flake.lock: Update

Flake lock file updates: • Updated input 'nixpkgs': 'github:NixOS/nixpkgs/8913c168d1c56dc49a7718685968f38752171c3b?narHash=sha256-TXnlsVb5Z8HXZ6mZoeOAIwxmvGHp1g4Dw89eLvIwKVI%3D' (2025-10-06) → 'github:NixOS/nixpkgs/c9b6fb798541223bbb396d287d16f43520250518?narHash=sha256-vgPm2xjOmKdZ0xKA6yLXPJpjOtQPHfaZDRtH%2B47XEBo%3D' (2025-10-07)
flake.lock: Update
2025-10-09 11:43:57 +02:00 · 2025-10-07 22:30:58 +02:00
12 changed files with 206 additions and 160 deletions
--- a/.gitattributes
+++ b/.gitattributes
@@ -1,5 +1,4 @@
 secrets/soundcloud_token filter=git-crypt diff=git-crypt
-secrets/bandcamp_token filter=git-crypt diff=git-crypt
 assets/bitwig/activation.bwreg filter=lfs diff=lfs merge=lfs -text
 assets/bitwig/bitwig-studio.deb filter=lfs diff=lfs merge=lfs -text
 assets/bitwig/bitwig.jar filter=lfs diff=lfs merge=lfs -text
--- a/5
+++ b/5
@@ -1,8 +1,5 @@
-DIR=$(HOME)/Projects/panacea
-
 switch:
-	nixos-rebuild switch --target-host root@localhost \
-    --build-host root@localhost --flake path://$(DIR)#panacea
+	sudo nixos-rebuild switch --flake path://$(PWD)#

 update:
 	nix flake update --commit-lock-file
--- a/configuration.nix
+++ b/configuration.nix
@@ -15,12 +15,9 @@ with pkgs;
      "btusb"
      "bluetooth"
    ];
-    # ZFS Arc size and Nuphy keyboard FN settings
    kernelParams = [
      "zfs.zfs_arc_max=8589934592"
      "zfs.zfs_arc_min=1073741824"
-      "hid_apple.fnmode=2"
-      "hid_apple.swap_opt_cmd=1"
    ];
    supportedFilesystems = [ "zfs" ];
    zfs = {
--- a/flake.lock
+++ b/flake.lock
@@ -10,11 +10,11 @@
        "systems": "systems"
      },
      "locked": {
-        "lastModified": 1762618334,
-        "narHash": "sha256-wyT7Pl6tMFbFrs8Lk/TlEs81N6L+VSybPfiIgzU8lbQ=",
+        "lastModified": 1754433428,
+        "narHash": "sha256-NA/FT2hVhKDftbHSwVnoRTFhes62+7dxZbxj5Gxvghs=",
        "owner": "ryantm",
        "repo": "agenix",
-        "rev": "fcdea223397448d35d9b31f798479227e80183f6",
+        "rev": "9edb1787864c4f59ae5074ad498b6272b3ec308d",
        "type": "github"
      },
      "original": {
@@ -25,11 +25,11 @@
    },
    "crane": {
      "locked": {
-        "lastModified": 1769287525,
-        "narHash": "sha256-gABuYA6BzoRMLuPaeO5p7SLrpd4qExgkwEmYaYQY4bM=",
+        "lastModified": 1731098351,
+        "narHash": "sha256-HQkYvKvaLQqNa10KEFGgWHfMAbWBfFp+4cAgkut+NNE=",
        "owner": "ipetkov",
        "repo": "crane",
-        "rev": "0314e365877a85c9e5758f9ea77a9972afbb4c21",
+        "rev": "ef80ead953c1b28316cc3f8613904edc2eb90c28",
        "type": "github"
      },
      "original": {
@@ -80,17 +80,21 @@
      "inputs": {
        "determinate-nixd-aarch64-darwin": "determinate-nixd-aarch64-darwin",
        "determinate-nixd-aarch64-linux": "determinate-nixd-aarch64-linux",
+        "determinate-nixd-x86_64-darwin": [
+          "determinate",
+          "determinate-nixd-aarch64-darwin"
+        ],
        "determinate-nixd-x86_64-linux": "determinate-nixd-x86_64-linux",
        "nix": "nix",
        "nixpkgs": "nixpkgs_2"
      },
      "locked": {
-        "lastModified": 1768964099,
-        "narHash": "sha256-sV1OJYyktJRl7I3HxeBvWTWXjqm2uCTS3gS1p+DLn7c=",
-        "rev": "a5469e9aa3870941320cb92d899b66e141c5a3cd",
-        "revCount": 394,
+        "lastModified": 1757699119,
+        "narHash": "sha256-iOOoVdrkcyk95Xg68TuPeAwpz+v80mgZCqil0jpPZuY=",
+        "rev": "1e16c8f8a44573bb0648c76b6c98352436f5171e",
+        "revCount": 304,
        "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/DeterminateSystems/determinate/3.15.2/019bde7d-0725-73ef-9705-498c50ef6e00/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/DeterminateSystems/determinate/3.11.2/01993f0b-1215-7072-ac1a-f2b27b566115/source.tar.gz"
      },
      "original": {
        "type": "tarball",
@@ -100,37 +104,37 @@
    "determinate-nixd-aarch64-darwin": {
      "flake": false,
      "locked": {
-        "narHash": "sha256-zK2dgNHh/p92rk5jN+Y1LOMn0HEdTsS+7XXwb2g52oM=",
+        "narHash": "sha256-q1tqDvmfjDgLk/wbYf4pRhyHDS94iY85Q79FPBtcv7g=",
        "type": "file",
-        "url": "https://install.determinate.systems/determinate-nixd/tag/v3.15.2/macOS"
+        "url": "https://install.determinate.systems/determinate-nixd/tag/v3.11.2/macOS"
      },
      "original": {
        "type": "file",
-        "url": "https://install.determinate.systems/determinate-nixd/tag/v3.15.2/macOS"
+        "url": "https://install.determinate.systems/determinate-nixd/tag/v3.11.2/macOS"
      }
    },
    "determinate-nixd-aarch64-linux": {
      "flake": false,
      "locked": {
-        "narHash": "sha256-ckvZP0zFcbzLXWYOJUqYXkKBt0b2IZcQEr7YjEVtwOI=",
+        "narHash": "sha256-E1vGfcQ5dqtRG9EDP6eOQWCnCIRB2XFkFBp2C4FgQ8c=",
        "type": "file",
-        "url": "https://install.determinate.systems/determinate-nixd/tag/v3.15.2/aarch64-linux"
+        "url": "https://install.determinate.systems/determinate-nixd/tag/v3.11.2/aarch64-linux"
      },
      "original": {
        "type": "file",
-        "url": "https://install.determinate.systems/determinate-nixd/tag/v3.15.2/aarch64-linux"
+        "url": "https://install.determinate.systems/determinate-nixd/tag/v3.11.2/aarch64-linux"
      }
    },
    "determinate-nixd-x86_64-linux": {
      "flake": false,
      "locked": {
-        "narHash": "sha256-8dLtm8FJrpyBmrNpspJj30/6I5HGEfjjXuFqURcZ8pk=",
+        "narHash": "sha256-GtxtkI0cOC2A30Xw6gCDTN7JxN1zJGh7/eIXr6AlTSA=",
        "type": "file",
-        "url": "https://install.determinate.systems/determinate-nixd/tag/v3.15.2/x86_64-linux"
+        "url": "https://install.determinate.systems/determinate-nixd/tag/v3.11.2/x86_64-linux"
      },
      "original": {
        "type": "file",
-        "url": "https://install.determinate.systems/determinate-nixd/tag/v3.15.2/x86_64-linux"
+        "url": "https://install.determinate.systems/determinate-nixd/tag/v3.11.2/x86_64-linux"
      }
    },
    "flake-compat": {
@@ -152,15 +156,15 @@
    "flake-compat_2": {
      "flake": false,
      "locked": {
-        "lastModified": 1767039857,
-        "narHash": "sha256-vNpUSpF5Nuw8xvDLj2KCwwksIbjua2LZCqhV1LNRDns=",
-        "owner": "NixOS",
+        "lastModified": 1696426674,
+        "narHash": "sha256-kvjfFW7WAETZlt09AgDn1MrtKzP7t90Vf7vypd3OL1U=",
+        "owner": "edolstra",
        "repo": "flake-compat",
-        "rev": "5edf11c44bc78a0d334f6334cdaf7d60d732daab",
+        "rev": "0f9255e01c2351cc7d116c072cb317785dd33b33",
        "type": "github"
      },
      "original": {
-        "owner": "NixOS",
+        "owner": "edolstra",
        "repo": "flake-compat",
        "type": "github"
      }
@@ -186,6 +190,27 @@
        "url": "https://flakehub.com/f/hercules-ci/flake-parts/0.1"
      }
    },
+    "flake-parts_2": {
+      "inputs": {
+        "nixpkgs-lib": [
+          "lanzaboote",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1730504689,
+        "narHash": "sha256-hgmguH29K2fvs9szpq2r3pz2/8cJd2LPS+b4tfNFCwE=",
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "rev": "506278e768c2a08bec68eb62932193e341f55c90",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "type": "github"
+      }
+    },
    "git-hooks-nix": {
      "inputs": {
        "flake-compat": "flake-compat",
@@ -216,7 +241,7 @@
      "inputs": {
        "nixpkgs": [
          "lanzaboote",
-          "pre-commit",
+          "pre-commit-hooks-nix",
          "nixpkgs"
        ]
      },
@@ -258,22 +283,25 @@
    "lanzaboote": {
      "inputs": {
        "crane": "crane",
+        "flake-compat": "flake-compat_2",
+        "flake-parts": "flake-parts_2",
        "nixpkgs": [
          "nixpkgs"
        ],
-        "pre-commit": "pre-commit",
+        "pre-commit-hooks-nix": "pre-commit-hooks-nix",
        "rust-overlay": "rust-overlay"
      },
      "locked": {
-        "lastModified": 1769301952,
-        "narHash": "sha256-XxYnvAPv2kZBTUywng8mvX2OJtq0Dx3FDyta1NmSjRc=",
+        "lastModified": 1737639419,
+        "narHash": "sha256-AEEDktApTEZ5PZXNDkry2YV2k6t0dTgLPEmAZbnigXU=",
        "owner": "nix-community",
        "repo": "lanzaboote",
-        "rev": "4673781e286eeeb35fec07b01cad87d41d94a349",
+        "rev": "a65905a09e2c43ff63be8c0e86a93712361f871e",
        "type": "github"
      },
      "original": {
        "owner": "nix-community",
+        "ref": "v0.4.2",
        "repo": "lanzaboote",
        "type": "github"
      }
@@ -281,8 +309,8 @@
    "local-bitwig": {
      "flake": false,
      "locked": {
-        "lastModified": 1765321606,
-        "narHash": "sha256-WteEWi5GPrGGfzLNTEmgQaH5/DAT/zeZofbBE6D+Po8=",
+        "lastModified": 1756285531,
+        "narHash": "sha256-c4dw/u3mcspNZ/YErD0AWKMI5XeTBTsh5rP1Dzmp2u8=",
        "path": "/home/coolneng/Projects/panacea/assets/bitwig",
        "type": "path"
      },
@@ -300,12 +328,12 @@
        "nixpkgs-regression": "nixpkgs-regression"
      },
      "locked": {
-        "lastModified": 1768960381,
-        "narHash": "sha256-32oMe1y+kwvIJNiJsIvozTuSmDxcwST06i+0ak+L4AU=",
-        "rev": "45ce621408cb8c9a724193d5fe858eb839662db8",
-        "revCount": 24453,
+        "lastModified": 1757694985,
+        "narHash": "sha256-3Ia+y7Hbwnzcuf1hyuVnFtbnSR6ErQeFjemHdVxjCNE=",
+        "rev": "766f43aa6acb1b3578db488c19fbbedf04ed9f24",
+        "revCount": 22340,
        "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/DeterminateSystems/nix-src/3.15.2/019bde75-b4ee-74b2-a812-28dc2ee83d58/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/DeterminateSystems/nix-src/3.11.2/01993ee9-f8e7-7b80-80df-ec0a20a32514/source.tar.gz"
      },
      "original": {
        "type": "tarball",
@@ -319,11 +347,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1765267181,
-        "narHash": "sha256-d3NBA9zEtBu2JFMnTBqWj7Tmi7R5OikoU2ycrdhQEws=",
+        "lastModified": 1759032422,
+        "narHash": "sha256-WZf+FhebP2/1pK2np5xj/NuDjD6fXK2BHnq/tPUN18o=",
        "owner": "Mic92",
        "repo": "nix-index-database",
-        "rev": "82befcf7dc77c909b0f2a09f5da910ec95c5b78f",
+        "rev": "ec7a78cb0e098832d8acac091a4df393259c4839",
        "type": "github"
      },
      "original": {
@@ -334,11 +362,11 @@
    },
    "nixos-hardware": {
      "locked": {
-        "lastModified": 1769302137,
-        "narHash": "sha256-QEDtctEkOsbx8nlFh4yqPEOtr4tif6KTqWwJ37IM2ds=",
+        "lastModified": 1759582739,
+        "narHash": "sha256-spZegilADH0q5OngM86u6NmXxduCNv5eX9vCiUPhOYc=",
        "owner": "NixOS",
        "repo": "nixos-hardware",
-        "rev": "a351494b0e35fd7c0b7a1aae82f0afddf4907aa8",
+        "rev": "3441b5242af7577230a78ffb03542add264179ab",
        "type": "github"
      },
      "original": {
@@ -349,12 +377,12 @@
    },
    "nixpkgs": {
      "locked": {
-        "lastModified": 1761597516,
-        "narHash": "sha256-wxX7u6D2rpkJLWkZ2E932SIvDJW8+ON/0Yy8+a5vsDU=",
-        "rev": "daf6dc47aa4b44791372d6139ab7b25269184d55",
-        "revCount": 811874,
+        "lastModified": 1755922037,
+        "narHash": "sha256-wY1+2JPH0ZZC4BQefoZw/k+3+DowFyfOxv17CN/idKs=",
+        "rev": "b1b3291469652d5a2edb0becc4ef0246fff97a7c",
+        "revCount": 808723,
        "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.2505.811874%2Brev-daf6dc47aa4b44791372d6139ab7b25269184d55/019a3494-3498-707e-9086-1fb81badc7fe/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.2505.808723%2Brev-b1b3291469652d5a2edb0becc4ef0246fff97a7c/0198daf7-011a-7703-95d7-57146e794342/source.tar.gz"
      },
      "original": {
        "type": "tarball",
@@ -393,14 +421,30 @@
        "type": "github"
      }
    },
+    "nixpkgs-stable": {
+      "locked": {
+        "lastModified": 1730741070,
+        "narHash": "sha256-edm8WG19kWozJ/GqyYx2VjW99EdhjKwbY3ZwdlPAAlo=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "d063c1dd113c91ab27959ba540c0d9753409edf3",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-24.05",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
    "nixpkgs_2": {
      "locked": {
-        "lastModified": 1768783163,
-        "narHash": "sha256-tLj4KcRDLakrlpvboTJDKsrp6z2XLwyQ4Zmo+w8KsY4=",
-        "rev": "bde09022887110deb780067364a0818e89258968",
-        "revCount": 930106,
+        "lastModified": 1757034884,
+        "narHash": "sha256-PgLSZDBEWUHpfTRfFyklmiiLBE1i1aGCtz4eRA3POao=",
+        "rev": "ca77296380960cd497a765102eeb1356eb80fed0",
+        "revCount": 856744,
        "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/DeterminateSystems/nixpkgs-weekly/0.1.930106%2Brev-bde09022887110deb780067364a0818e89258968/019bd9ed-5f0b-7074-afb0-8bb5e13a7598/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/DeterminateSystems/nixpkgs-weekly/0.1.856744%2Brev-ca77296380960cd497a765102eeb1356eb80fed0/01992cf9-9347-761a-8963-9cbe43abe2fa/source.tar.gz"
      },
      "original": {
        "type": "tarball",
@@ -409,35 +453,38 @@
    },
    "nixpkgs_3": {
      "locked": {
-        "lastModified": 1770019141,
-        "narHash": "sha256-VKS4ZLNx4PNrABoB0L8KUpc1fE7CLpQXQs985tGfaCU=",
+        "lastModified": 1759831965,
+        "narHash": "sha256-vgPm2xjOmKdZ0xKA6yLXPJpjOtQPHfaZDRtH+47XEBo=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "cb369ef2efd432b3cdf8622b0ffc0a97a02f3137",
+        "rev": "c9b6fb798541223bbb396d287d16f43520250518",
        "type": "github"
      },
      "original": {
-        "owner": "NixOS",
+        "id": "nixpkgs",
        "ref": "nixos-unstable",
-        "repo": "nixpkgs",
-        "type": "github"
+        "type": "indirect"
      }
    },
-    "pre-commit": {
+    "pre-commit-hooks-nix": {
      "inputs": {
-        "flake-compat": "flake-compat_2",
+        "flake-compat": [
+          "lanzaboote",
+          "flake-compat"
+        ],
        "gitignore": "gitignore",
        "nixpkgs": [
          "lanzaboote",
          "nixpkgs"
-        ]
+        ],
+        "nixpkgs-stable": "nixpkgs-stable"
      },
      "locked": {
-        "lastModified": 1769069492,
-        "narHash": "sha256-Efs3VUPelRduf3PpfPP2ovEB4CXT7vHf8W+xc49RL/U=",
+        "lastModified": 1731363552,
+        "narHash": "sha256-vFta1uHnD29VUY4HJOO/D6p6rxyObnf+InnSMT4jlMU=",
        "owner": "cachix",
        "repo": "pre-commit-hooks.nix",
-        "rev": "a1ef738813b15cf8ec759bdff5761b027e3e1d23",
+        "rev": "cd1af27aa85026ac759d5d3fccf650abe7e1bbf0",
        "type": "github"
      },
      "original": {
@@ -466,11 +513,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1769222645,
-        "narHash": "sha256-gu6oZ86zLudBZMq8LL1qdtYt/S69GV5keQVXdvBrVSU=",
+        "lastModified": 1731897198,
+        "narHash": "sha256-Ou7vLETSKwmE/HRQz4cImXXJBr/k9gp4J4z/PF8LzTE=",
        "owner": "oxalica",
        "repo": "rust-overlay",
-        "rev": "22da29e7f3d8cff75009cbbcf992c7cb66920cfd",
+        "rev": "0be641045af6d8666c11c2c40e45ffc9667839b5",
        "type": "github"
      },
      "original": {
--- a/flake.nix
+++ b/flake.nix
@@ -11,7 +11,7 @@
  };

  inputs = {
-    nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
+    nixpkgs.url = "nixpkgs/nixos-unstable";
    nixos-hardware.url = "github:NixOS/nixos-hardware";
    agenix = {
      url = "github:ryantm/agenix";
@@ -26,7 +26,7 @@
      inputs.nixpkgs.follows = "nixpkgs";
    };
    lanzaboote = {
-      url = "github:nix-community/lanzaboote";
+      url = "github:nix-community/lanzaboote/v0.4.2";
      inputs.nixpkgs.follows = "nixpkgs";
    };
    determinate.url = "https://flakehub.com/f/DeterminateSystems/determinate/*";
--- a/modules/audio.nix
+++ b/modules/audio.nix
@@ -17,7 +17,6 @@ let
    ];
  });
  soundcloud_token = builtins.readFile ../secrets/soundcloud_token;
-  bandcamp_token = builtins.readFile ../secrets/bandcamp_token;

 in
 {
@@ -53,53 +52,47 @@ in
      mopidy-somafm
      mopidy-soundcloud
    ];
-    settings = {
-      audio.output = "pulsesink server=127.0.0.1";
+    configuration = ''
+      [audio]
+      output = pulsesink server=127.0.0.1

-      local = {
-        media_dir = "/home/coolneng/Music";
-        directories = ''
-          Album Artists       local:directory?type=artist&role=albumartist
-          Albums              local:directory?type=album
-          Artists             local:directory?type=artist
-          Genres              local:directory?type=genre
-        '';
-        excluded_file_extensions = ''
-          .directory
-          .html
-          .jpeg
-          .jpg
-          .log
-          .nfo
-          .png
-          .txt
-        '';
-        scan_timeout = 3000;
-      };
+      [local]
+      media_dir = /home/coolneng/Music
+      directories =
+        Album Artists       local:directory?type=artist&role=albumartist
+        Albums              local:directory?type=album
+        Artists             local:directory?type=artist
+        Genres              local:directory?type=genre
+      excluded_file_extensions =
+        .directory
+        .html
+        .jpeg
+        .jpg
+        .log
+        .nfo
+        .png
+        .txt
+      scan_timeout = 3000

-      mpd.zeroconf = "";
+      [mpd]
+      zeroconf = ""

-      m3u = {
-        playlists_dir = "/home/coolneng/.config/mpd/playlists";
-        base_dir = "/home/coolneng/Music";
-      };
+      [m3u]
+      playlists_dir = /home/coolneng/.config/mpd/playlists
+      base_dir = /home/coolneng/Music

-      youtube = {
-        search_results = 50;
-        youtube_dl_package = "yt_dlp";
-        musicapi_enabled = true;
-      };
+      [youtube]
+      search_results = 50
+      youtube_dl_package = yt_dlp
+      musicapi_enabled = true

-      somafm = {
-        encoding = "aac";
-        quality = "highest";
-      };
+      [somafm]
+      encoding = aac
+      quality = highest

-      soundcloud = {
-        auth_token = soundcloud_token;
-        explore_songs = 100;
-      };
-      bandcamp.identity = bandcamp_token;
-    };
+      [soundcloud]
+      auth_token = ${soundcloud_token}
+      explore_songs = 100
+    '';
  };
 }
--- a/modules/gui.nix
+++ b/modules/gui.nix
@@ -9,14 +9,16 @@ with pkgs;

 {
  # Display manager
-  services.greetd = {
-    enable = true;
-    settings = rec {
-      initial_session = {
-        command = "${sway}/bin/sway";
-        user = "coolneng";
-      };
-      default_session = initial_session;
+  services.xserver.enable = true;
+  services.xserver.displayManager = {
+    defaultSession = "sway";
+    autoLogin = {
+      enable = true;
+      user = "coolneng";
+    };
+    lightdm = {
+      enable = true;
+      greeter.enable = false;
    };
  };

@@ -39,7 +41,6 @@ with pkgs;
      kitty
      qt5.qtwayland
      glib
-      udiskie
    ];
    extraSessionCommands = ''
      export MOZ_ENABLE_WAYLAND=1
--- a/modules/latest-zfs-kernel.nix
+++ b/modules/latest-zfs-kernel.nix
@@ -6,7 +6,7 @@
 }:

 let
-  isUnstable = config.boot.zfs.package == pkgs.zfs_unstable;
+  isUnstable = config.boot.zfs.package == pkgs.zfsUnstable;
  zfsCompatibleKernelPackages = lib.filterAttrs (
    name: kernelPackages:
    (builtins.match "linux_[0-9]+_[0-9]+" name) != null
--- a/modules/networking.nix
+++ b/modules/networking.nix
@@ -32,10 +32,10 @@ in
  # Enable mDNS
  services.resolved = {
    enable = true;
-    settings.Resolve = {
-      MulticastDNS = "yes";
-      LLMNR = "false";
-    };
+    llmnr = "false";
+    extraConfig = ''
+      MulticastDNS=yes
+    '';
  };

  # Prioritize ethernet over WiFi
@@ -53,7 +53,7 @@ in
    name = "wlan0";
    matchConfig = {
      Name = "wlan0";
-      SSID = "anakinosi-5GHz";
+      SSID = "anakinosi";
    };
    address = [ "192.168.129.3/23" ];
    gateway = [ "192.168.128.1" ];
@@ -97,6 +97,7 @@ in
  };
  systemd.network.networks."wg0" = {
    matchConfig.Name = "wg0";
+    linkConfig.ActivationPolicy = "manual";
    networkConfig = {
      Address = [
        "10.8.0.2/32"
@@ -144,15 +145,4 @@ in
      iptables -t mangle -D nixos-fw-rpfilter -p udp -m udp --dport ${wireguard_port} -j RETURN || true
    '';
  };
-
-  # Enable localhost SSH
-  services.openssh = {
-    enable = true;
-    openFirewall = false;
-    startWhenNeeded = true;
-    settings = {
-      PermitRootLogin = "without-password";
-      PasswordAuthentication = false;
-    };
-  };
 }
--- a/modules/periodic.nix
+++ b/modules/periodic.nix
@@ -22,20 +22,33 @@ in
      coreutils
    ];
    script = ''
-      /home/coolneng/.emacs.d/bin/doom -! upgrade --aot
+      ${pkgs.bash}/bin/bash -c "/home/coolneng/.emacs.d/bin/doom -! upgrade"
    '';
    serviceConfig.Type = "oneshot";
    startAt = "22:00:00";
    after = [ "network-online.target" ];
  };

+  # Upgrade Neovim plugins weekly
+  systemd.user.services.vim-plug-upgrade = {
+    description = "Upgrade Vim-Plug";
+    path = [
+      git
+      neovim
+    ];
+    script = "${pkgs.neovim}/bin/nvim +PlugUpgrade +PlugUpdate +qa";
+    serviceConfig.Type = "oneshot";
+    startAt = "Wed 18:00:00";
+    after = [ "network-online.target" ];
+  };
+
  # Push password-store changes to git daily
  systemd.user.services.password-store-push = {
    description = "Push password-store changes to git";
    path = [
      pass-wayland
      git
-      pass-git-helper
+      gitAndTools.pass-git-helper
    ];
    script = "${pkgs.pass-wayland}/bin/pass git push";
    serviceConfig.Type = "oneshot";
@@ -107,11 +120,21 @@ in
    path = [
      pass-wayland
      git
-      pass-git-helper
+      gitAndTools.pass-git-helper
    ];
    script = "${pkgs.git}/bin/git -C /home/coolneng/Projects/panacea push";
    serviceConfig.Type = "oneshot";
-    startAt = "18:00:00";
+    startAt = "14:00:00";
+    after = [ "network-online.target" ];
+  };
+
+  # Pull changes from zion daily
+  systemd.user.services.zion-pull = {
+    description = "Pull zion changes to git";
+    path = [ git ];
+    script = "${pkgs.git}/bin/git -C /home/coolneng/Projects/zion pull";
+    serviceConfig.Type = "oneshot";
+    startAt = "10:00:00";
    after = [ "network-online.target" ];
  };

--- a/modules/software.nix
+++ b/modules/software.nix
@@ -10,7 +10,8 @@ with pkgs;

 let
  custom-mpv = (
-    mpv.override {
+    mpv-unwrapped.wrapper {
+      mpv = mpv-unwrapped;
      scripts = with mpvScripts; [
        sponsorblock-minimal
        mpv-cheatsheet
@@ -35,7 +36,7 @@ in
    gnupg
    pass-wayland
    passff-host
-    pass-git-helper
+    gitAndTools.pass-git-helper
    inputs.agenix.packages.${config.nixpkgs.localSystem.system}.default
    git-crypt
    git-lfs
@@ -62,15 +63,14 @@ in
    direnv
    nix-direnv
    gnumake
-    pre-commit
-    emacs-lsp-booster
+    gitAndTools.pre-commit
    # Rice
    adapta-gtk-theme
    paper-icon-theme
    # Audio
    mopidy
    ncmpcpp
-    mpc
+    mpc_cli
    pulsemixer
    easyeffects
    patched-bitwig
@@ -92,7 +92,6 @@ in
    ffmpeg
    calibre
    beets
-    playerctl
    # File management
    zip
    unzip
@@ -108,10 +107,10 @@ in
    shellcheck
    shfmt
    ## Nix
-    nixfmt
+    nixfmt-rfc-style
    ## Python
-    ty
-    ruff
+    basedpyright
+    black
    ## C/C++
    clang-tools
    ## Go
--- a/secrets/bandcamp_token
+++ b/secrets/bandcamp_token