.

packages.nix

@@ -0,0 +1,248 @@
+{ config, pkgs, ... }:
+{
+  environment.systemPackages = with pkgs; [
+    bat
+    black
+    blade-formatter
+    cmake
+    cifs-utils
+    coreutils
+    bluetuith
+    bluez
+    bluez-tools
+    cargo
+    clang
+    clang-tools
+    clevis
+    cliphist
+    distrobox
+    dos2unix
+    dnsutils
+    dunst
+    (import ./templates/extract.sh.nix { inherit pkgs; })
+    eza
+    fd
+    ffmpeg
+    fira-code-symbols
+    fish
+    fractal
+    freetube
+    fuzzel
+    fzf
+    git
+    gh
+    ghostty
+    go
+    google-chrome
+    gopass
+    gopass-jsonapi
+    gopls
+    hyprpicker
+    htmx-lsp2
+    imagemagick
+    inkscape
+    pavucontrol
+    pciutils
+    poppler
+    jetbrains.datagrip
+    jq
+    lazygit
+    (pkgs.writeShellScriptBin "lf" ''
+      cd_file="/tmp/lf-lastdir-$$"
+
+      ${pkgs.lf}/bin/lf "$@"
+
+      if [ -f "$cd_file" ]; then
+        cd "$(cat "$cd_file")"
+        rm "$cd_file"
+      fi
+    '')
+    libreoffice
+    libvirt
+    linux-firmware
+    lldb
+    lua-language-server
+    luarocks
+    lutris
+    mpv
+    nerd-fonts.monaspace
+    niri
+    niri-scratchpad
+    nixd
+    nixfmt
+    (wrapOBS {
+      plugins = with obs-studio-plugins; [
+        wlrobs
+        obs-pipewire-audio-capture
+      ];
+    })
+    # ols
+    php
+    php84Packages.composer
+    php84Packages.php-cs-fixer
+    phpactor
+    podman-compose
+    podman-tui
+    prettierd
+    playerctl
+    qemu_full
+    qmk
+    quickshell
+    resvg
+    ripgrep
+    ripdrag
+    rust-analyzer
+    sshfs
+    starship
+    step-cli
+    stow
+    stylua
+    sops
+    swayimg
+    texlab
+    texlive.combined.scheme-full
+    tmux
+    thunderbird
+    tor-browser
+    ungoogled-chromium
+    unzip
+    virt-manager
+    virt-viewer
+    vscode-langservers-extracted
+    watchexec
+    wayland
+    wgsl-analyzer
+    # wineWowPackages.waylandFull
+    wineWow64Packages.waylandFull
+    winetricks
+    wl-clipboard
+    xxd
+    xdg-user-dirs
+    xwayland-satellite
+    yazi
+    zathura
+    # zig_0_15
+    # zls_0_15
+    zoxide
+  ];
+
+  hardware.keyboard.qmk.enable = true;
+
+  programs = {
+    fish.enable = true;
+    virt-manager.enable = true;
+    direnv.enable = true;
+    gnupg.agent = {
+      enable = true;
+      enableSSHSupport = true;
+    };
+    nix-ld.enable = true;
+    niri.enable = true;
+    dconf.enable = true;
+    thunar.enable = true;
+  };
+
+  virtualisation.containers.enable = true;
+  virtualisation.podman = {
+    enable = true;
+    dockerCompat = true;
+    # rootless = {
+    #   enable = true;
+    #   setSocketVariable = true;
+    # };
+    defaultNetwork.settings.dns_enabled = true;
+    # storageDriver = "btrfs";
+  };
+
+  virtualisation.spiceUSBRedirection.enable = true;
+  virtualisation.libvirtd = {
+    enable = true;
+    extraConfig = ''
+      user="user"
+    '';
+    onBoot = "ignore";
+    onShutdown = "shutdown";
+    qemu = {
+      package = pkgs.qemu_full;
+      verbatimConfig = ''
+        cgroup_device_acl = [
+        "/dev/null", "/dev/full", "/dev/zero",
+        "/dev/random", "/dev/urandom", "/dev/ptmx",
+        "/dev/kvm", "/dev/kvmfr0"
+        ]
+      '';
+      runAsRoot = true;
+      swtpm.enable = true;
+    };
+  };
+
+  programs.steam = {
+    enable = true;
+    remotePlay.openFirewall = true;
+    dedicatedServer.openFirewall = true;
+    localNetworkGameTransfers.openFirewall = true;
+  };
+
+  programs.firejail = {
+    enable = true;
+    wrappedBinaries = {
+      chromium-sandbox = {
+        executable = "${pkgs.chromium}/bin/chromium";
+        profile = "${pkgs.firejail}/etc/firejail/chromium-browser.profile";
+        extraArgs = [
+          "--netns=wg0ns"
+          "--whitelist=/home/user/downloads"
+          "--env=TGK_THEME=Adwaita:dark"
+          "--dns=10.2.0.1"
+          "--private=/data/sandbox/chromium"
+        ];
+      };
+      google-chrome-stable = {
+        # executable = "${chrome-argumented}/bin/google-chrome-stable";
+        executable = "${pkgs.google-chrome}/bin/google-chrome-stable";
+        profile = "${pkgs.firejail}/etc/firejail/google-chrome-stable.profile";
+        extraArgs = [
+          "--env=GTK_THEME=Adwaita:dark"
+          "--netns=wg-br0ns"
+          "--dns=10.2.0.1"
+          "--whitelist=/home/user/downloads"
+          "--whitelist=/home/user/pictures"
+        ];
+      };
+      tor-browser = {
+        executable = "${pkgs.tor-browser}/bin/tor-browser";
+        profile = "${pkgs.firejail}/etc/firejail/tor-browser-en-us.profile";
+        extraArgs = [
+          "--netns=wg0ns"
+          "--dns=1.1.1.1"
+        ];
+      };
+      freetube = {
+        executable = "${pkgs.freetube}/bin/freetube";
+        profile = "${pkgs.firejail}/etc/firejail/freetube.profile";
+        extraArgs = [
+          "--netns=wg0ns"
+          "--dns=1.1.1.1"
+        ];
+      };
+    };
+  };
+
+  # services.ollama = {
+  #   enable = true;
+  #   package = pkgs.ollama-cuda;
+  #   home = "/data/ollama";
+  #   user = "ollama";
+  #   group = "user";
+  #   loadModels = [
+  #     "llama3"
+  #   ];
+  # };
+  # services.open-webui = {
+  #   enable = true;
+  #   port = 11347;
+  #   environment = {
+  #     OLLAMA_API_BASE_URL = "${config.services.ollama.host}:${toString config.services.ollama.port}";
+  #   };
+  # };
+}