };
   };
 }

modules/gui.nix

@@ -9,16 +9,14 @@ with pkgs;
 
 {
   # Display manager
-  services.xserver.enable = true;
+  services.greetd = {
-  services.xserver.displayManager = {
-    defaultSession = "sway";
-    autoLogin = {
     enable = true;
+    settings = rec {
+      initial_session = {
+        command = "${sway}/bin/sway";
         user = "coolneng";
       };
-    lightdm = {
+      default_session = initial_session;
-      enable = true;
-      greeter.enable = false;
     };
   };
 

modules/networking.nix

@@ -53,7 +53,7 @@ in
     name = "wlan0";
     matchConfig = {
       Name = "wlan0";
-      SSID = "anakinosi";
+      SSID = "anakinosi-5GHz";
     };
     address = [ "192.168.129.3/23" ];
     gateway = [ "192.168.128.1" ];
@@ -97,7 +97,6 @@ in
   };
   systemd.network.networks."wg0" = {
     matchConfig.Name = "wg0";
-    linkConfig.ActivationPolicy = "manual";
     networkConfig = {
       Address = [
         "10.8.0.2/32"
@@ -145,4 +144,15 @@ in
       iptables -t mangle -D nixos-fw-rpfilter -p udp -m udp --dport ${wireguard_port} -j RETURN || true
     '';
   };
+
+  # Enable localhost SSH
+  services.openssh = {
+    enable = true;
+    openFirewall = false;
+    startWhenNeeded = true;
+    settings = {
+      PermitRootLogin = "without-password";
+      PasswordAuthentication = false;
+    };
+  };
 }

modules/periodic.nix

@@ -22,26 +22,13 @@ in
       coreutils
     ];
     script = ''
-      ${pkgs.bash}/bin/bash -c "/home/coolneng/.emacs.d/bin/doom -! upgrade"
+      /home/coolneng/.emacs.d/bin/doom -! upgrade
     '';
     serviceConfig.Type = "oneshot";
     startAt = "22:00:00";
     after = [ "network-online.target" ];
   };
 
-  # Upgrade Neovim plugins weekly
-  systemd.user.services.vim-plug-upgrade = {
-    description = "Upgrade Vim-Plug";
-    path = [
-      git
-      neovim
-    ];
-    script = "${pkgs.neovim}/bin/nvim +PlugUpgrade +PlugUpdate +qa";
-    serviceConfig.Type = "oneshot";
-    startAt = "Wed 18:00:00";
-    after = [ "network-online.target" ];
-  };
-
   # Push password-store changes to git daily
   systemd.user.services.password-store-push = {
     description = "Push password-store changes to git";
@@ -124,17 +111,7 @@ in
     ];
     script = "${pkgs.git}/bin/git -C /home/coolneng/Projects/panacea push";
     serviceConfig.Type = "oneshot";
-    startAt = "14:00:00";
+    startAt = "18:00:00";
-    after = [ "network-online.target" ];
-  };
-
-  # Pull changes from zion daily
-  systemd.user.services.zion-pull = {
-    description = "Pull zion changes to git";
-    path = [ git ];
-    script = "${pkgs.git}/bin/git -C /home/coolneng/Projects/zion pull";
-    serviceConfig.Type = "oneshot";
-    startAt = "10:00:00";
     after = [ "network-online.target" ];
   };
 

modules/software.nix

@@ -64,6 +64,7 @@ in
     nix-direnv
     gnumake
     pre-commit
+    emacs-lsp-booster
     # Rice
     adapta-gtk-theme
     paper-icon-theme
@@ -109,8 +110,8 @@ in
     ## Nix
     nixfmt-rfc-style
     ## Python
-    basedpyright
+    ty
-    black
+    ruff
     ## C/C++
     clang-tools
     ## Go