fix: warning for i3wm - xdg-portal

修正简体中文显示为异体（日文）字形问题

.github/FUNDING.yml

@@ -0,0 +1,2 @@
+patreon: ryan4yin
+custom:  ['https://buymeacoffee.com/ryan4yin', 'https://afdian.net/a/ryan4yin']

.github/workflows/mirror_to_gitee.yml

@@ -0,0 +1,29 @@
+name: Mirror this repo to Gitee
+on:
+  workflow_dispatch: {}
+  push: {}
+jobs:
+  mirror:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
+      - name: Mirror repo to Gitee
+        id: mirror-to-gitee
+        shell: bash
+        env:
+          INPUT_SSH_PRIVATE_KEY: ${{ secrets.SSH_PRIVATE_KEY_GITEE_MIRROR }}
+          INPUT_TARGET_REPO_URL: git@gitee.com:ryan_yin/nix-config.git
+        run: |
+          set -eu
+
+          mkdir -p ~/.ssh
+          echo "$INPUT_SSH_PRIVATE_KEY" > ~/.ssh/id_rsa
+          chmod 600 ~/.ssh/id_rsa
+
+          export GIT_SSH_COMMAND="ssh -v -i ~/.ssh/id_rsa -o StrictHostKeyChecking=no"
+          git remote add mirror "$INPUT_TARGET_REPO_URL"
+          git push --tags --force --prune mirror "refs/remotes/origin/*:refs/heads/*"
+

Makefile

@@ -22,9 +22,14 @@ i3-debug:
 hypr-debug:
 	nixos-rebuild switch --flake .#ai_hyprland --use-remote-sudo --show-trace --verbose
 
-update:
+up:
 	nix flake update
 
+# Update specific input
+# usage: make upp i=wallpapers
+upp:
+	nix flake lock --update-input $(i)
+
 history:
 	nix profile history --profile /nix/var/nix/profiles/system
 
@@ -35,11 +40,6 @@ gc:
 	# garbage collect all unused nix store entries
 	sudo nix store gc --debug
 
-# adjust brightness(x11)
-# usage: make bright b=0.9
-bright:
-	xrandr --output DP-2 --brightness $(b)
-
 ############################################################################
 #
 #  Darwin related commands, harmonica is my macbook pro's hostname
@@ -64,45 +64,70 @@ ha-debug: darwin-set-proxy
 #
 ############################################################################
 
-
 add-idols-ssh-key:
 	ssh-add ~/.ssh/ai-idols
 
-aqua: add-idols-ssh-key
-	nixos-rebuild --flake .#aquamarine --target-host aquamarine --build-host aquamarine switch --use-remote-sudo
+idols: add-idols-ssh-key
+	colmena apply --on '@dist-build'
 
-aqua-debug: add-idols-ssh-key
-	nixos-rebuild --flake .#aquamarine --target-host aquamarine --build-host aquamarine switch --use-remote-sudo --show-trace --verbose
+aqua:
+	colmena apply --on '@aqua'
 
-ruby: add-idols-ssh-key
-	nixos-rebuild --flake .#ruby --target-host ruby --build-host ruby switch --use-remote-sudo
+ruby:
+	colmena apply --on '@ruby'
 
-ruby-debug: add-idols-ssh-key
-	nixos-rebuild --flake .#ruby --target-host ruby --build-host ruby switch --use-remote-sudo --show-trace --verbose
+kana:
+	colmena apply --on '@kana'
 
-kana: add-idols-ssh-key
-	nixos-rebuild --flake .#kana --target-host kana --build-host kana switch --use-remote-sudo
-
-kana-debug: add-idols-ssh-key
-	nixos-rebuild --flake .#kana --target-host kana --build-host kana switch --use-remote-sudo --show-trace --verbose
-
-idols: aqua ruby kana
-
-idols-debug: aqua-debug ruby-debug kana-debug
+idols-debug: add-idols-ssh-key
+	colmena apply --on '@dist-build' --verbose --show-trace
 
 # only used once to setup the virtual machines
 idols-image:
 	# take image for idols, and upload the image to proxmox nodes.
 	nom build .#aquamarine
-	scp result/vzdump-qemu-*.vma.zst root@gtr5:/var/lib/vz/dump
+	scp result root@gtr5:/var/lib/vz/dump/vzdump-qemu-aquamarine.vma.zst
 
 	nom build .#ruby
-	scp result/vzdump-qemu-*.vma.zst root@s500plus:/var/lib/vz/dump
+	scp result root@s500plus:/var/lib/vz/dump/vzdump-qemu-ruby.vma.zst
 
 	nom build .#kana
-	scp result/vzdump-qemu-*.vma.zst root@um560:/var/lib/vz/dump
+	scp result root@um560:/var/lib/vz/dump/vzdump-qemu-kana.vma.zst
 
 
+############################################################################
+#
+#	RISC-V related commands
+#		
+############################################################################
+
+roll: add-idols-ssh-key
+	colmena apply --on '@riscv' 
+
+roll-debug: add-idols-ssh-key
+	colmena apply --on '@dist-build' --verbose --show-trace
+
+nozomi:
+	colmena apply --on '@nozomi'
+
+yukina:
+	colmena apply --on '@yukina'
+
+############################################################################
+#
+# Aarch64 related commands
+#
+############################################################################
+
+aarch:
+	colmena apply --on '@aarch'
+
+suzu:
+	colmena apply --on '@suzu'
+
+suzu-debug:
+	colmena apply --on '@suzu' --verbose --show-trace
+
 ############################################################################
 #
 #  Misc, other useful commands

README.md

@@ -27,69 +27,58 @@ Nix allows for easy-to-manage, collaborative, reproducible deployments. This mea
 ## Components
 
 |                             | NixOS(Wayland)                                                                                 | NixOS(Xorg)                                             |
-| --------------------------- | :---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------: | :---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------: |
+| --------------------------- | :--------------------------------------------------------------------------------------------- | :------------------------------------------------------ |
 | **Window Manager**          | [Hyprland][Hyprland]                                                                           | [i3][i3]                                                |
 | **Terminal Emulator**       | [Kitty][Kitty]                                                                                 | [Kitty][Kitty]                                          |
 | **Bar**                     | [Waybar][Waybar]                                                                               | [i3block][i3block]                                      |
-| **Application Launcher** | [wofi][wofi] | [rofi][rofi] |
+| **Application Launcher**    | [anyrun][anyrun]                                                                                   | [rofi][rofi]                                            |
 | **Notification Daemon**     | [Mako][Mako]                                                                                   | [Dunst][Dunst]                                          |
 | **Display Manager**         | [GDM][GDM]                                                                                     | [GDM][GDM]                                              |
+| **Color Scheme**            | [Catppuccin][Catppuccin]                                                                       | [Catppuccin][Catppuccin]                                |
 | **network management tool** | [NetworkManager][NetworkManager]                                                               | [NetworkManager][NetworkManager]                        |
 | **Input method framework**  | [Fcitx5][Fcitx5]                                                                               | [Fcitx5][Fcitx5]                                        |
 | **System resource monitor** | [Btop][Btop]                                                                                   | [Btop][Btop]                                            |
-| **File Manager** | [thunar][thunar] | [thunar][thunar] |
-| **Shell** | [Nushell][Nushell] | [Nushell][Nushell] |
+| **File Manager**            | [ranger][ranger] + [thunar][thunar]                                                            | [ranger][ranger] + [thunar][thunar]                     |
+| **Shell**                   | [Nushell][Nushell] + [Starship][Starship]                                                      | [Nushell][Nushell] + [Starship][Starship]               |
 | **Music Player**            | [mpd][mpd], [ncmpcpp][ncmpcpp], [mpc][mpc], [Netease-cloud-music-gtk][netease-cloud-music-gtk] | [Netease-cloud-music-gtk][netease-cloud-music-gtk]      |
 | **Media Player**            | [mpv][mpv]                                                                                     | [mpv][mpv]                                              |
 | **Text Editor**             | [Neovim][Neovim]                                                                               | [Neovim][Neovim]                                        |
 | **Fonts**                   | [Nerd fonts][Nerd fonts]                                                                       | [Nerd fonts][Nerd fonts]                                |
-| **Image Viewer** | [imv][imv] | [feh][feh] |
+| **Image Viewer**            | [imv][imv]                                                                                     | [imv][imv]                                              |
 | **Screenshot Software**     | [grim][grim]                                                                                   | [flameshot](https://github.com/flameshot-org/flameshot) |
 | **Screen Recording**        | [OBS][OBS]                                                                                     | [OBS][OBS]                                              |
 
+Wallpapers: https://github.com/ryan4yin/wallpapers
+
 ## Hyprland + AstroNvim
 
-![](./_img/hyprland_2023-07-26.webp)
+![](./_img/hyprland_2023-07-29_1.webp)
 
-![](./_img/hyprland_2023-07-27.webp)
+![](./_img/hyprland_2023-07-29_2.webp)
 
 ## I3 + AstroNvim
 
-![](/_img/astronvim_2023-07-13_00-39.webp)
+![](./_img/i3_2023-07-29_1.webp)
+![](./_img/i3_2023-07-29_2.webp)
+
+## Neovim
+
+See [./home/base/desktop/neovim](./home/base/desktop/neovim) for details.
 
 ## Hosts
 
-```shell
-› tree hosts
-hosts
-├── harmonica  # my MacBook Pro 2020 13-inch, for work.
-└── idols
-    ├── ai         # my main computer, with NixOS + I5-13600KF + RTX 4090 GPU, for gaming & daily use.
-    ├── aquamarine # my NixOS virtual machine with R9-5900HX(8C16T), for distributed building & testing.
-    ├── kana       # yet another NixOS vm on another physical machine with R5-5625U(6C12T).
-    └── ruby       # another NixOS vm on another physical machine with R7-5825U(8C16T).
-```
+See [./hosts](./hosts) for details.
+
+
+## Secrets Management
+
+See [./secrets](./secrets) for details.
 
 ## How to Deploy this Flake?
 
-> Note: you should NOT deploy this flake directly on your machine, it contains my hardware information and personal information which is not suitable for you. You may use this repo as a reference to build your own configuration.
+> :red_circle: **IMPORTANT**: **You should NOT deploy this flake directly on your machine:exclamation: It will not succeed.** this flake contains my hardware configuration(such as [hardware-configuration.nix](hosts/idols/ai/hardware-configuration.nix), [cifs-mount.nix](https://github.com/ryan4yin/nix-config/blob/v0.1.1/hosts/idols/ai/cifs-mount.nix), [Nvidia Support](https://github.com/ryan4yin/nix-config/blob/v0.1.1/hosts/idols/ai/default.nix#L77-L91), etc.) which is not suitable for your hardware, and my private secrets repository [ryan4yin/nix-secrets](https://github.com/ryan4yin/nix-config/tree/main/secrets) that only I have access to. You may use this repo as a reference to build your own configuration.
 
-After installing NixOS with `nix-command` & `flake` enabled, follow the steps below to deploy this flake.
-
-For NixOS, use the following commands:
-
-```bash
-# deploy one of the configuration based on the hostname
-sudo nixos-rebuild switch --flake .#ai_i3
-
-# we can also deploy using `make`, which is defined in Makefile
-make i3
-
-# or we can deploy with details
-make i3-debug
-```
-
-For MacOS, use the following commands:
+For MacOS:
 
 ```bash
 # deploy the darwin configuration(harmonicia)
@@ -99,6 +88,26 @@ make ha
 make ha-debug
 ```
 
+For NixOS:
+
+> Need to restart the machine when switching between `wayland` and `xorg`.
+
+```bash
+# deploy one of the configuration based on the hostname
+sudo nixos-rebuild switch --flake .#ai_i3
+# sudo nixos-rebuild switch --flake .#ai_hyprland
+
+# we can also deploy using `make`, which is defined in Makefile
+make i3    # deploy my pc with i3 window manager
+# make hypr  # deploy my pc with hyprland compositor
+
+# or we can deploy with details
+make i3-debug
+# make hypr-debug
+```
+
+To deploy this flake from NixOS's official ISO image(purest installation method), please refer to [ryan4yin/nix-config/nixos-install](https://github.com/ryan4yin/nix-config/tree/nixos-install)
+
 ## Install Apps from Flatpak
 
 We can install apps from flathub, which has a lot of apps that are not supported well in nixpkgs.
@@ -139,15 +148,12 @@ Once the virtual machine `aquamarine` is created, we can deploy updates to it wi
 # 1. add the ssh key to ssh-agent
 ssh-add ~/.ssh/ai-idols
 
-# 2. deploy the configuration to the remote host, using the ssh key we added in step 1
-#    and the username defaults to `$USER`, it's `ryan` in my case.
-nixos-rebuild --flake .#aquamarine --target-host aquamarine --build-host aquamarine switch --use-remote-sudo --verbose
-
-# or we can replace the command above with the following command, which is defined in Makefile
-make aqua
+# 2. deploy the configuration to all the remote host with tag `@dist-build`
+# using the ssh key we added in step 1
+colmena apply --on '@dist-build' --show-trace
 ```
 
-The commands above will build & deploy the configuration to `aquamarine`, the build process will be executed on `aquamarine` too, and the `--use-remote-sudo` option indicates that we will use `sudo` on the remote host.
+If you're not familiar with remote deployment, please read this tutorial first: [Remote Deployment - NixOS & Flakes Book](https://nixos-and-flakes.thiscute.world/best-practices/remote-deployment)
 
 ## References
 
@@ -159,14 +165,16 @@ Other dotfiles that inspired me:
   - [xddxdd/nixos-config](https://github.com/xddxdd/nixos-config)
   - [bobbbay/dotfiles](https://github.com/bobbbay/dotfiles)
   - [gytis-ivaskevicius/nixfiles](https://github.com/gytis-ivaskevicius/nixfiles)
-  - [fufexan/dotfiles](https://github.com/fufexan/dotfiles)
   - [davidtwco/veritas](https://github.com/davidtwco/veritas)
   - [gvolpe/nix-config](https://github.com/gvolpe/nix-config)
   - [Ruixi-rebirth/flakes](https://github.com/Ruixi-rebirth/flakes)
-- Hyprland
-  - [HeinzDev/Hyprland-dotfiles](https://github.com/HeinzDev/Hyprland-dotfiles)
-  - [notwidow/hyprland](https://github.com/notwidow/hyprland)
+  - [fufexan/dotfiles](https://github.com/fufexan/dotfiles): gtk theme, xdg, git, media, anyrun, etc.
+- Hyprland(wayland)
+  - [notwidow/hyprland](https://github.com/notwidow/hyprland): This is where I start my hyprland journey.
+  - [HeinzDev/Hyprland-dotfiles](https://github.com/HeinzDev/Hyprland-dotfiles): Refer to the waybar configuration here.
+  - [linuxmobile/kaku](https://github.com/linuxmobile/kaku)
 - I3 Window Manager
+  - [endeavouros-i3wm-setup](https://github.com/endeavouros-team/endeavouros-i3wm-setup): I started using i3 here, and my i3 configuration is also based on it, but made a lot of changes.
   - [denisse-dev/dotfiles](https://github.com/denisse-dev/dotfiles)
 - Neovim/AstroNvim
   - [maxbrunet/dotfiles](https://github.com/maxbrunet/dotfiles): astronvim with nix flakes.
@@ -177,10 +185,11 @@ Other dotfiles that inspired me:
 [i3]: https://github.com/i3/i3
 [Kitty]: https://github.com/kovidgoyal/kitty
 [Nushell]: https://github.com/nushell/nushell
+[Starship]: https://github.com/starship/starship
 [Waybar]: https://github.com/Alexays/Waybar
 [i3block]: https://github.com/vivien/i3blocks
 [rofi]: https://github.com/davatorium/rofi
-[wofi]: https://hg.sr.ht/~scoopta/wofi
+[anyrun]: https://github.com/Kirottu/anyrun
 [Dunst]: https://github.com/dunst-project/dunst
 [Fcitx5]: https://github.com/fcitx/fcitx5
 [Btop]: https://github.com/aristocratos/btop
@@ -189,7 +198,6 @@ Other dotfiles that inspired me:
 [AstroNvim]: https://github.com/AstroNvim/AstroNvim
 [flameshot]: https://github.com/flameshot-org/flameshot
 [grim]: https://github.com/emersion/grim
-[feh]: https://github.com/derf/feh
 [imv]: https://sr.ht/~exec64/imv/
 [OBS]: https://obsproject.com
 [Mako]: https://github.com/emersion/mako
@@ -203,3 +211,5 @@ Other dotfiles that inspired me:
 [wl-clipboard]: https://github.com/bugaevc/wl-clipboard
 [GDM]: https://wiki.archlinux.org/title/GDM
 [thunar]: https://gitlab.xfce.org/xfce/thunar
+[ranger]: https://github.com/ranger/ranger
+[Catppuccin]: https://github.com/catppuccin/catppuccin

flake.nix

@@ -8,82 +8,6 @@
   #
   ##################################################################################################################
 
-  # the nixConfig here only affects the flake itself, not the system configuration!
-  nixConfig = {
-    experimental-features = ["nix-command" "flakes"];
-
-    substituters = [
-      # replace official cache with a mirror located in China
-      "https://mirrors.ustc.edu.cn/nix-channels/store"
-      "https://cache.nixos.org"
-    ];
-
-    # nix community's cache server
-    extra-substituters = [
-      "https://nix-community.cachix.org"
-      "https://nixpkgs-wayland.cachix.org"
-    ];
-    extra-trusted-public-keys = [
-      "cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY="
-      "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
-      "nixpkgs-wayland.cachix.org-1:3lwxaILxMRkVhehr5StQprHdEo4IrE8sRho9R9HOLYA="
-    ];
-  };
-
-  # This is the standard format for flake.nix. `inputs` are the dependencies of the flake,
-  # Each item in `inputs` will be passed as a parameter to the `outputs` function after being pulled and built.
-  inputs = {
-    # There are many ways to reference flake inputs. The most widely used is github:owner/name/reference,
-    # which represents the GitHub repository URL + branch/commit-id/tag.
-
-    # Official NixOS package source, using nixos's stable branch by default
-    nixpkgs.url = "github:nixos/nixpkgs/nixos-23.05";
-    nixpkgs-unstable.url = "github:nixos/nixpkgs/nixos-unstable";
-
-    # for macos
-    nixpkgs-darwin.url = "github:nixos/nixpkgs/nixpkgs-23.05-darwin";
-    nix-darwin = {
-      url = "github:lnl7/nix-darwin";
-      inputs.nixpkgs.follows = "nixpkgs-darwin";
-    };
-
-    # home-manager, used for managing user configuration
-    home-manager = {
-      url = "github:nix-community/home-manager/release-23.05";
-      # The `follows` keyword in inputs is used for inheritance.
-      # Here, `inputs.nixpkgs` of home-manager is kept consistent with the `inputs.nixpkgs` of the current flake,
-      # to avoid problems caused by different versions of nixpkgs dependencies.
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
-
-    # modern window compositor
-    hyprland.url = "github:hyprwm/Hyprland/v0.27.2";
-    # community wayland nixpkgs
-    nixpkgs-wayland.url = "github:nix-community/nixpkgs-wayland";
-
-    # generate iso/qcow2/docker/... image from nixos configuration
-    nixos-generators = {
-      url = "github:nix-community/nixos-generators";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
-
-    # secrets management, lock with git commit at 2023/7/15
-    agenix.url = "github:ryantm/agenix/0d8c5325fc81daf00532e3e26c6752f7bcde1143";
-
-    # AstroNvim is an aesthetic and feature-rich neovim config.
-    astronvim = {
-      url = "github:AstroNvim/AstroNvim/v3.33.3";
-      flake = false;
-    };
-
-    # my private secrets, it's a private repository, you need to replace it with your own.
-    # use ssh protocol to authenticate via ssh-agent/ssh-key, and shallow clone to save time
-    mysecrets = {
-      url = "git+ssh://git@github.com/ryan4yin/nix-secrets.git?shallow=1";
-      flake = false;
-    };
-  };
-
   # The `outputs` function will return all the build results of the flake.
   # A flake can have many use cases and different types of outputs,
   # parameters in `outputs` are defined in `inputs` and can be referenced by their names.
@@ -96,6 +20,8 @@
     nix-darwin,
     home-manager,
     nixos-generators,
+    nixos-licheepi4a,
+    nixos-rk3588,
     ...
   }: let
     username = "ryan";
@@ -104,12 +30,14 @@
 
     x64_system = "x86_64-linux";
     x64_darwin = "x86_64-darwin";
-    allSystems = [x64_system x64_darwin];
+    riscv64_system = "riscv64-linux";
+    aarch64_system = "aarch64-linux";
+    allSystems = [x64_system x64_darwin riscv64_system aarch64_system];
 
     nixosSystem = import ./lib/nixosSystem.nix;
     macosSystem = import ./lib/macosSystem.nix;
-  in {
-    nixosConfigurations = let
+    colmenaSystem = import ./lib/colmenaSystem.nix;
+
     # 星野 アイ, Hoshino Ai
     idol_ai_modules_i3 = {
       nixos-modules = [
@@ -133,6 +61,7 @@
       ];
       home-module = import ./home/linux/server.nix;
     };
+    idol_aquamarine_tags = ["dist-build" "aqua"];
 
     # 星野 瑠美衣, Hoshino Rubii
     idol_ruby_modules = {
@@ -141,6 +70,7 @@
       ];
       home-module = import ./home/linux/server.nix;
     };
+    idol_ruby_tags = ["dist-build" "ruby"];
 
     # 有馬 かな, Arima Kana
     idol_kana_modules = {
@@ -149,9 +79,36 @@
       ];
       home-module = import ./home/linux/server.nix;
     };
+    idol_kana_tags = ["dist-build" "kana"];
 
-      system = x64_system;
-      specialArgs =
+    # 森友 望未, Moritomo Nozomi
+    rolling_nozomi_modules = {
+      nixos-modules = [
+        ./hosts/rolling_girls/nozomi
+      ];
+      # home-module = import ./home/linux/server-riscv64.nix;
+    };
+    rolling_nozomi_tags = ["riscv" "nozomi"];
+
+    # 小坂 結季奈, Kosaka Yukina
+    rolling_yukina_modules = {
+      nixos-modules = [
+        ./hosts/rolling_girls/yukina
+      ];
+      # home-module = import ./home/linux/server-riscv64.nix;
+    };
+    rolling_yukina_tags = ["riscv" "yukina"];
+
+    # 大木 鈴, Ōki Suzu
+    _12kingdoms_suzu_modules = {
+      nixos-modules = [
+        ./hosts/12kingdoms/suzu
+      ];
+      # home-module = import ./home/linux/server.nix;
+    };
+    _12kingdoms_suzu_tags = ["aarch" "suzu"];
+
+    x64_specialArgs =
       {
         inherit username userfullname useremail;
         # use unstable branch for some packages to get the latest updates
@@ -162,20 +119,98 @@
         };
       }
       // inputs;
+  in {
+    nixosConfigurations = let
       base_args = {
-        inherit home-manager nixos-generators system specialArgs;
+        inherit home-manager nixos-generators;
+        nixpkgs = nixpkgs; # or nixpkgs-unstable
+        system = x64_system;
+        specialArgs = x64_specialArgs;
       };
-      stable_args = base_args // {inherit nixpkgs;};
-      unstable_args = base_args // {nixpkgs = nixpkgs-unstable;};
     in {
       # ai with i3 window manager
-      ai_i3 = nixosSystem (idol_ai_modules_i3 // stable_args);
+      ai_i3 = nixosSystem (idol_ai_modules_i3 // base_args);
       # ai with hyprland compositor
-      ai_hyprland = nixosSystem (idol_ai_modules_hyprland // stable_args);
+      ai_hyprland = nixosSystem (idol_ai_modules_hyprland // base_args);
 
-      aquamarine = nixosSystem (idol_aquamarine_modules // stable_args);
-      ruby = nixosSystem (idol_ruby_modules // stable_args);
-      kana = nixosSystem (idol_kana_modules // stable_args);
+      # three virtual machines without desktop environment.
+      aquamarine = nixosSystem (idol_aquamarine_modules // base_args);
+      ruby = nixosSystem (idol_ruby_modules // base_args);
+      kana = nixosSystem (idol_kana_modules // base_args);
+    };
+
+    # colmena - remote deployment via SSH
+    colmena = let
+      # x86_64 related
+      x64_base_args = {
+        inherit home-manager;
+        nixpkgs = nixpkgs; # or nixpkgs-unstable
+        specialArgs = x64_specialArgs;
+      };
+
+      # riscv64 related
+      # using the same nixpkgs as nixos-licheepi4a to utilize the cross-compilation cache.
+      lpi4a_pkgs = import nixos-licheepi4a.inputs.nixpkgs {system = x64_system;};
+      lpi4a_specialArgs =
+        {
+          inherit username userfullname useremail;
+          pkgsKernel = nixos-licheepi4a.packages.${x64_system}.pkgsKernelCross;
+        }
+        // inputs;
+      lpi4a_base_args = {
+        inherit home-manager;
+        nixpkgs = nixos-licheepi4a.inputs.nixpkgs; # or nixpkgs-unstable
+        specialArgs = lpi4a_specialArgs;
+        targetUser = "root";
+      };
+
+      # aarch64 related
+      # using the same nixpkgs as nixos-rk3588 to utilize the cross-compilation cache.
+      rk3588_pkgs = import nixos-rk3588.inputs.nixpkgs {system = x64_system;};
+      rk3588_specialArgs =
+        {
+          inherit username userfullname useremail;
+        }
+        // nixos-rk3588.inputs;
+      rk3588_base_args = {
+        inherit home-manager;
+        nixpkgs = nixos-rk3588.inputs.nixpkgs; # or nixpkgs-unstable
+        specialArgs = rk3588_specialArgs;
+        targetUser = "root";
+      };
+    in {
+      meta = {
+        nixpkgs = import nixpkgs {system = x64_system;};
+        specialArgs = x64_specialArgs;
+
+        nodeSpecialArgs = {
+          # riscv64 SBCs
+          nozomi = lpi4a_specialArgs;
+          yukina = lpi4a_specialArgs;
+
+          # aarch64 SBCs
+          suzu = rk3588_specialArgs;
+        };
+        nodeNixpkgs = {
+          nozomi = lpi4a_pkgs;
+          yukina = lpi4a_pkgs;
+
+          # aarch64 SBCs
+          suzu = rk3588_pkgs;
+        };
+      };
+
+      # proxmox virtual machines(x86_64)
+      aquamarine = colmenaSystem (idol_aquamarine_modules // x64_base_args // {host_tags = idol_aquamarine_tags;});
+      ruby = colmenaSystem (idol_ruby_modules // x64_base_args // {host_tags = idol_ruby_tags;});
+      kana = colmenaSystem (idol_kana_modules // x64_base_args // {host_tags = idol_kana_tags;});
+
+      # riscv64 SBCs
+      nozomi = colmenaSystem (rolling_nozomi_modules // lpi4a_base_args // {host_tags = rolling_nozomi_tags;});
+      yukina = colmenaSystem (rolling_yukina_modules // lpi4a_base_args // {host_tags = rolling_yukina_tags;});
+
+      # aarch64 SBCs
+      suzu = colmenaSystem (_12kingdoms_suzu_modules // rk3588_base_args // {host_tags = _12kingdoms_suzu_tags;});
     };
 
     # take system images for idols
@@ -186,6 +221,7 @@
         "ai_i3"
         "ai_hyprland"
       ] (
+        # generate iso image for hosts with desktop environment
         host:
           self.nixosConfigurations.${host}.config.formats.iso
       )
@@ -194,6 +230,7 @@
         "ruby"
         "kana"
       ] (
+        # generate proxmox image for virtual machines without desktop environment
         host:
           self.nixosConfigurations.${host}.config.formats.proxmox
       );
@@ -213,10 +250,11 @@
         }
         // inputs;
       base_args = {
-        inherit nix-darwin home-manager system specialArgs;
+        inherit nix-darwin home-manager system specialArgs nixpkgs;
       };
     in {
-      harmonica = macosSystem (base_args // {
+      harmonica = macosSystem (base_args
+        // {
           darwin-modules = [
             ./hosts/harmonica
           ];
@@ -231,4 +269,173 @@
         nixpkgs.legacyPackages.${system}.alejandra
     );
   };
+
+  # This is the standard format for flake.nix. `inputs` are the dependencies of the flake,
+  # Each item in `inputs` will be passed as a parameter to the `outputs` function after being pulled and built.
+  inputs = {
+    # There are many ways to reference flake inputs. The most widely used is github:owner/name/reference,
+    # which represents the GitHub repository URL + branch/commit-id/tag.
+
+    # Official NixOS package source, using nixos's stable branch by default
+    nixpkgs.url = "github:nixos/nixpkgs/nixos-23.11";
+    # nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
+    nixpkgs-unstable.url = "github:nixos/nixpkgs/nixos-unstable";
+
+    # for macos
+    nixpkgs-darwin.url = "github:nixos/nixpkgs/nixpkgs-23.11-darwin";
+    nix-darwin = {
+      url = "github:lnl7/nix-darwin";
+      inputs.nixpkgs.follows = "nixpkgs-darwin";
+    };
+
+    # home-manager, used for managing user configuration
+    home-manager = {
+      url = "github:nix-community/home-manager/release-23.11";
+      # url = "github:nix-community/home-manager/master";
+
+      # The `follows` keyword in inputs is used for inheritance.
+      # Here, `inputs.nixpkgs` of home-manager is kept consistent with the `inputs.nixpkgs` of the current flake,
+      # to avoid problems caused by different versions of nixpkgs dependencies.
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+
+    lanzaboote = {
+      url = "github:nix-community/lanzaboote/v0.3.0";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+
+    impermanence.url = "github:nix-community/impermanence";
+
+    # modern window compositor
+    hyprland.url = "github:hyprwm/Hyprland/v0.32.3";
+    # community wayland nixpkgs
+    nixpkgs-wayland.url = "github:nix-community/nixpkgs-wayland";
+    # anyrun - a wayland launcher
+    anyrun = {
+      url = "github:Kirottu/anyrun";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+
+    # generate iso/qcow2/docker/... image from nixos configuration
+    nixos-generators = {
+      url = "github:nix-community/nixos-generators";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+
+    # secrets management, lock with git commit at 2023/7/15
+    agenix.url = "github:ryantm/agenix/0d8c5325fc81daf00532e3e26c6752f7bcde1143";
+
+    ########################  Some non-flake repositories  #########################################
+
+    # AstroNvim is an aesthetic and feature-rich neovim config.
+    astronvim = {
+      url = "github:AstroNvim/AstroNvim/v3.37.12";
+      flake = false;
+    };
+
+    # useful nushell scripts, such as auto_completion
+    nushell-scripts = {
+      url = "github:nushell/nu_scripts/main";
+      flake = false;
+    };
+
+    ########################  My own repositories  #########################################
+
+    # my private secrets, it's a private repository, you need to replace it with your own.
+    # use ssh protocol to authenticate via ssh-agent/ssh-key, and shallow clone to save time
+    mysecrets = {
+      url = "git+ssh://git@github.com/ryan4yin/nix-secrets.git?shallow=1";
+      flake = false;
+    };
+
+    # my wallpapers
+    wallpapers = {
+      url = "github:ryan4yin/wallpapers";
+      flake = false;
+    };
+
+    nur-ryan4yin = {
+      url = "github:ryan4yin/nur-packages";
+      # inputs.nixpkgs.follows = "nixpkgs";
+    };
+
+    # riscv64 SBCs
+    nixos-licheepi4a.url = "github:ryan4yin/nixos-licheepi4a";
+    # nixos-jh7110.url = "github:ryan4yin/nixos-jh7110";
+
+    # aarch64 SBCs
+    nixos-rk3588.url = "github:ryan4yin/nixos-rk3588";
+
+    ########################  Color Schemes  #########################################
+
+    # color scheme - catppuccin
+    catppuccin-btop = {
+      url = "github:catppuccin/btop";
+      flake = false;
+    };
+    catppuccin-fcitx5 = {
+      url = "github:catppuccin/fcitx5";
+      flake = false;
+    };
+    catppuccin-bat = {
+      url = "github:catppuccin/bat";
+      flake = false;
+    };
+    catppuccin-alacritty = {
+      url = "github:catppuccin/alacritty";
+      flake = false;
+    };
+    catppuccin-helix = {
+      url = "github:catppuccin/helix";
+      flake = false;
+    };
+    catppuccin-starship = {
+      url = "github:catppuccin/starship";
+      flake = false;
+    };
+    catppuccin-hyprland = {
+      url = "github:catppuccin/hyprland";
+      flake = false;
+    };
+    catppuccin-cava = {
+      url = "github:catppuccin/cava";
+      flake = false;
+    };
+    cattppuccin-k9s = {
+      url = "github:catppuccin/k9s";
+      flake = false;
+    };
+  };
+
+  # the nixConfig here only affects the flake itself, not the system configuration!
+  nixConfig = {
+    substituters = [
+      # cache mirror located in China
+      # status: https://mirror.sjtu.edu.cn/
+      "https://mirror.sjtu.edu.cn/nix-channels/store"
+      # status: https://mirrors.ustc.edu.cn/status/
+      # "https://mirrors.ustc.edu.cn/nix-channels/store"
+
+      # my own cache server
+      "https://ryan4yin.cachix.org"
+      "https://anyrun.cachix.org"
+      "https://hyprland.cachix.org"
+      
+      "https://cache.nixos.org"
+    ];
+
+    # nix community's cache server
+    extra-substituters = [
+      "https://nix-community.cachix.org"
+      "https://nixpkgs-wayland.cachix.org"
+    ];
+    extra-trusted-public-keys = [
+      "ryan4yin.cachix.org-1:Gbk27ZU5AYpGS9i3ssoLlwdvMIh0NxG0w8it/cv9kbU="
+      "cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY="
+      "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
+      "nixpkgs-wayland.cachix.org-1:3lwxaILxMRkVhehr5StQprHdEo4IrE8sRho9R9HOLYA="
+      "anyrun.cachix.org-1:pqBobmOjI7nKlsUMV25u9QHa9btJK65/C8vnO3p346s="
+      "hyprland.cachix.org-1:a7pgxzMz7+chwVL3/pzj6jIBMioiJM7ypFP8PwtkuGc="
+    ];
+  };
 }

home/README.md

@@ -0,0 +1,6 @@
+# Home Manager's Submodules
+
+1. `base`: The base module that is suitable for both Linux and macOS.
+2. `linux`: Linux-specific configuration.
+3. `darwin`: macOS-specific configuration.
+

home/base/README.md

@@ -0,0 +1,6 @@
+# Home Manager's Base Submodules
+
+2. `server`: Configuration which is suitable for both servers and desktops.
+1. `desktop`: Configuration for desktop environments, such as Hyprland, I3, etc.
+    1. it import `server` as its submodule.
+

home/base/desktop/alacritty/theme_catppuccino.yml

@@ -1,40 +0,0 @@
-# Catppuccino theme scheme for Alacritty
-
-colors:
-  primary:
-    background: '#1E1E2E'
-    foreground: '0xd6d6d6'
-
-  cursor:
-    text: '#CDD6F4'
-    cursor: '#D9D9D9'
-
-  normal:
-    black: '#181A1F'
-    red: '#E86671'
-    green: '#98C379'
-    yellow: '#E5C07B'
-    blue: '#61AFEF'
-    magenta: '#C678DD'
-    cyan: '#54AFBC'
-    white: '#ABB2BF'
-
-  bright:
-    black: '#5C6370'
-    red: '#E86671'
-    green: '#98C379'
-    yellow: '#E5C07B'
-    blue: '#61AFEF'
-    magenta: '#C678DD'
-    cyan: '#54AFBC'
-    white: '0xf7f7f7'
-
-  dim:
-    black: '#5C6370'
-    red: '0x74423f'
-    green: '#98C379'
-    yellow: '#E5C07B'
-    blue: '#61AFEF'
-    magenta: '0x6e4962'
-    cyan: '0x5c8482'
-    white: '0x828282'

home/base/desktop/cloud/default.nix

@@ -0,0 +1,23 @@
+{
+  pkgs,
+  ...
+}: {
+  home.packages = with pkgs; [
+    # general tools
+    pulumi
+    pulumictl
+    # istioctl
+
+    # aws
+    awscli2
+    aws-iam-authenticator
+    eksctl
+    istioctl
+
+    # aliyun
+    aliyun-cli
+   ];
+
+  programs = {
+  };
+}

home/base/desktop/container/container.nix

@@ -0,0 +1,14 @@
+{
+  pkgs,
+  pkgs-unstable,
+  ...
+}: {
+  home.packages = with pkgs; [
+    skopeo
+    docker-compose
+    dive # explore docker layers
+   ];
+
+  programs = {
+  };
+}

home/base/desktop/container/default.nix

@@ -0,0 +1,6 @@
+{ ... }: {
+  imports = [
+    ./container.nix
+    ./kubernetes.nix
+  ];
+}

home/base/desktop/container/kubernetes.nix

@@ -0,0 +1,31 @@
+{
+  pkgs,
+  pkgs-unstable,
+  cattppuccin-k9s,
+  ...
+}: {
+  home.packages = with pkgs; [
+    kubectl
+    kubernetes-helm
+  ];
+
+  programs = {
+    k9s = {
+      enable = true;
+      skin =
+        let
+          skin_file = "${cattppuccin-k9s}/dist/mocha.yml";  # theme - cattppuccin mocha
+          skin_attr = builtins.fromJSON (builtins.readFile
+            # replace 'base: &base "#1e1e2e"' with 'base: &base "default"'
+            # to make fg/bg color transparent. "default" means transparent in k9s skin.
+            (pkgs.runCommandNoCC "get-skin-json" {} ''
+              cat ${skin_file} \
+                |  sed -E 's@(base: &base ).+@\1 "default"@g' \
+                | ${pkgs.yj}/bin/yj > $out
+            '')
+          );
+        in 
+          skin_attr;
+    };
+  };
+}

home/base/desktop/default.nix

@@ -1,11 +1,14 @@
 {...}: {
   imports = [
-    ./alacritty
     ../server
+
+    ./cloud
+    ./container
     ./neovim
+    ./terminal
 
     ./development.nix
-    ./kitty.nix
+    ./helix.nix
     ./media.nix
     ./shell.nix
   ];

home/base/desktop/development.nix

@@ -16,26 +16,12 @@
   home.packages = with pkgs; [
     pkgs-unstable.devbox
 
-    # cloud native
-    skopeo
-    docker-compose
-    dive # explore docker layers
-    kubectl
-    kubernetes-helm
-    terraform
-    # terraformer # generate terraform configs from existing cloud resources
-    pulumi
-    pulumictl
-    k9s
-    # istioctl
-
-    # cloud provider
-    awscli2
-    aws-iam-authenticator
-    eksctl
-
-    # DO NOT install build tools for C/C++, set it per project by devShell instead
+    # DO NOT install build tools for C/C++ and others, set it per project by devShell instead
     gnumake # used by this repo, to simplify the deployment
+    jdk17   # used to run some java based tools(.jar)
+
+    # scheme related
+    guile
 
     # python
     (python311.withPackages (ps:
@@ -58,8 +44,8 @@
     minicom
 
     # other tools
+    bfg-repo-cleaner  # remove large files from git history
     k6 # load testing tool
-    mitmproxy # http/https proxy tool
     protobuf # protocol buffer compiler
   ];
 

home/base/desktop/helix.nix

@@ -0,0 +1,32 @@
+{ pkgs, catppuccin-helix, ... }:
+
+{
+  # https://github.com/catppuccin/helix
+  xdg.configFile."helix/themes".source = "${catppuccin-helix}/themes/default";
+
+  programs.helix = {
+    enable = true;
+    package = pkgs.helix;
+    settings = {
+      theme = "catppuccin_mocha";
+      editor = {
+        line-number = "relative";
+        cursorline = true;
+        color-modes = true;
+        lsp.display-messages = true;
+        cursor-shape = {
+          insert = "bar";
+          normal = "block";
+          select = "underline";
+        };
+        indent-guides.render = true;
+      };
+      keys.normal = {
+        space.space = "file_picker";
+        space.w = ":w";
+        space.q = ":q";
+        esc = [ "collapse_selection" "keep_primary_selection" ];
+      };
+    };
+  };
+}

home/base/desktop/neovim/README.md

@@ -1,7 +1,228 @@
-# AstroNvim
+# AstroNvim Configuration and Shortcuts
 
 My Neovim config based on [AstroNvim](https://github.com/AstroNvim/AstroNvim).
+For more details, visit the [AstroNvim website](https://astronvim.com/).
+
+This document outlines neovim's configuration structure and various shortcuts/commands for efficient usage.
+
+## Configuration Structure
+
+| Description                                       | Standard Location                           | My Location                                                               |
+| ------------------------------------------------- | ------------------------------------------- | ------------------------------------------------------------------------- |
+| Neovim's config                                   | `~/.config/nvim`                            | AstroNvim's github repository, referenced as a flake input in this flake. |
+| AstroNvim's user configuration                    | `$XDG_CONFIG_HOME/astronvim/lua/user`       | [./astronvim_user/](./astronvim_user/)                                    |
+| Plugins installation directory (lazy.nvim)        | `~/.local/share/nvim/`                      | The same as standard location, generated and managed by lazy.nvim.        |
+| LSP servers, DAP servers, linters, and formatters | `~/.local/share/nvim/mason/`(by mason.nvim) | [./default.nix](./default.nix), installed by nix.                         |
+
+## Update/Clean Plugins
+
+Note that lazy.nvim will not automatically update plugins, so you need to update them manually.
+
+```bash
+:Lazy update
+```
+
+Remove all unused plugins:
+
+```bash
+:Lazy clean
+```
 
 ## Screenshots
 
 ![](/_img/astronvim_2023-07-13_00-39.webp)
+![](/_img/hyprland_2023-07-29_2.webp)
+
+## Visual Modes
+
+| Action                   | Shortcut                                 |
+| ------------------------ | ---------------------------------------- |
+| Toggle visual mode       | `v`                                      |
+| Toggle visual block mode | `<Ctrl> + v` (select a block vertically) |
+
+## Incremental Selection
+
+Provided by nvim-treesitter.
+
+| Action            | Shortcut       |
+| ----------------- | -------------- |
+| init selection    | `<Ctrl-space>` |
+| node incremental  | `<Ctrl-space>` |
+| scope incremental | `<Alt-Space>`  |
+| node decremental  | `Backspace`    |
+
+## Search and Jump
+
+Provided by [flash.nvim](https://github.com/folke/flash.nvim), it's a intelligent search and jump plugin.
+
+1. It enhaces the default search and jump behavior of neovim.(search with prefix `/`)
+
+| Action            | Shortcut                                                                                                      |
+| ----------------- | ------------------------------------------------------------------------------------------------------------- |
+| Search            | `/`(normal search), `s`(disable all code highlight, only highlight matches)                                   |
+| Treesitter Search | `yR`,`dR`, `cR`, `vR`, `ctrl+v+R`(arround your matches, all the surrounding Treesitter nodes will be labeled) |
+| Remote Flash      | `yr`, `dr`, `cr`, (arround your matches, all the surrounding Treesitter nodes will be labeled)                |
+
+## Text Manipulation
+
+- Add at the end of multiple lines: `:normal A<text>`
+
+  - Execublock: `:A<text>`
+
+  - visual block mode(ctrl + v)
+  - Append text at the end of each line in the selected block
+  - If position exceeds line end, neovim adds spaces automatically
+
+- Delete the last char of multivle lines: `:normal $x`
+
+  - Execute `$x` on each line
+  - visual mode(v)
+  - `$` moves cursor to the end of line
+  - `x` deletes the character under the cursor
+
+- Delete the last word of multiple lines: `:normal $bD`
+  - Execute `$bD` on each line
+  - visual mode(v)
+  - `$` moves cursor to the end of line
+  - `b` moves cursor to the beginning of the last word
+  - `D` deletes from cursor to the end of line
+
+## Commands & Shortcuts
+
+| Action                        | Shortcut       |
+| ----------------------------- | -------------- |
+| Learn Neovim's Basics         | `:Tutor`       |
+| Open file explorer            | `<Space> + e`  |
+| Focus Neotree to current file | `<Space> + o`  |
+| Floating Terminal             | `<Space> + tf` |
+| Horizontal Split Terminal     | `<Space> + th` |
+| Vertical Split Terminal       | `<Space> + tv` |
+| Open IPython REPL             | `<Space> + tp` |
+| Toggle line wrap              | `<Space> + uw` |
+| Show line diagnostics         | `gl`           |
+| Show function/variable info   | `K`            |
+| Go to definition              | `gd`           |
+| References of a symbol        | `gr`           |
+
+## Window Navigation
+
+- Switch between windows: `<Ctrl> + h/j/k/l`
+- Resize windows: `<Ctrl> + Up/Down/Left/Right`
+  - Note: On macOS, conflicts with system shortcuts
+  - Disable in System Preferences -> Keyboard -> Shortcuts -> Mission Control
+
+## Splitting and Buffers
+
+| Action                | Shortcut      |
+| --------------------- | ------------- |
+| Horizontal Split      | `\`           |
+| Vertical Split        | `\|`          |
+| Next Buffer (Tab)     | `]b`          |
+| Previous Buffer (Tab) | `[b`          |
+| Close Buffer          | `<Space> + c` |
+
+## Editing and Formatting
+
+| Action                                                | Shortcut       |
+| ----------------------------------------------------- | -------------- |
+| Toggle buffer auto formatting                         | `<Space> + uf` |
+| Format Document                                       | `<Space> + lf` |
+| Code Actions                                          | `<Space> + la` |
+| Rename                                                | `<Space> + lr` |
+| Opening LSP symbols                                   | `<Space> + lS` |
+| Comment Line(support multiple lines)                  | `<Space> + /`  |
+| Open filepath/URL at cursor(neovim's builtin command) | `gx`           |
+| Find files by name (fzf)                              | `<Space> + ff` |
+| Grep string in files (ripgrep)                        | `<Space> + fw` |
+
+## Sessions
+
+| Action                         | Shortcut       |
+| ------------------------------ | -------------- |
+| Save Session                   | `<Space> + Ss` |
+| Last Session                   | `<Space> + Sl` |
+| Delete Session                 | `<Space> + Sd` |
+| Search Session                 | `<Space> + Sf` |
+| Load Current Directory Session | `<Space> + S.` |
+
+## Debugging
+
+Press `<Space> + D` to view available bindings and options.
+
+## Find and Replace
+
+| Action                   | Command                             |
+| ------------------------ | ----------------------------------- |
+| Replace in selected area | `:s/old/new/g`                      |
+| Replace in current line  | Same as above                       |
+| Replace in whole file    | `:% s/old/new/g`                    |
+| Replace with regex       | `:% s@\vhttp://(\w+)@https://\1@gc` |
+
+1. `\v` means means that in the regex pattern after it can be used without backslash escaping(similar to python's raw string).
+2. `\1` means the first matched group in the pattern.
+
+## Replace in the specific lines
+
+| Action                                    | Command                                |
+| ----------------------------------------- | -------------------------------------- |
+| From the 10th line to the end of the file | `:10,$ s/old/new/g` or `:10,$ s@^@#@g` |
+| From the 10th line to the 20th line       | `:10,20 s/old/new/g`                   |
+
+The postfix(flags) in the above commands:
+
+1. `g` means replace all the matched strings in the current line/file.
+2. `c` means ask for confirmation before replacing.
+3. `i` means ignore case.
+
+## Search and Replace Globally
+
+| Description                                                  | Shortcut                                                         |
+| ------------------------------------------------------------ | ---------------------------------------------------------------- |
+| Open spectre.nvim search and replace panel                   | `<Space> + ss`                                                   |
+| Search and replace in command line(need install `sad` first) | `find -name "*.nix" \| sad '<pattern>' '<replacement>' \| delta` |
+
+## Surrounding Characters
+
+Provided by mini.surround plugin.
+
+- Prefix `gz`
+
+| Action                         | Shortcut | Description                                     |
+| ------------------------------ | -------- | ----------------------------------------------- |
+| Add surrounding characters     | `gzaiw'` | Add `'` around the word under cursor            |
+| Delete surrounding characters  | `gzd'`   | Delete `'` around the word under cursor         |
+| Replace surrounding characters | `gzr'"`  | Replace `'` by `"` around the word under cursor |
+| Highlight surrounding          | `gzh'`   | Highlight `'` around the word under cursor      |
+
+## Text Manipulation
+
+| Action                                 |               |
+| -------------------------------------- | ------------- |
+| Join Selection of Lines With Space     | `:join`       |
+| Join without spaces                    | `:join!`      |
+| Join with LSP intelligence(treesj)     | `<Space> + j` |
+| Split Line into Multiple Lines(treesj) | `<Space> + s` |
+
+## Convert Text Case
+
+| Action               |     |
+| -------------------- | --- |
+| Toggle text's case   | `~` |
+| Convert to uppercase | `U` |
+| Convert to lowercase | `u` |
+
+## Miscellaneous
+
+| Action                       |                                              |
+| ---------------------------- | -------------------------------------------- |
+| Save selected text to a file | `:w filename` (Will show `:'<,'>w filename`) |
+| Show all Yank History        | `:<Space> + yh`                              |
+| Show undo history            | `:<Space> + uh`                              |
+
+## Additional Resources
+
+For more detailed information and advanced usage, refer to:
+
+1. [AstroNvim walkthrough](https://astronvim.com/Basic%20Usage/walkthrough)
+2. [./astronvim_user/mapping.lua](./astronvim_user/mappings.lua)
+3. All the plugins' documentations

home/base/desktop/neovim/astronvim_user/init.lua

@@ -35,7 +35,6 @@ return {
     { import = "astrocommunity.pack.vue" },
     ---- Configuration Language
     { import = "astrocommunity.pack.markdown" },
-    { import = "astrocommunity.markdown-and-latex.glow-nvim" },
     { import = "astrocommunity.pack.json" },
     { import = "astrocommunity.pack.yaml" },
     { import = "astrocommunity.pack.toml" },
@@ -53,6 +52,14 @@ return {
     { import = "astrocommunity.pack.cmake" },
     { import = "astrocommunity.pack.cpp" },
     { import = "astrocommunity.pack.docker" },
+    -- Motion
+    { import = "astrocommunity.motion.mini-surround" },
+    -- https://github.com/echasnovski/mini.ai
+    { import = "astrocommunity.motion.mini-ai" },
+    { import = "astrocommunity.motion.flash-nvim" },
+    { "folke/flash.nvim", vscode = false },
+    -- Lua implementation of CamelCaseMotion, with extra consideration of punctuation.
+    { import = "astrocommunity.motion.nvim-spider" },
     -- AI Assistant
     { import = "astrocommunity.completion.copilot-lua-cmp" },
     -- Custom copilot-lua to enable filtypes: markdown
@@ -66,24 +73,79 @@ return {
       end,
     },
 
-    ---- Nushell
+    -- markdown preview
     {
-      "LhKipp/nvim-nu",
+      '0x00-ketsu/markdown-preview.nvim',
+      ft = {'md', 'markdown', 'mkd', 'mkdn', 'mdwn', 'mdown', 'mdtxt', 'mdtext', 'rmd', 'wiki'},
       config = function()
-        require'nu'.setup({
-          use_lsp_features = true, -- requires https://github.com/jose-elias-alvarez/null-ls.nvim
-          -- lsp_feature: all_cmd_names is the source for the cmd name completion.
-          -- It can be
-          --  * a string, which is interpreted as a shell command and the returned list is the source for completions (requires plenary.nvim)
-          --  * a list, which is the direct source for completions (e.G. all_cmd_names = {"echo", "to csv", ...})
-          --  * a function, returning a list of strings and the return value is used as the source for completions
-          all_cmd_names = [[nu -c 'help commands | get name | str join "\n"']]
-        })
-      end,
-      dependencies = {
-        {"nvim-treesitter/nvim-treesitter"},
-        { "jose-elias-alvarez/null-ls.nvim"},
+        require('markdown-preview').setup {
+          -- your configuration comes here
+          -- or leave it empty to use the default settings
+          -- refer to the setup section below
         }
+      end,
+    },
+
+    -- clipboard manager
+    {
+      "gbprod/yanky.nvim",
+      opts = function()
+        local mapping = require "yanky.telescope.mapping"
+        local mappings = mapping.get_defaults()
+        mappings.i["<c-p>"] = nil
+        return {
+          highlight = { timer = 200 },
+          picker = {
+            telescope = {
+              use_default_mappings = false,
+              mappings = mappings,
+            },
+          },
+        }
+      end,
+      keys = {
+        { "y", "<Plug>(YankyYank)", mode = { "n", "x" }, desc = "Yank text" },
+        { "p", "<Plug>(YankyPutAfter)", mode = { "n", "x" }, desc = "Put yanked text after cursor" },
+        { "P", "<Plug>(YankyPutBefore)", mode = { "n", "x" }, desc = "Put yanked text before cursor" },
+        { "gp", "<Plug>(YankyGPutAfter)", mode = { "n", "x" }, desc = "Put yanked text after selection" },
+        { "gP", "<Plug>(YankyGPutBefore)", mode = { "n", "x" }, desc = "Put yanked text before selection" },
+        { "[y", "<Plug>(YankyCycleForward)", desc = "Cycle forward through yank history" },
+        { "]y", "<Plug>(YankyCycleBackward)", desc = "Cycle backward through yank history" },
+        { "]p", "<Plug>(YankyPutIndentAfterLinewise)", desc = "Put indented after cursor (linewise)" },
+        { "[p", "<Plug>(YankyPutIndentBeforeLinewise)", desc = "Put indented before cursor (linewise)" },
+        { "]P", "<Plug>(YankyPutIndentAfterLinewise)", desc = "Put indented after cursor (linewise)" },
+        { "[P", "<Plug>(YankyPutIndentBeforeLinewise)", desc = "Put indented before cursor (linewise)" },
+        { ">p", "<Plug>(YankyPutIndentAfterShiftRight)", desc = "Put and indent right" },
+        { "<p", "<Plug>(YankyPutIndentAfterShiftLeft)", desc = "Put and indent left" },
+        { ">P", "<Plug>(YankyPutIndentBeforeShiftRight)", desc = "Put before and indent right" },
+        { "<P", "<Plug>(YankyPutIndentBeforeShiftLeft)", desc = "Put before and indent left" },
+        { "=p", "<Plug>(YankyPutAfterFilter)", desc = "Put after applying a filter" },
+        { "=P", "<Plug>(YankyPutBeforeFilter)", desc = "Put before applying a filter" },
+      },
+    },
+    
+    -- Enhanced matchparen.vim plugin for Neovim to highlight the outer pair.
+    {
+      "utilyre/sentiment.nvim",
+      version = "*",
+      event = "VeryLazy", -- keep for lazy loading
+      opts = {
+        -- config
+      },
+      init = function()
+        -- `matchparen.vim` needs to be disabled manually in case of lazy loading
+        vim.g.loaded_matchparen = 1
+      end,
+    },
+
+    -- joining blocks of code into oneline, or splitting one line into multiple lines.
+    {
+      'Wansmer/treesj',
+      keys = { '<space>m', '<space>j', '<space>s' },
+      dependencies = { 'nvim-treesitter/nvim-treesitter' },
+      config = function()
+        require('treesj').setup({--[[ your config ]]})
+      end,
     },
 
     -- File explorer(Custom configs)
@@ -99,8 +161,7 @@ return {
         },
       }
     },
-    -- The plugin offers the `:Refactor` command to refactor code.
-    -- TODO not work yet
+    -- The plugin offers the alibity to refactor code.
     {
       "ThePrimeagen/refactoring.nvim",
       dependencies = {
@@ -108,20 +169,33 @@ return {
         {"nvim-treesitter/nvim-treesitter"}
       }
     },
-    -- The plugin offers the `:Spectre` command to search and replace.
-    -- TODO not work yet
+    -- The plugin offers the abilibty to search and replace.
     {
       "nvim-pack/nvim-spectre",
       dependencies = {
         {"nvim-lua/plenary.nvim"},
       }
     },
+
+    -- full signature help, docs and completion for the nvim lua API.
+    { "folke/neodev.nvim", opts = {} },
+
+    { "RRethy/vim-illuminate", config = function() end },
+
     -- Language Parser for syntax highlighting / indentation / folding / Incremental selection
     {
       "nvim-treesitter/nvim-treesitter",
       opts = function(_, opts)
         local utils = require "astronvim.utils";
-        opts.indent.enable = false;
+        opts.incremental_selection = {
+          enable = true,
+          keymaps = {
+            init_selection = "<C-space>",  -- Ctrl + Space
+            node_incremental = "<C-space>",
+            scope_incremental = "<A-space>",  -- Alt + Space
+            node_decremental = "<bs>",  -- Backspace
+          },
+        }
         opts.ensure_installed = utils.list_insert_unique(opts.ensure_installed, {
           -- neovim
           "vim",
@@ -137,6 +211,17 @@ return {
       end,
     },
 
+    -- implementation/definition preview
+    {
+      'rmagatti/goto-preview',
+      config = function()
+        require('goto-preview').setup {}
+      end
+    },
+
+    -- Undo tree
+    { "debugloop/telescope-undo.nvim", },
+
     -- Install lsp, formmatter and others via home manager instead of Mason.nvim
     -- LSP installations
     {
@@ -179,9 +264,6 @@ return {
             code_actions.proselint,   -- English prose linter
             code_actions.statix,      -- Lints and suggestions for Nix.
 
-            -- Completion
-            completion.luasnip,
-
             -- Diagnostic
             diagnostics.actionlint,  -- GitHub Actions workflow syntax checking
             diagnostics.buf,         -- check text in current buffer
@@ -204,6 +286,7 @@ return {
               extra_args = { "--dialect", "postgres" }, -- change to your dialect
             }),
             formatting.nginx_beautifier,  -- Nginx formatter
+            null_ls.builtins.formatting.verible_verilog_format, -- Verilog formatter
           })
         end
       end,
@@ -217,6 +300,52 @@ return {
         opts.automatic_installation = false
       end,
     },
+
+    {
+      'nvim-telescope/telescope.nvim', branch = '0.1.x',
+      dependencies = { 'nvim-lua/plenary.nvim' },
+      init = function()
+        -- 1. Disable highlighting for certain filetypes
+        -- 2. Ignore files larger than a certain filesize
+        local previewers = require("telescope.previewers")
+
+        local _bad = { ".*%.csv", ".*%.min.js" } -- Put all filetypes that slow you down in this array
+        local filesize_threshold = 300 * 1024 -- 300KB
+        local bad_files = function(filepath)
+          for _, v in ipairs(_bad) do
+            if filepath:match(v) then
+              return false
+            end
+          end
+          return true
+        end
+
+        local new_maker = function(filepath, bufnr, opts)
+          opts = opts or {}
+          if opts.use_ft_detect == nil then opts.use_ft_detect = true end
+
+          -- 1. Check if the file is in the bad_files array, and if so, don't highlight it
+          opts.use_ft_detect = opts.use_ft_detect == false and false or bad_files(filepath)
+
+          -- 2. Check the file size, and ignore it if it's too big(preview nothing).
+          filepath = vim.fn.expand(filepath)
+          vim.loop.fs_stat(filepath, function(_, stat)
+            if not stat then return end
+            if stat.size > filesize_threshold then
+              return
+            else
+              previewers.buffer_previewer_maker(filepath, bufnr, opts)
+            end
+          end)
+        end
+
+        require("telescope").setup {
+          defaults = {
+            buffer_previewer_maker = new_maker,
+          }
+        }
+      end,
+    }
   },
 
   -- Configure require("lazy").setup() options
@@ -230,6 +359,7 @@ return {
     },
   },
 
+  -- https://github.com/neovim/nvim-lspconfig/blob/master/doc/server_configurations.md
   lsp = {
     config = {
       -- the offset_enconding of clangd will confilicts whit null-ls
@@ -264,6 +394,8 @@ return {
       "nil_ls",         -- nix language server
       "bufls",          -- protocol buffer language server
       "zls",            -- zig language server
+      ---- HDL
+      "verible",      -- verilog language server
       ---- Operation & Cloud Nativautoindente
       "bashls",       -- bash
       "cmake",        -- cmake language server

home/base/desktop/neovim/astronvim_user/mappings.lua

@@ -4,8 +4,13 @@
 -- lower level configuration and more robust one. (which-key will
 -- automatically pick-up stored data by this setting.)
 local utils = require "astronvim.utils"
+
+require("telescope").load_extension("refactoring")
+require("telescope").load_extension("yank_history")
+require("telescope").load_extension("undo")
+
 return {
-  -- first key is the mode
+  -- normal mode
   n = {
     -- second key is the lefthand side of the map
     -- mappings seen under group name "Buffer"
@@ -13,9 +18,46 @@ return {
     -- quick save
     ["<C-s>"] = { ":w!<cr>", desc = "Save File" },  -- change description but the same command
     ["<leader>tp"] = { function() utils.toggle_term_cmd("ipython") end, desc = "ToggleTerm python" },
+
+    -- search and replace globally
+    ['<leader>ss'] = {'<cmd>lua require("spectre").toggle()<CR>', desc = "Toggle Spectre" },
+    ['<leader>sw'] = {'<cmd>lua require("spectre").open_visual({select_word=true})<CR>', desc = "Search current word" },
+    ['<leader>sp'] ={'<cmd>lua require("spectre").open_file_search({select_word=true})<CR>', desc = "Search on current file" },
+
+    -- refactoring
+    ["<leader>ri"] = { function() require('refactoring').refactor('Inline Variable') end, desc = "Inverse of extract variable" },
+    ["<leader>rb"] = { function() require('refactoring').refactor('Extract Block') end, desc = "Extract Block" },
+    ["<leader>rbf"] = { function() require('refactoring').refactor('Extract Block To File') end, desc = "Extract Block To File" },
+    ["<leader>rr"] = { function() require('telescope').extensions.refactoring.refactors() end, desc = "Prompt for a refactor to apply" },
+    ["<leader>rp"] = { function() require('refactoring').debug.printf({below = false}) end, desc = "Insert print statement to mark the calling of a function" },
+    ["<leader>rv"] = { function() require('refactoring').debug.print_var() end, desc = "Insert print statement to print a variable" },
+    ["<leader>rc"] = { function() require('refactoring').debug.cleanup({}) end, desc = "Cleanup of all generated print statements" },
+
+    -- yank_history
+    ["<leader>yh"] = { function() require("telescope").extensions.yank_history.yank_history() end, desc = "Preview Yank History" },
+
+    -- undo history
+    ["<leader>uh"] = {"<cmd>Telescope undo<cr>", desc="Telescope undo" },
+
+    -- implementation/definition preview
+    ["gpd"] = { "<cmd>lua require('goto-preview').goto_preview_definition()<CR>", desc="goto_preview_definition" },
+    ["gpt"] = { "<cmd>lua require('goto-preview').goto_preview_type_definition()<CR>", desc="goto_preview_type_definition" },
+    ["gpi"] = { "<cmd>lua require('goto-preview').goto_preview_implementation()<CR>", desc="goto_preview_implementation" },
+    ["gP" ] = {  "<cmd>lua require('goto-preview').close_all_win()<CR>", desc="close_all_win" },
+    ["gpr"] = { "<cmd>lua require('goto-preview').goto_preview_references()<CR>", desc="goto_preview_references" },
   },
-  t = {
-    -- setting a mapping to false will disable it
-    -- ["<esc>"] = false,
+  -- Visual mode
+  v = {
+    -- search and replace globally
+    ['<leader>sw'] =  {'<esc><cmd>lua require("spectre").open_visual()<CR>', desc = "Search current word" },
+  },
+  -- visual mode(what's the difference between v and x???)
+  x = {
+    -- refactoring
+    ["<leader>ri"] = { function() require('refactoring').refactor('Inline Variable') end, desc = "Inverse of extract variable" },
+    ["<leader>re"] = { function() require('refactoring').refactor('Extract Function') end, desc = "Extracts the selected code to a separate function" },
+    ["<leader>rf"] = { function() require('refactoring').refactor('Extract Function To File') end, desc = "Extract Function To File" },
+    ["<leader>rv"] = { function() require('refactoring').refactor('Extract Variable') end, desc = "Extracts occurrences of a selected expression to its own variable" },
+    ["<leader>rr"] = { function() require('telescope').extensions.refactoring.refactors() end, desc = "Prompt for a refactor to apply" },
   },
 }

home/base/desktop/neovim/default.nix

@@ -5,109 +5,17 @@
 }:
 ###############################################################################
 #
-#  AstroNvim's configuration and all its dependencies
-#
-#  Related folders:
-#    nvim's config: `~/.config/nvim`
-#    astronvim's user configuration: `$XDG_CONFIG_HOME/astronvim/lua/user`
-#    all plugins will be installed into(by lazy.nvim): `~/.local/share/nvim/`
-#
-#  For details: https://astronvim.com/
-#
-#  Toggle visual mode:              `v`
-#  Toggle visual block mode:        `<Ctrl> + v`  (select a block(vertically) of text)
-#
-#  Commands & shortcuts in AstroNvim
-#    Learn Neovim's Basics:         `:Tutor`
-#    Opening file explorer:         `<Space> + e`
-#    Focus Neotree to current file: `<Space> + o`
-#    Floating Terminal:	            `<Space> + tf`
-#    Horizontal Split Terminal:	    `<Space> + th`
-#    Vertical Split Terminal:	      `<Space> + tv`
-#    Open IPython REPL:             `<Space> + tp`
-#    Opening LSP symbols:           `<Space> + lS`
-#    Show line diagnostics:         `gl`
-#    Go to definition:              `gd`
-#
-#    Switching between windows:     `<Ctrl> + h/j/k/l`
-#    Resizing windows:              `<Ctrl> + Up/Down/Left/Right`
-#        Note that on macOS, this is conflict with system's default shortcuts.
-#        You need disable them in System Preferences -> Keyboard -> Shortcuts -> Mission Control.
-#    Horizontal Split:              `\`
-#    Vertical Split:                `|`
-#    Next Buffer(Tab):              `]b`
-#    Previous Buffer(Tab):          `[b`
-#    Close Buffer:                  `<Space> + c`
-#
-#    Toggle buffer auto formatting: `<Space> + uf`
-#    Format Document:               `<Space> + lf`
-#    Comment Line:                  `<Space> + /`
-#        Can be used in visual mode
-#    Code Actions:                  `<Space> + la`
-#    Rename:                        `<Space> + lr`
-#    Open filepath/URL at cursor:   `gx`
-#        This is a neovim builtin command
-#    Find files by name(fzf):       `<Space> + ff`
-#    Grep string in files(repgrep): `<Space> + fw`
-#
-#    Save Session:                  `<Space> + Ss`
-#    Last Session:                  `<Space> + Sl`
-#    Delete Session:                `<Space> + Sd`
-#    Search Session:                `<Space> + Sf`
-#    Load Current Directory Session:`<Space> + S.`
-#
-#    Debugging: press `<Space> + D` to see the available bindings and options.
-#
-#    Replace in the selected area:  `:s/old/new/g`  (will show `:'<,'>s/old/new/g`)
-#    Replace in the current line:   The same as above
-#    Replace in the whole file:     `:% s/old/new/g`
-#    Replace with regex:            `:% s@\vhttp://(\w+)@https://\1@gc`
-#        1. `\v` means means that in the regex pattern after it can be used without backslash escaping(similar to python's raw string).
-#        2. `\1` means the first matched group in the pattern.
-#    Replace in the specific lines:
-#        1. From the 10th line to the end of the file:     `:10,$ s/old/new/g`
-#                                                       or `:10,$ s@^@#@g`
-#        2. From the 10th line to the 20th line:           `:10,20 s/old/new/g`
-#
-#    The postfix(flgas) in the above commands:
-#        1. `g` means replace all the matched strings in the current line/file.
-#        2. `c` means ask for confirmation before replacing.
-#        3. `i` means ignore case.
-#
-#    Joining a Selection of Lines With Space:  `:join`
-#    Joining without spaces:                   `:join!`
-#
-#    Toggle text's case:                       `~`
-#    Convert to uppercase:                     `U`
-#    Convert to lowercase:                     `u`
-#
-#    Save the selected text to a file:         `:w filename`  (will show `:'<,'>w filename`)
-#
-#    Search key pattern and Replace in Multiple Files:
-#        sed -ri "s/pattern_str/replace_str/g" $(grep "key_pattern" 'path_pattern' -rl)
-#
-#    Search file name pattern and Replace in Multiple Files:
-#        sed -ri "s/pattern_str/replace_str/g" $(find . -name "pattern")
-#
-#    ......
-#    See https://astronvim.com/Basic%20Usage/walkthrough
+#  AstroNvim's configuration and all its dependencies(lsp, formatter, etc.)
 #
 #e#############################################################################
 {
   xdg.configFile = {
-    # base config
-    "nvim" = {
-      # update AstroNvim
-      onChange = "${pkgs.neovim}/bin/nvim --headless +quitall";
-      source = astronvim;
-    };
-    # my cusotom astronvim config, astronvim will load it after base config
+    # astronvim's config
+    "nvim".source = astronvim;
+
+    # my custom astronvim config, astronvim will load it after base config
     # https://github.com/AstroNvim/AstroNvim/blob/v3.32.0/lua/astronvim/bootstrap.lua#L15-L16
-    "astronvim/lua/user" = {
-      # update AstroNvim
-      onChange = "${pkgs.neovim}/bin/nvim --headless +quitall";
-      source = ./astronvim_user;
-    };
+    "astronvim/lua/user".source = ./astronvim_user;
   };
 
   nixpkgs.config = {
@@ -126,17 +34,17 @@
 
       withPython3 = true;
       withNodeJs = true;
-      extraPackages = [];
+      extraPackages = with pkgs; [];
 
       # currently we use lazy.nvim as neovim's package manager, so comment this one.
-      plugins = with pkgs.vimPlugins; [
-        # search all the plugins using https://search.nixos.org/packages
-        luasnip
-      ];
+      # plugins = with pkgs.vimPlugins; [
+      #   # search all the plugins using https://search.nixos.org/packages
+      # ];
     };
   };
   home = {
-    packages = with pkgs; [
+    packages = with pkgs;
+      [
         #-- c/c++
         cmake
         cmake-language-server
@@ -145,7 +53,7 @@
         gcc # c/c++ compiler, required by nvim-treesitter!
         llvmPackages.clang-unwrapped # c/c++ tools with clang-tools such as clangd
         gdb
-      lldb
+        # lldb  # TODO - fix python3.11's package conflict - six.py
 
         #-- python
         nodePackages.pyright # python language server
@@ -195,7 +103,7 @@
 
         #-- CloudNative
         nodePackages.dockerfile-language-server-nodejs
-      terraform
+        # terraform  # install via brew on macOS
         terraform-ls
         jsonnet
         jsonnet-language-server
@@ -214,10 +122,19 @@
         nodePackages.prettier # common code formatter
         marksman # language server for markdown
         glow # markdown previewer
+        fzf
 
         #-- Optional Requirements:
         gdu # disk usage analyzer, required by AstroNvim
         ripgrep # fast search tool, required by AstroNvim's '<leader>fw'(<leader> is space key)
-    ];
+      ]
+      ++ (
+        if pkgs.stdenv.isDarwin
+        then []
+        else [
+          #-- verilog / systemverilog
+          verible
+        ]
+      );
   };
 }

home/base/desktop/shell.nix

@@ -1,4 +1,4 @@
-{...}: {
+{ nushell-scripts, ...}: {
   programs.bash = {
     # load the alias file for work
     bashrcExtra = ''
@@ -19,6 +19,13 @@
     # https://github.com/nushell/nushell/issues/8214
     extraConfig = ''
       source /etc/agenix/alias-for-work.nushell
+      use ${nushell-scripts}/custom-completions/git/git-completions.nu *
+      use ${nushell-scripts}/custom-completions/glow/glow-completions.nu *
+      use ${nushell-scripts}/custom-completions/make/make-completions.nu *
+      use ${nushell-scripts}/custom-completions/nix/nix-completions.nu *
+      use ${nushell-scripts}/custom-completions/man/man-completions.nu *
+      use ${nushell-scripts}/custom-completions/cargo/cargo-completions.nu *
+      use ${nushell-scripts}/custom-completions/zellij/zellij-completions.nu *
     '';
   };
 }

home/base/desktop/terminal/README.md

@@ -0,0 +1,7 @@
+# Termianl Emulators
+
+1. kitty: My main terminal emulator.
+2. wezterm: My secondary terminal emulator.
+3. alacritty: Standby terminal.
+
+

home/base/desktop/terminal/alacritty.nix

@@ -1,4 +1,4 @@
-{pkgs, ...}:
+{pkgs, catppuccin-alacritty, ...}:
 ###########################################################
 #
 # Alacritty Configuration
@@ -7,17 +7,20 @@
 #   1. Multi-Window: `command + N`
 #   2. Increase Font Size: `command + =` | `command + +`
 #   3. Decrease Font Size: `command + -` | `command + _`
-#   4. And Other common shortcuts such as Copy, Paste, Cursor Move, etc.
+#   4. Search Text: `command + F`
+#   5. And Other common shortcuts such as Copy, Paste, Cursor Move, etc.
 #
 # Useful Hot Keys for Linux:
 #   1. Increase Font Size: `ctrl + shift + =` | `ctrl + shift + +`
 #   2. Decrease Font Size: `ctrl + shift + -` | `ctrl + shift + _`
-#   3. And Other common shortcuts such as Copy, Paste, Cursor Move, etc.
+#   3. Search Text: `ctrl + shift + N`
+#   4. And Other common shortcuts such as Copy, Paste, Cursor Move, etc.
 #
 # Note: Alacritty do not have support for Tabs, and any graphic protocol.
 #
 ###########################################################
 {
+  xdg.configFile."alacritty/theme_catppuccin.yml".source = "${catppuccin-alacritty}/catppuccin-mocha.yml";
   programs.alacritty = {
     enable = true;
   };
@@ -27,14 +30,14 @@
       import:
         # all alacritty themes can be found at
         #    https://github.com/alacritty/alacritty-theme
-        - ~/.config/alacritty/theme_catppuccino.yml
+        - ~/.config/alacritty/theme_catppuccin.yml
 
       window:
         # Background opacity
         #
         # Window opacity as a floating point number from `0.0` to `1.0`.
         # The value `0.0` is completely transparent and `1.0` is opaque.
-        opacity: 0.95
+        opacity: 0.93
 
         # Startup Mode (changes require restart)
         #
@@ -45,7 +48,7 @@
         #
         # Values for `startup_mode` (macOS only):
         #   - SimpleFullscreen
-        startup_mode: Windowed
+        startup_mode: Maximized
 
         # Allow terminal applications to change Alacritty's window title.
         dynamic_title: true
@@ -95,6 +98,4 @@
           size: 13
       ''
     );
-
-  xdg.configFile."alacritty/theme_catppuccino.yml".source = ./theme_catppuccino.yml;
 }

home/base/desktop/terminal/default.nix

@@ -0,0 +1,7 @@
+{...}: {
+  imports = [
+    ./alacritty.nix
+    ./kitty.nix
+    ./wezterm.nix
+  ];
+}

home/base/desktop/terminal/kitty.nix

@@ -14,6 +14,9 @@
 #   4. Increase Font Size: `command + =` | `command + +`
 #   5. Decrease Font Size: `command + -` | `command + _`
 #   6. And Other common shortcuts such as Copy, Paste, Cursor Move, etc.
+#   7. Search in the current window(show_scrollback): `ctrl + shift + h`
+#          This will open a pager, it's defined by `scrollback_pager`, default is `less`
+#        
 #
 # Useful Hot Keys for Linux:
 #   1. New Tab: `ctrl + shift + t`
@@ -27,6 +30,9 @@
 {
   programs.kitty = {
     enable = true;
+    # kitty has catppuccin theme built-in,
+    # all the built-in themes are packaged into an extra package named `kitty-themes`
+    # and it's installed by home-manager if `theme` is specified.
     theme = "Catppuccin-Mocha";
     font = {
       name = "JetBrainsMono Nerd Font";
@@ -37,12 +43,17 @@
         else 13;
     };
 
+    keybindings = {
+      "ctrl+shift+m" = "toggle_maximized";
+    };
+
     settings =
       {
-        background_opacity = "0.95";
+        background_opacity = "0.93";
         macos_option_as_alt = true; # Option key acts as Alt on macOS
         scrollback_lines = 10000;
         enable_audio_bell = false;
+        tab_bar_edge = "top";     # tab bar on top
       }
       // (
         if pkgs.stdenv.isDarwin
@@ -54,6 +65,6 @@
       );
 
     # macOS specific settings
-    darwinLaunchOptions = ["--start-as=fullscreen"];
+    darwinLaunchOptions = ["--start-as=maximized"];
   };
 }

home/base/desktop/terminal/wezterm.nix

@@ -0,0 +1,103 @@
+{pkgs, ...}:
+###########################################################
+#
+# Wezterm Configuration
+#
+# Default Keybindings: https://wezfurlong.org/wezterm/config/default-keys.html
+#
+###########################################################
+{
+  # wezterm has catppuccin theme built-in,
+  # it's not necessary to install it separately.
+
+  programs.wezterm =
+    {
+      enable = true;
+
+      extraConfig = let
+        fontsize =
+          if pkgs.stdenv.isDarwin
+          then "14.0"
+          else "13.0";
+      in
+        ''
+          -- Pull in the wezterm API
+          local wezterm = require 'wezterm'
+
+          -- This table will hold the configuration.
+          local config = {}
+
+          -- In newer versions of wezterm, use the config_builder which will
+          -- help provide clearer error messages
+          if wezterm.config_builder then
+            config = wezterm.config_builder()
+          end
+
+          wezterm.on('toggle-opacity', function(window, pane)
+            local overrides = window:get_config_overrides() or {}
+            if not overrides.window_background_opacity then
+              overrides.window_background_opacity = 0.93
+            else
+              overrides.window_background_opacity = nil
+            end
+            window:set_config_overrides(overrides)
+          end)
+
+          wezterm.on('toggle-maximize', function(window, pane)
+            window:maximize()
+          end)
+
+          -- This is where you actually apply your config choices
+          config.color_scheme = "Catppuccin Mocha"
+          config.font = wezterm.font_with_fallback {
+            "JetBrainsMono Nerd Font",
+            "FiraCode Nerd Font",
+
+            -- To avoid 'Chinese characters displayed as variant (Japanese) glyphs'
+            "Source Han Sans SC",
+            "Source Han Sans TC"
+          }
+
+          config.hide_tab_bar_if_only_one_tab = true
+          config.scrollback_lines = 10000
+          config.enable_scroll_bar = true
+
+          config.keys = {
+            -- toggle opacity(CTRL + SHIFT + B)
+            {
+              key = 'B',
+              mods = 'CTRL',
+              action = wezterm.action.EmitEvent 'toggle-opacity',
+            },
+            {
+              key = 'M',
+              mods = 'CTRL',
+              action = wezterm.action.EmitEvent 'toggle-maximize',
+            },
+          }
+
+          config.font_size = ${fontsize}
+        ''
+        + (
+          if pkgs.stdenv.isDarwin
+          then ''
+            -- Spawn a fish shell in login mod
+            config.default_prog = { '/run/current-system/sw/bin/nu', '-l' }
+          ''
+          else ""
+        )
+        + ''
+          return config
+        '';
+    }
+    // (
+      if pkgs.stdenv.isDarwin
+      then {
+        # install wezterm via homebrew on macOS to avoid compilation, dummy package here.
+        package = pkgs.hello;
+        enableBashIntegration = false;
+        enableZshIntegration = false;
+      }
+      else {}
+    );
+}

home/base/server/bat.nix

@@ -1,14 +1,17 @@
-{...}: {
+{ catppuccin-bat, ...}: {
   # a cat(1) clone with syntax highlighting and Git integration.
   programs.bat = {
     enable = true;
     config = {
       pager = "less -FR";
-      theme = "Catppuccin-mocha";
+      theme = "catppuccin-mocha";
     };
     themes = {
       # https://raw.githubusercontent.com/catppuccin/bat/main/Catppuccin-mocha.tmTheme
-      Catppuccin-mocha = builtins.readFile ./Catppuccin-mocha.tmTheme;
+      catppuccin-mocha = {
+        src = catppuccin-bat;
+        file = "Catppuccin-mocha.tmTheme";
+      };
     };
   };
 }

home/base/server/bat/Catppuccin-mocha.tmTheme

@@ -1,959 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-  <dict>
-    <key>name</key>
-    <string>Catppuccin</string>
-    <key>settings</key>
-    <array>
-      <dict>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#cdd6f4</string>
-          <key>background</key>
-          <string>#1e1e2e</string>
-          <key>caret</key>
-          <string>#bac2de</string>
-          <key>invisibles</key>
-          <string>#a6adc8</string>
-          <key>gutterForeground</key>
-          <string>#9399b2</string>
-          <key>gutterForegroundHighlight</key>
-          <string>#a6e3a1</string>
-          <key>lineHighlight</key>
-          <string>#585b70</string>
-          <key>selection</key>
-          <string>#6c7086</string>
-          <key>selectionBorder</key>
-          <string>#1e1e2e</string>
-          <key>activeGuide</key>
-          <string>#fab387</string>
-          <key>findHighlightForeground</key>
-          <string>#181825</string>
-          <key>findHighlight</key>
-          <string>#f9e2af</string>
-          <key>bracketsForeground</key>
-          <string>#9399b2</string>
-          <key>bracketContentsForeground</key>
-          <string>#9399b2</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Comment</string>
-        <key>scope</key>
-        <string>comment</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#6c7086</string>
-          <key>fontStyle</key>
-          <string>italic</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>String</string>
-        <key>scope</key>
-        <string>string</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#a6e3a1</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>String regex</string>
-        <key>scope</key>
-        <string>string.regexp</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#fab387</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Number</string>
-        <key>scope</key>
-        <string>constant.numeric</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#fab387</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Boolean</string>
-        <key>scope</key>
-        <string>constant.language.boolean</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#fab387</string>
-          <key>fontStyle</key>
-          <string>bold italic</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Built-in constant</string>
-        <key>scope</key>
-        <string>constant.language</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#b4befe</string>
-          <key>fontStyle</key>
-          <string>italic</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Built-in function</string>
-        <key>scope</key>
-        <string>support.function.builtin</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#fab387</string>
-          <key>fontStyle</key>
-          <string>italic</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>User-defined constant</string>
-        <key>scope</key>
-        <string>variable.other.constant</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#fab387</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Variable</string>
-        <key>scope</key>
-        <string>variable</string>
-        <key>settings</key>
-        <dict></dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Keyword</string>
-        <key>scope</key>
-        <string>keyword</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#f38ba8</string>
-          <key>fontStyle</key>
-          <string>italic</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Conditional/loop</string>
-        <key>scope</key>
-        <string>keyword.control.loop, keyword.control.conditional, keyword.control.c++</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#cba6f7</string>
-          <key>fontStyle</key>
-          <string>bold</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Return</string>
-        <key>scope</key>
-        <string>keyword.control.return, keyword.control.flow.return</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#f5c2e7</string>
-          <key>fontStyle</key>
-          <string>bold</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Exception</string>
-        <key>scope</key>
-        <string>support.type.exception</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#fab387</string>
-          <key>fontStyle</key>
-          <string>italic</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Operator</string>
-        <key>scope</key>
-        <string>keyword.operator, punctuation.accessor</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#89dceb</string>
-          <key>fontStyle</key>
-          <string>bold</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Punctuation separator</string>
-        <key>scope</key>
-        <string>punctuation.separator</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#94e2d5</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Punctuation terminator</string>
-        <key>scope</key>
-        <string>punctuation.terminator</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#94e2d5</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Punctuation bracket</string>
-        <key>scope</key>
-        <string>punctuation.section</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#9399b2</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Include</string>
-        <key>scope</key>
-        <string>keyword.control.import.include</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#94e2d5</string>
-          <key>fontStyle</key>
-          <string>italic</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Storage</string>
-        <key>scope</key>
-        <string>storage</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#f38ba8</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Storage type</string>
-        <key>scope</key>
-        <string>storage.type</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#f9e2af</string>
-          <key>fontStyle</key>
-          <string>italic</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Storage modifier</string>
-        <key>scope</key>
-        <string>storage.modifier</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#f38ba8</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Storage type namespace</string>
-        <key>scope</key>
-        <string>entity.name.namespace, meta.path</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#f5e0dc</string>
-          <key>fontStyle</key>
-          <string>italic</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Storage type class</string>
-        <key>scope</key>
-        <string>storage.type.class</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#f5e0dc</string>
-          <key>fontStyle</key>
-          <string>italic</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Label</string>
-        <key>scope</key>
-        <string>entity.name.label</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#89b4fa</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Keyword class</string>
-        <key>scope</key>
-        <string>keyword.declaration.class</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#f38ba8</string>
-          <key>fontStyle</key>
-          <string>italic</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Class name</string>
-        <key>scope</key>
-        <string>entity.name.class, meta.toc-list.full-identifier</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#89dceb</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Inherited class</string>
-        <key>scope</key>
-        <string>entity.other.inherited-class</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#89dceb</string>
-          <key>fontStyle</key>
-          <string>italic</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Function name</string>
-        <key>scope</key>
-        <string>entity.name.function, variable.function</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#89b4fa</string>
-          <key>fontStyle</key>
-          <string>italic</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Function macro</string>
-        <key>scope</key>
-        <string>entity.name.function.preprocessor</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#f38ba8</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Macro directive - ifdef</string>
-        <key>scope</key>
-        <string>keyword.control.import</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#f38ba8</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Constructor</string>
-        <key>scope</key>
-        <string>entity.name.function.constructor, entity.name.function.destructor</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#b4befe</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Function argument</string>
-        <key>scope</key>
-        <string>variable.parameter.function</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#f5e0dc</string>
-          <key>fontStyle</key>
-          <string>italic</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Function declaration</string>
-        <key>scope</key>
-        <string>keyword.declaration.function</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#eba0ac</string>
-          <key>fontStyle</key>
-          <string>italic</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Library function</string>
-        <key>scope</key>
-        <string>support.function</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#89dceb</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Library constant</string>
-        <key>scope</key>
-        <string>support.constant</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#89b4fa</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Library class/type</string>
-        <key>scope</key>
-        <string>support.type, support.class</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#89b4fa</string>
-          <key>fontStyle</key>
-          <string>italic</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Library variable</string>
-        <key>scope</key>
-        <string>support.other.variable</string>
-        <key>settings</key>
-        <dict>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Variable function</string>
-        <key>scope</key>
-        <string>variable.function</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#89b4fa</string>
-          <key>fontStyle</key>
-          <string>italic</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Variable parameter</string>
-        <key>scope</key>
-        <string>variable.parameter</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#f5e0dc</string>
-          <key>fontStyle</key>
-          <string>italic</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Variable other</string>
-        <key>scope</key>
-        <string>variable.other</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#cdd6f4</string>
-          <key>fontStyle</key>
-          <string>italic</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Variable field</string>
-        <key>scope</key>
-        <string>variable.other.member</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#f5e0dc</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Variable language</string>
-        <key>scope</key>
-        <string>variable.language</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#94e2d5</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Tag name</string>
-        <key>scope</key>
-        <string>entity.name.tag</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#fab387</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Tag attribute</string>
-        <key>scope</key>
-        <string>entity.other.attribute-name</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#cba6f7</string>
-          <key>fontStyle</key>
-          <string>italic</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Tag delimiter</string>
-        <key>scope</key>
-        <string>punctuation.definition.tag</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#eba0ac</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Markdown URL</string>
-        <key>scope</key>
-        <string>markup.underline.link.markdown</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#f5e0dc</string>
-          <key>fontStyle</key>
-          <string>italic underline</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Markdown reference</string>
-        <key>scope</key>
-        <string>meta.link.inline.description</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#b4befe</string>
-          <key>fontStyle</key>
-          <string>bold</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Markdown literal</string>
-        <key>scope</key>
-        <string>comment.block.markdown, meta.code-fence, markup.raw.code-fence, markup.raw.inline</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#94e2d5</string>
-          <key>fontStyle</key>
-          <string>italic</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Markdown title</string>
-        <key>scope</key>
-        <string>punctuation.definition.heading, entity.name.section</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#89b4fa</string>
-          <key>fontStyle</key>
-          <string>bold</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Markdown emphasis</string>
-        <key>scope</key>
-        <string>markup.italic</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#eba0ac</string>
-          <key>fontStyle</key>
-          <string>italic</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Markdown strong</string>
-        <key>scope</key>
-        <string>markup.bold</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#eba0ac</string>
-          <key>fontStyle</key>
-          <string>bold</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Escape</string>
-        <key>scope</key>
-        <string>constant.character.escape</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#f5c2e7</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Bash built-in function</string>
-        <key>scope</key>
-        <string>source.shell.bash meta.function.shell meta.compound.shell meta.function-call.identifier.shell</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#f5c2e7</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Bash parameter</string>
-        <key>scope</key>
-        <string>variable.language.shell</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#f38ba8</string>
-          <key>fontStyle</key>
-          <string>italic</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Lua field</string>
-        <key>scope</key>
-        <string>source.lua meta.function.lua meta.block.lua meta.mapping.value.lua meta.mapping.key.lua string.unquoted.key.lua</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#b4befe</string>
-          <key>fontStyle</key>
-          <string>italic</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Lua constructor</string>
-        <key>scope</key>
-        <string>source.lua meta.function.lua meta.block.lua meta.mapping.key.lua string.unquoted.key.lua</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#f2cdcd</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Java constant</string>
-        <key>scope</key>
-        <string>entity.name.constant.java</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#94e2d5</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>CSS property</string>
-        <key>scope</key>
-        <string>support.type.property-name.css</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#f2cdcd</string>
-          <key>fontStyle</key>
-          <string>italic</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>CSS constant</string>
-        <key>scope</key>
-        <string>support.constant.property-value.css</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#cdd6f4</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>CSS suffix</string>
-        <key>scope</key>
-        <string>constant.numeric.suffix.css, keyword.other.unit.css</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#94e2d5</string>
-          <key>fontStyle</key>
-          <string>italic</string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>CSS variable property</string>
-        <key>scope</key>
-        <string>variable.other.custom-property.name.css, support.type.custom-property.name.css, punctuation.definition.custom-property.css</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#94e2d5</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>SCSS tag</string>
-        <key>scope</key>
-        <string>entity.name.tag.css</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#b4befe</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>SASS variable</string>
-        <key>scope</key>
-        <string>variable.other.sass</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#94e2d5</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Invalid</string>
-        <key>scope</key>
-        <string>invalid</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#cdd6f4</string>
-          <key>background</key>
-          <string>#f38ba8</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Invalid deprecated</string>
-        <key>scope</key>
-        <string>invalid.deprecated</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#cdd6f4</string>
-          <key>background</key>
-          <string>#cba6f7</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Diff header</string>
-        <key>scope</key>
-        <string>meta.diff, meta.diff.header</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#6c7086</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Diff deleted</string>
-        <key>scope</key>
-        <string>markup.deleted</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#f38ba8</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Diff inserted</string>
-        <key>scope</key>
-        <string>markup.inserted</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#a6e3a1</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Diff changed</string>
-        <key>scope</key>
-        <string>markup.changed</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#f9e2af</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-      <dict>
-        <key>name</key>
-        <string>Message error</string>
-        <key>scope</key>
-        <string>message.error</string>
-        <key>settings</key>
-        <dict>
-          <key>foreground</key>
-          <string>#f38ba8</string>
-          <key>fontStyle</key>
-          <string></string>
-        </dict>
-      </dict>
-    </array>
-    <key>uuid</key>
-    <string>4d0379b5-ef82-467b-b8b8-365889420646</string>
-    <key>colorSpaceName</key>
-    <string>sRGB</string>
-    <key>semanticClass</key>
-    <string>theme.dark.Catppuccin</string>
-    <key>author</key>
-    <string>BrunDerSchwarzmagier</string>
-  </dict>
-</plist>

home/base/server/btop.nix

@@ -0,0 +1,15 @@
+{ catppuccin-btop, ... }:
+
+{
+  # https://github.com/catppuccin/btop/blob/main/themes/catppuccin_mocha.theme
+  home.file.".config/btop/themes".source = "${catppuccin-btop}/themes";
+
+  # replacement of htop/nmon
+  programs.btop = {
+    enable = true;
+    settings = {
+        color_theme = "catppuccin_mocha";
+        theme_background = false;   # make btop transparent 
+    };
+  };
+}

home/base/server/core.nix

@@ -1,7 +1,7 @@
 {pkgs, ...}: {
   home.packages = with pkgs; [
     neofetch
-    nnn # terminal file manager
+    ranger # terminal file manager(batteries included, with image preview support)
 
     # archives
     zip
@@ -9,12 +9,6 @@
     unzip
     p7zip
 
-    # utils
-    ripgrep # recursively searches directories for a regex pattern
-    jq # A lightweight and flexible command-line JSON processor
-    yq-go # yaml processer https://github.com/mikefarah/yq
-    fzf # A command-line fuzzy finder
-
     # networking tools
     mtr # A network diagnostic tool
     iperf3
@@ -25,14 +19,28 @@
     nmap # A utility for network discovery and security auditing
     ipcalc # it is a calculator for the IPv4/v6 addresses
 
+
+    # Text Processing
+    # Docs: https://github.com/learnbyexample/Command-line-text-processing
+    gnugrep  # GNU grep, provides `grep`/`egrep`/`fgrep`
+    gnused  # GNU sed, very powerful(mainly for replacing text in files)
+    gawk   # GNU awk, a pattern scanning and processing language
+    ripgrep # recursively searches directories for a regex pattern
+    sad  # CLI search and replace, with diff preview, really useful!!!
+    delta  # A viewer for git and diff output
+    # A fast and polyglot tool for code searching, linting, rewriting at large scale
+    # supported languages: only some mainstream languages currently(do not support nix/nginx/yaml/toml/...)
+    ast-grep
+    jq # A lightweight and flexible command-line JSON processor
+    yq-go # yaml processer https://github.com/mikefarah/yq
+
     # misc
+    tldr
     cowsay
     file
     which
     tree
-    gnused
     gnutar
-    gawk
     zstd
     caddy
     gnupg
@@ -59,13 +67,34 @@
 
     # A modern replacement for ‘ls’
     # useful in bash/zsh prompt, not in nushell.
-    exa = {
+    eza = {
       enable = true;
       enableAliases = true;
       git = true;
       icons = true;
     };
 
+    # A command-line fuzzy finder
+    fzf = {
+      enable = true;
+      # https://github.com/catppuccin/fzf
+      # catppuccin-mocha
+      colors = {
+        "bg+" = "#313244"; 
+        "bg" = "#1e1e2e";
+        "spinner" = "#f5e0dc";
+        "hl" = "#f38ba8";
+        "fg" = "#cdd6f4";
+        "header" = "#f38ba8";
+        "info" = "#cba6f7";
+        "pointer" = "#f5e0dc";
+        "marker" = "#f5e0dc";
+        "fg+" = "#cdd6f4";
+        "prompt" = "#cba6f7";
+        "hl+" = "#f38ba8";
+      };
+    };
+
     # skim provides a single executable: sk.
     # Basically anywhere you would want to use grep, try sk instead.
     skim = {

home/base/server/default.nix

@@ -1,11 +1,12 @@
 {...}: {
   imports = [
-    ./bat
     ./nushell
     ./tmux
     ./zellij
 
     ./bash.nix
+    ./bat.nix
+    ./btop.nix
     ./core.nix
     ./git.nix
     ./starship.nix

home/base/server/git.nix

@@ -15,6 +15,9 @@
     rm -f ~/.gitconfig
   '';
 
+  home.packages = with pkgs; [
+  ];
+
   programs.git = {
     enable = true;
     lfs.enable = true;
@@ -37,15 +40,15 @@
 
       # replace https with ssh
       url = {
-        "ssh://git@github.com/" = {
-          insteadOf = "https://github.com/";
-        };
-        "ssh://git@gitlab.com/" = {
-          insteadOf = "https://gitlab.com/";
-        };
-        "ssh://git@bitbucket.com/" = {
-          insteadOf = "https://bitbucket.com/";
+        "ssh://git@github.com/ryan4yin" = {
+          insteadOf = "https://github.com/ryan4yin";
         };
+        # "ssh://git@gitlab.com/" = {
+        #   insteadOf = "https://gitlab.com/";
+        # };
+        # "ssh://git@bitbucket.com/" = {
+        #   insteadOf = "https://bitbucket.com/";
+        # };
       };
     };
 
@@ -54,10 +57,15 @@
     #   signByDefault = true;
     # };
 
+    # A syntax-highlighting pager in Rust(2019 ~ Now)
     delta = {
       enable = true;
       options = {
-        features = "side-by-side";
+        diff-so-fancy = true;
+        line-numbers = true;
+        true-color = "always";
+        # features => named groups of settings, used to keep related settings organized
+        # features = "";
       };
     };
 
@@ -68,10 +76,21 @@
       st = "status";
       ls = "log --pretty=format:\"%C(yellow)%h%Cred%d\\\\ %Creset%s%Cblue\\\\ [%cn]\" --decorate";
       ll = "log --pretty=format:\"%C(yellow)%h%Cred%d\\\\ %Creset%s%Cblue\\\\ [%cn]\" --decorate --numstat";
-      cm = "commit -m";
-      ca = "commit -am";
+      cm = "commit -m";  # commit via `git cm <message>`
+      ca = "commit -am";  # commit all changes via `git ca <message>`
       dc = "diff --cached";
-      amend = "commit --amend -m";
+
+      amend = "commit --amend -m";  # amend commit message via `git amend <message>`
+      unstage = "reset HEAD --";  # unstage file via `git unstage <file>`
+      merged = "branch --merged";  # list merged(into HEAD) branches via `git merged`
+      unmerged = "branch --no-merged";  # list unmerged(into HEAD) branches via `git unmerged`
+      nonexist = "remote prune origin --dry-run";  # list non-exist(remote) branches via `git nonexist`
+
+      # delete merged branches except master & dev & staging
+      #  `!` indicates it's a shell script, not a git subcommand
+      delmerged = ''! git branch --merged | egrep -v "(^\*|main|master|dev|staging)" | xargs git branch -d'';
+      # delete non-exist(remote) branches
+      delnonexist = "remote prune origin";
 
       # aliases for submodule
       update = "submodule update --init --recursive";

home/base/server/nushell/config.nu

@@ -2,8 +2,79 @@
 #
 # version = 0.81.1
 
+# let's define some colors
+
+# https://github.com/catppuccin/i3/blob/main/themes/catppuccin-mocha
+let rosewater = "#f5e0dc"
+let flamingo  = "#f2cdcd"
+let pink      = "#f5c2e7"
+let mauve     = "#cba6f7"
+let red       = "#f38ba8"
+let maroon    = "#eba0ac"
+let peach     = "#fab387"
+let green     = "#a6e3a1"
+let teal      = "#94e2d5"
+let sky       = "#89dceb"
+let sapphire  = "#74c7ec"
+let blue      = "#89b4fa"
+let lavender  = "#b4befe"
+let text      = "#cdd6f4"
+let subtext1  = "#bac2de"
+let subtext0  = "#a6adc8"
+let overlay2  = "#9399b2"
+let overlay1  = "#7f849c"
+let overlay0  = "#6c7086"
+let surface2  = "#585b70"
+let surface1  = "#45475a"
+let surface0  = "#313244"
+let base      = "#1e1e2e"
+let mantle    = "#181825"
+let crust     = "#11111b"
+
+# we're creating a theme here that uses the colors we defined above.
+
+let catppuccin_theme = {
+    separator: $overlay2
+    leading_trailing_space_bg: $surface2
+    header: $red
+    date: $pink
+    filesize: $green
+    row_index: $text
+    bool: $peach
+    int: $red
+    duration: $sky
+    range: $sapphire
+    float: $lavender
+    string: $text
+    nothing: $overlay1
+    binary: $subtext1
+    cellpath: $subtext0
+    hints: dark_gray
+
+    shape_garbage: { fg: $overlay2 bg: $red attr: b}
+    shape_bool: $maroon
+    shape_int: { fg: $pink attr: b}
+    shape_float: { fg: $pink attr: b}
+    shape_range: { fg: $overlay0 attr: b}
+    shape_internalcall: { fg: $maroon attr: b}
+    shape_external: $mauve
+    shape_externalarg: { fg: $red attr: b}
+    shape_literal: $flamingo
+    shape_operator: $rosewater
+    shape_signature: { fg: $red attr: b}
+    shape_string: $red
+    shape_filepath: $peach
+    shape_globpattern: { fg: $teal attr: b}
+    shape_variable: $pink
+    shape_flag: { fg: $mauve attr: b}
+    shape_custom: {attr: b}
+}
+
 # The default config record. This is where much of your global configuration is setup.
-let-env config = {
+$env.config = {
+  color_config: $catppuccin_theme  # <-- this is the theme
+  use_ansi_coloring: true
+
   # true or false to enable or disable the welcome banner at startup
   show_banner: false
   
@@ -42,7 +113,6 @@ let-env config = {
   footer_mode: "25" # always, never, number_of_rows, auto
   float_precision: 2 # the precision for displaying floats in tables
   # buffer_editor: "emacs" # command that will be used to edit the current line buffer with ctrl+o, if unset fallback to $env.EDITOR and $env.VISUAL
-  use_ansi_coloring: true
   bracketed_paste: true # enable bracketed paste, currently useless on windows
   edit_mode: emacs # emacs, vi
   shell_integration: true # enables terminal markers and a workaround to arrow keys stop working issue

home/base/server/nushell/default.nix

@@ -1,8 +1,18 @@
-{...}: {
+{ config, ...}: {
   programs.nushell = {
     enable = true;
     configFile.source = ./config.nu;
 
+    extraConfig = ''
+      $env.PATH = ([
+        "${config.home.homeDirectory}/bin"
+        "${config.home.homeDirectory}/.local/bin"
+        "${config.home.homeDirectory}/go/bin"
+
+        ($env.PATH | split row (char esep))
+      ] | flatten)
+    '';
+
     # home-manager will merge the cotent in `environmentVariables` with the `envFile.source`
     # but basically, I set all environment variables via the shell-independent way, so I don't need to use those two options
     #

home/base/server/starship.nix

@@ -1,4 +1,4 @@
-{...}: {
+{ catppuccin-starship, ...}: {
   programs.starship = {
     enable = true;
 
@@ -20,6 +20,8 @@
         format = "on [$symbol$active(\($region\))]($style) ";
         symbol = "🅶 ️";
       };
-    };
+
+      palette = "catppuccin_mocha";
+    } // builtins.fromTOML (builtins.readFile "${catppuccin-starship}/palettes/mocha.toml");
   };
 }

home/darwin/README.md

@@ -0,0 +1,7 @@
+# Home Manager's Darwin Submodules
+
+1. `core.nix`: some basic configuration.
+2. `nushell.nix`: nushell's configuration for darwin.
+3. `rime-squirrel.nix`: [rime-squirrel](https://github.com/rime/squirrel)'s configuration.
+4. `default.nix`: the entrypoint of darwin's configuration, it import all the submodules above.
+

home/darwin/core.nix

@@ -40,10 +40,5 @@
         # required to prevent sending default identity files first.
         IdentitiesOnly yes
     '';
-
-    # use ssh-agent so we only need to input passphrase once
-    # run `ssh-add /path/to/key` for every identity file
-    # check imported keys by `ssh-add -l`
-    # TODO `ssh-add` can only add keys temporary, use gnome-keyring to unlock all keys after login.
   };
 }

home/darwin/default.nix

@@ -2,6 +2,8 @@
   imports = [
     ../base/desktop
     
+    ./proxychains
+
     ./core.nix
     ./nushell.nix
     ./rime-squirrel.nix

home/darwin/nushell.nix

@@ -2,7 +2,7 @@
   # nix-darwin do not set PATH for nushell! so we need to do it manually
   # this is a workaround to add nix's PATH to nushell
   programs.nushell.extraConfig = ''
-    let-env PATH = ([
+    $env.PATH = ([
       "${config.home.homeDirectory}/bin"
       "${config.home.homeDirectory}/.local/bin"
       "${config.home.homeDirectory}/go/bin"

home/darwin/proxychains/default.nix

@@ -0,0 +1,3 @@
+{
+  home.file.".proxychains/proxychains.conf".source = ./proxychains.conf;
+}

home/darwin/proxychains/proxychains.conf

@@ -0,0 +1,161 @@
+
+# proxychains.conf  VER 4.x
+#
+#        HTTP, SOCKS4a, SOCKS5 tunneling proxifier with DNS.
+
+
+# The option below identifies how the ProxyList is treated.
+# only one option should be uncommented at time,
+# otherwise the last appearing option will be accepted
+#
+#dynamic_chain
+#
+# Dynamic - Each connection will be done via chained proxies
+# all proxies chained in the order as they appear in the list
+# at least one proxy must be online to play in chain
+# (dead proxies are skipped)
+# otherwise EINTR is returned to the app
+#
+strict_chain
+#
+# Strict - Each connection will be done via chained proxies
+# all proxies chained in the order as they appear in the list
+# all proxies must be online to play in chain
+# otherwise EINTR is returned to the app
+#
+#round_robin_chain
+#
+# Round Robin - Each connection will be done via chained proxies
+# of chain_len length
+# all proxies chained in the order as they appear in the list
+# at least one proxy must be online to play in chain
+# (dead proxies are skipped).
+# the start of the current proxy chain is the proxy after the last
+# proxy in the previously invoked proxy chain.
+# if the end of the proxy chain is reached while looking for proxies
+# start at the beginning again.
+# otherwise EINTR is returned to the app
+# These semantics are not guaranteed in a multithreaded environment.
+#
+#random_chain
+#
+# Random - Each connection will be done via random proxy
+# (or proxy chain, see  chain_len) from the list.
+# this option is good to test your IDS :)
+
+# Make sense only if random_chain or round_robin_chain
+#chain_len = 2
+
+# Quiet mode (no output from library)
+#quiet_mode
+
+## Proxy DNS requests - no leak for DNS data
+# (disable all of the 3 items below to not proxy your DNS requests)
+
+# method 1. this uses the proxychains4 style method to do remote dns:
+# a thread is spawned that serves DNS requests and hands down an ip
+# assigned from an internal list (via remote_dns_subnet).
+# this is the easiest (setup-wise) and fastest method, however on
+# systems with buggy libcs and very complex software like webbrowsers
+# this might not work and/or cause crashes.
+proxy_dns
+
+# method 2. use the old proxyresolv script to proxy DNS requests
+# in proxychains 3.1 style. requires `proxyresolv` in $PATH
+# plus a dynamically linked `dig` binary.
+# this is a lot slower than `proxy_dns`, doesn't support .onion URLs,
+# but might be more compatible with complex software like webbrowsers.
+#proxy_dns_old
+
+# method 3. use proxychains4-daemon process to serve remote DNS requests.
+# this is similar to the threaded `proxy_dns` method, however it requires
+# that proxychains4-daemon is already running on the specified address.
+# on the plus side it doesn't do malloc/threads so it should be quite
+# compatible with complex, async-unsafe software.
+# note that if you don't start proxychains4-daemon before using this,
+# the process will simply hang.
+#proxy_dns_daemon 127.0.0.1:1053
+
+# set the class A subnet number to use for the internal remote DNS mapping
+# we use the reserved 224.x.x.x range by default,
+# if the proxified app does a DNS request, we will return an IP from that range.
+# on further accesses to this ip we will send the saved DNS name to the proxy.
+# in case some control-freak app checks the returned ip, and denies to 
+# connect, you can use another subnet, e.g. 10.x.x.x or 127.x.x.x.
+# of course you should make sure that the proxified app does not need
+# *real* access to this subnet. 
+# i.e. dont use the same subnet then in the localnet section
+#remote_dns_subnet 127 
+#remote_dns_subnet 10
+remote_dns_subnet 224
+
+# Some timeouts in milliseconds
+tcp_read_time_out 15000
+tcp_connect_time_out 8000
+
+### Examples for localnet exclusion
+## localnet ranges will *not* use a proxy to connect.
+## note that localnet works only when plain IP addresses are passed to the app,
+## the hostname resolves via /etc/hosts, or proxy_dns is disabled or proxy_dns_old used.
+
+## Exclude connections to 192.168.1.0/24 with port 80
+# localnet 192.168.1.0:80/255.255.255.0
+
+## Exclude connections to 192.168.100.0/24
+# localnet 192.168.100.0/255.255.255.0
+
+## Exclude connections to ANYwhere with port 80
+# localnet 0.0.0.0:80/0.0.0.0
+# localnet [::]:80/0
+
+## RFC6890 Loopback address range
+## if you enable this, you have to make sure remote_dns_subnet is not 127
+## you'll need to enable it if you want to use an application that 
+## connects to localhost.
+# localnet 127.0.0.0/255.0.0.0
+# localnet ::1/128
+
+## RFC1918 Private Address Ranges
+# localnet 10.0.0.0/255.0.0.0
+# localnet 172.16.0.0/255.240.0.0
+# localnet 192.168.0.0/255.255.0.0
+
+### Examples for dnat
+## Trying to proxy connections to destinations which are dnatted,
+## will result in proxying connections to the new given destinations.
+## Whenever I connect to 1.1.1.1 on port 1234 actually connect to 1.1.1.2 on port 443
+# dnat 1.1.1.1:1234  1.1.1.2:443
+
+## Whenever I connect to 1.1.1.1 on port 443 actually connect to 1.1.1.2 on port 443
+## (no need to write :443 again)
+# dnat 1.1.1.2:443  1.1.1.2
+
+## No matter what port I connect to on 1.1.1.1 port actually connect to 1.1.1.2 on port 443
+# dnat 1.1.1.1  1.1.1.2:443
+
+## Always, instead of connecting to 1.1.1.1, connect to 1.1.1.2
+# dnat 1.1.1.1  1.1.1.2
+
+# ProxyList format
+#       type  ip  port [user pass]
+#       (values separated by 'tab' or 'blank')
+#
+#       only numeric ipv4 addresses are valid
+#
+#
+#        Examples:
+#
+#            	socks5	192.168.67.78	1080	lamer	secret
+#		http	192.168.89.3	8080	justu	hidden
+#	 	socks4	192.168.1.49	1080
+#	        http	192.168.39.93	8080	
+#		
+#
+#       proxy types: http, socks4, socks5, raw
+#         * raw: The traffic is simply forwarded to the proxy without modification.
+#        ( auth types supported: "basic"-http  "user/pass"-socks )
+#
+[ProxyList]
+# add proxy here ...
+# set to clash's http/socks5 port
+socks5 	127.0.0.1 7890

home/linux/README.md

@@ -0,0 +1,13 @@
+# Home Manager's Linux Submodules
+
+1. `base`: The base module that is suitable for any NixOS environment.
+2. `desktop`: Configuration for desktop environments, such as Hyprland, I3, etc.
+3. `fcitx5`: fcitx5's configuration(Chinese input method).
+4. `hyprland`: Hyprland's configuration.
+5. `i3`: i3's configuration.
+6. `server.nix`: Configuration which is suitable for both servers and desktops. It import only `base` as its submodule.
+    1. used by all my nixos servers.
+6. `desktop-hyprland.nix`: the entrypoint of hyprland's configuration, it import all the submodules above, except `i3`.
+    1. used by my hyprland desktop.
+7. `desktop-i3.nix`: the entrypoint of i3's configuration, it import all the submodules above, except `hyprland`.
+    1. used by my i3 desktop.

home/linux/base/shell.nix

@@ -1,4 +1,4 @@
-{config, ...}: let
+{config, nushell-scripts, ...}: let
   d = config.xdg.dataHome;
   c = config.xdg.configHome;
   cache = config.xdg.cacheHome;

home/linux/base/system-tools.nix

@@ -1,8 +1,14 @@
 {pkgs, ...}: {
   # Linux Only Packages, not available on Darwin
   home.packages = with pkgs; [
-    btop # replacement of htop/nmon
-    htop
+    # Automatically trims your branches whose tracking remote refs are merged or gone
+    # It's really useful when you work on a project for a long time.
+    git-trim
+
+    # cloud tools that nix do not have cache for.
+    terraform
+    terraformer # generate terraform configs from existing cloud resources
+
     nmon
     iotop
     iftop
@@ -19,6 +25,8 @@
     # system call monitoring
     strace # system call monitoring
     ltrace # library call monitoring
+    bpftrace # powerful tracing tool
+    tcpdump  # network sniffer
     lsof # list open files
 
     # system tools

home/linux/desktop/creative.nix

@@ -1,4 +1,9 @@
-{pkgs, ...}: {
+{
+  pkgs,
+  pkgs-unstable,
+  nur-ryan4yin,
+  ...
+}: {
   home.packages = with pkgs; [
     # creative
     # blender   # 3d modeling
@@ -6,10 +11,18 @@
     inkscape # vector graphics
     krita # digital painting
     musescore # music notation
-    reaper # audio production
+    # reaper # audio production
+    pkgs-unstable.sonic-pi # music programming
 
     # this app consumes a lot of storage, so do not install it currently
     # kicad     # 3d printing, eletrical engineering
+
+    # fpga
+    pkgs-unstable.python311Packages.apycula # gowin fpga
+    pkgs-unstable.yosys # fpga synthesis
+    pkgs-unstable.nextpnr # fpga place and route
+    pkgs-unstable.openfpgaloader # fpga programming
+    nur-ryan4yin.packages.${pkgs.system}.gowin-eda-edu-ide  # app: `gowin-env` => `gw_ide` / `gw_pack` / ...
   ];
 
   programs = {

home/linux/desktop/default.nix

@@ -1,9 +1,11 @@
 {pkgs, ...}: {
   imports = [
     ./creative.nix
+    ./gtk.nix
     ./immutable-file.nix
     ./media.nix
     ./ssh.nix
+    ./wallpaper.nix
     ./xdg.nix
   ];
 
@@ -27,6 +29,7 @@
 
     # misc
     flameshot
+    mitmproxy # http/https proxy tool
   ];
 
   # GitHub CLI tool

home/linux/desktop/gtk.nix

@@ -0,0 +1,52 @@
+{
+  pkgs,
+  config,
+  ...
+}: {
+  home.pointerCursor = {
+    package = pkgs.bibata-cursors;
+    name = "Bibata-Modern-Classic";
+    size = 24;
+    gtk.enable = true;
+    x11.enable = true;
+  };
+
+  # set dpi for 4k monitor
+  xresources.properties = {
+    # dpi for Xorg's font
+    "Xft.dpi" = 150;
+    # or set a generic dpi
+    "*.dpi" = 150;
+  };
+
+  # gtk's theme settings, generate files: 
+  #   1. ~/.gtkrc-2.0
+  #   2. ~/.config/gtk-3.0/settings.ini
+  #   3. ~/.config/gtk-4.0/settings.ini
+  gtk = {
+    enable = true;
+
+    font = {
+      name = "Roboto";
+      package = pkgs.roboto;
+    };
+
+    gtk2.configLocation = "${config.xdg.configHome}/gtk-2.0/gtkrc";
+
+    iconTheme = {
+      name = "Papirus-Dark";
+      package = pkgs.papirus-icon-theme;
+    };
+
+    theme = {
+      # https://github.com/catppuccin/gtk
+      name = "Catppuccin-Macchiato-Compact-Pink-dark";
+      package = pkgs.catppuccin-gtk.override {
+        # https://github.com/NixOS/nixpkgs/blob/nixos-23.05/pkgs/data/themes/catppuccin-gtk/default.nix
+        accents = [ "pink" ];
+        size = "compact";
+        variant = "mocha";
+      };
+    };
+  };
+}

home/linux/desktop/media.nix

@@ -1,6 +1,7 @@
 {
   pkgs,
-  config,
+  catppuccin-cava,
+  nur-ryan4yin,
   ...
 }:
 # media - control and enjoy audio/video
@@ -15,12 +16,20 @@
     nvtop
 
     # video/audio tools
+    cava # for visualizing audio
     libva-utils
     vdpauinfo
     vulkan-tools
     glxinfo
+
+    nur-ryan4yin.packages.${pkgs.system}.yazi  # terminal file manager
   ];
 
+  # https://github.com/catppuccin/cava
+  home.file.".config/cava/config".text = ''
+    # custom cava config
+  '' + builtins.readFile "${catppuccin-cava}/mocha.cava";
+
   programs = {
     mpv = {
       enable = true;

home/linux/desktop/ssh.nix

@@ -41,11 +41,24 @@
       Host s500plus
         HostName 192.168.5.174
         Port 22
-    '';
 
-    # use ssh-agent so we only need to input passphrase once
-    # run `ssh-add /path/to/key` for every identity file
-    # check imported keys by `ssh-add -l`
-    # TODO `ssh-add` can only add keys temporary, use gnome-keyring to unlock all keys after login.
+      Host k8s-main
+        HostName 192.168.5.181
+        ForwardAgent yes
+        IdentityFile ~/.ssh/romantic
+        IdentitiesOnly yes
+
+      Host k8s-data1
+        HostName 192.168.5.182
+        ForwardAgent yes
+        IdentityFile ~/.ssh/romantic
+        IdentitiesOnly yes
+
+      Host k8s-data2
+        HostName 192.168.5.183
+        ForwardAgent yes
+        IdentityFile ~/.ssh/romantic
+        IdentitiesOnly yes
+    '';
   };
 }

home/linux/desktop/wallpaper.nix

@@ -0,0 +1,10 @@
+{ wallpapers, ... }:
+
+{
+  # https://github.com/ryan4yin/wallpapers
+  home.file.".config/wallpapers".source = wallpapers;
+  home.file.".local/bin/wallpaper_random" = {
+    source = "${wallpapers}/wallpaper_random.py";
+    executable = true;
+  };
+}

home/linux/fcitx5/classicui.conf

@@ -0,0 +1,26 @@
+# Vertical Candidate List
+Vertical Candidate List=False
+# Use Per Screen DPI
+PerScreenDPI=True
+# Use mouse wheel to go to prev or next page
+WheelForPaging=True
+# Font
+Font="Sans 10"
+# Menu Font
+MenuFont="Sans 10"
+# Tray Font
+TrayFont="Sans Bold 10"
+# Tray Label Outline Color
+TrayOutlineColor=#000000
+# Tray Label Text Color
+TrayTextColor=#ffffff
+# Prefer Text Icon
+PreferTextIcon=False
+# Show Layout Name In Icon
+ShowLayoutNameInIcon=True
+# Use input method language to display text
+UseInputMethodLangaugeToDisplayText=True
+# Theme macchiato, frappe, latte, mocha
+Theme=catppuccin-mocha
+# Force font DPI on Wayland
+ForceWaylandDPI=0

home/linux/fcitx5/default.nix

@@ -2,10 +2,14 @@
   pkgs,
   config,
   lib,
+  catppuccin-fcitx5,
   ...
 }: {
   home.file.".config/fcitx5/profile".source = ./profile;
-  home.file.".config/fcitx5/profile-bak".source = ./profile; # used for backup
+
+  # color schema
+  home.file.".local/share/fcitx5/themes".source = "${catppuccin-fcitx5}/src";
+  home.file.".config/fcitx5/conf/classicui.conf".source = ./classicui.conf;
 
   # every time fcitx5 switch input method, it will modify ~/.config/fcitx5/profile file,
   # which will override my config managed by home-manager
@@ -26,14 +30,4 @@
       fcitx5-gtk # gtk im module
     ];
   };
-
-  systemd.user.sessionVariables = {
-    # copy from  https://github.com/nix-community/home-manager/blob/master/modules/i18n/input-method/fcitx5.nix
-    GLFW_IM_MODULE = "fcitx";
-    GTK_IM_MODULE = "fcitx";
-    QT_IM_MODULE = "fcitx";
-    XMODIFIERS = "@im=fcitx";
-    INPUT_METHOD = "fcitx";
-    IMSETTINGS_MODULE = "fcitx";
-  };
 }

home/linux/hyprland/anyrun.nix

@@ -0,0 +1,87 @@
+{ pkgs, anyrun, ... }:
+
+{
+  imports = [
+    anyrun.homeManagerModules.default
+  ];
+
+  programs.anyrun = {
+    enable = true;
+    config = {
+      plugins = with anyrun.packages.${pkgs.system}; [
+        applications
+        randr
+        rink
+        shell
+        symbols
+        translate
+      ];
+
+      width.fraction = 0.3;
+      y.absolute = 15;
+      hidePluginInfo = true;
+      closeOnClick = true;
+    };
+
+    # custom css for anyrun, based on catppuccin-mocha
+    extraCss = ''
+      @define-color bg-col  rgba(30, 30, 46, 0.7);
+      @define-color bg-col-light rgba(150, 220, 235, 0.7);
+      @define-color border-col rgba(30, 30, 46, 0.7);
+      @define-color selected-col rgba(150, 205, 251, 0.7);
+      @define-color fg-col #D9E0EE;
+      @define-color fg-col2 #F28FAD;
+
+      * {
+        transition: 200ms ease;
+        font-family: "JetBrainsMono Nerd Font";
+        font-size: 1.3rem;
+      }
+
+      #window {
+        background: transparent;
+      }
+
+      #plugin,
+      #main {
+        border: 3px solid @border-col;
+        color: @fg-col;
+        background-color: @bg-col;
+      }
+      /* anyrun's input window - Text */
+      #entry {
+        color: @fg-col;
+        background-color: @bg-col;
+      }
+
+      /* anyrun's ouput matches entries - Base */
+      #match {
+        color: @fg-col;
+        background: @bg-col;
+      }
+
+      /* anyrun's selected entry - Red */
+      #match:selected {
+        color: @fg-col2;
+        background: @selected-col;
+      }
+
+      #match {
+        padding: 3px;
+        border-radius: 16px;
+      }
+
+      #entry, #plugin:hover {
+        border-radius: 16px;
+      }
+
+      box#main {
+        background: rgba(30, 30, 46, 0.7);
+        border: 1px solid @border-col;
+        border-radius: 15px;
+        padding: 5px;
+      }
+    '';
+  };
+
+}

home/linux/hyprland/default.nix

@@ -1,12 +1,12 @@
-{pkgs, ...}: {
+{pkgs, hyprland, catppuccin-hyprland, ...}: {
   imports = [
+    # hyprland.homeManagerModules.default
+
+    ./anyrun.nix
     ./wayland-apps.nix
   ];
 
-  # Only available on home-manager's master branch(2023/7/25)
-  # wayland.windowManager.hyprland = {
-  #   enable = true;
-  # };
+  # wayland.windowManager.hyprland.enable = true;
 
   # hyprland configs, based on https://github.com/notwidow/hyprland
   home.file.".config/hypr" = {
@@ -14,12 +14,7 @@
     # copy the scripts directory recursively
     recursive = true;
   };
-  home.file.".config/gtk-3.0" = {
-    source = ./gtk-3.0;
-    recursive = true;
-  };
-  home.file.".gtkrc-2.0".source = ./gtkrc-2.0;
-  home.file.".config/hypr/wallpapers/wallpaper.png".source = ../wallpapers/wallpaper.png;
+  home.file.".config/hypr/themes".source = "${catppuccin-hyprland}/themes";
 
   # music player - mpd
   home.file.".config/mpd" = {
@@ -44,16 +39,4 @@
     "WLR_EGL_NO_MODIFIRES" = "1";
   };
 
-  # this is for xwayland
-  # set dpi for 4k monitor
-  xresources.properties = {
-    "Xft.dpi" = 162;
-  };
-
-  # set Xcursor.theme & Xcursor.size in ~/.Xresources automatically
-  home.pointerCursor = {
-    name = "Qogir-dark";
-    package = pkgs.qogir-theme;
-    size = 64;
-  };
 }

home/linux/hyprland/gtk-3.0/settings.ini

@@ -1,16 +0,0 @@
-[Settings]
-gtk-theme-name=Arc-Dark
-gtk-icon-theme-name=Qogir-dark
-gtk-font-name=Noto Sans 10
-gtk-cursor-theme-name=Qogir-dark
-gtk-cursor-theme-size=64
-gtk-toolbar-style=GTK_TOOLBAR_BOTH_HORIZ
-gtk-toolbar-icon-size=GTK_ICON_SIZE_LARGE_TOOLBAR
-gtk-button-images=0
-gtk-menu-images=0
-gtk-enable-event-sounds=1
-gtk-enable-input-feedback-sounds=1
-gtk-xft-antialias=1
-gtk-xft-hinting=1
-gtk-xft-hintstyle=hintmedium
-gtk-xft-rgba=rgb

home/linux/hyprland/gtkrc-2.0

@@ -1,19 +0,0 @@
-# DO NOT EDIT! This file will be overwritten by LXAppearance.
-# Any customization should be done in ~/.gtkrc-2.0.mine instead.
-
-include "~/.gtkrc-2.0.mine"
-gtk-theme-name="Arc-Dark"
-gtk-icon-theme-name="Qogir-dark"
-gtk-font-name="Noto Sans 10"
-gtk-cursor-theme-name="Qogir-dark"
-gtk-cursor-theme-size=64
-gtk-toolbar-style=GTK_TOOLBAR_BOTH_HORIZ
-gtk-toolbar-icon-size=GTK_ICON_SIZE_LARGE_TOOLBAR
-gtk-button-images=0
-gtk-menu-images=0
-gtk-enable-event-sounds=1
-gtk-enable-input-feedback-sounds=1
-gtk-xft-antialias=1
-gtk-xft-hinting=1
-gtk-xft-hintstyle="hintmedium"
-gtk-xft-rgba="rgb"

home/linux/hyprland/hypr-conf/hyprland.conf

@@ -1,5 +1,13 @@
 ## Hyprland configuration file
 
+# color-scheme: cappuccin-mocha
+source=~/.config/hypr/themes/mocha.conf
+
+env = _JAVA_AWT_WM_NONREPARENTING,1
+env = QT_WAYLAND_DISABLE_WINDOWDECORATION,1
+# fix https://github.com/hyprwm/Hyprland/issues/1520
+env = WLR_NO_HARDWARE_CURSORS,1
+
 #-- Output ----------------------------------------------------
 # Configure your Display resolution, offset, scale and Monitors here, use `hyprctl monitors` to get the info.
 
@@ -42,16 +50,17 @@ general {
 # Decoration settings like Rounded Corners, Opacity, Blur, etc.
 decoration {
     rounding=8       # Original: rounding=-1
-    multisample_edges=0
 
     active_opacity=1.0
     inactive_opacity=0.9
     fullscreen_opacity=1.0
 
-    blur=0
-    blur_size=3 			# minimum 1
-    blur_passes=1 			# minimum 1, more passes = more resource intensive.
-    blur_ignore_opacity=0
+    blur {
+        enabled=true
+        size=3                	# minimum 1
+        passes=1                # minimum 1, more passes = more resource intensive.
+        ignore_opacity=false
+    }
 
     # Your blur "amount" is blur_size * blur_passes, but high blur_size (over around 5-ish) will produce artifacts.
     # if you want heavy blur, you need to up the blur_passes.
@@ -100,13 +109,12 @@ $lockscreen = ~/.config/hypr/scripts/lockscreen
 $wlogout = ~/.config/hypr/scripts/wlogout
 $colorpicker = ~/.config/hypr/scripts/colorpicker
 $files = thunar
-$editor = code  # vscode
 $browser = firefox
 
 # -- Terminal --
 bind=SUPER,Return,exec,$term
 
-# -- Wofi --
+# -- App Launcher --
 bind=SUPER,D,exec,$app_launcher
 
 # -- Hyprland --
@@ -198,6 +206,10 @@ exec-once=cp ~/.config/fcitx5/profile-bak ~/.config/fcitx5/profile    # restore
 exec-once=fcitx5 -d --replace     # start fcitx5 daemon
 bind=ALT,E,exec,pkill fcitx5 -9;sleep 1;fcitx5 -d --replace; sleep 1;fcitx5-remote -r
 
+# fix xwayland apps
+windowrulev2 = rounding 0, xwayland:1, floating:1
+windowrulev2 = center, class:^(.*jetbrains.*)$, title:^(Confirm Exit|Open Project|win424|win201|splash)$
+windowrulev2 = size 640 400, class:^(.*jetbrains.*)$, title:^(splash)$
 
 # -- Fix input method in vscode
 exec-once = hyprctl setcursor "Bibata-Modern-Ice" 24
@@ -205,6 +217,7 @@ exec-once = hyprctl setcursor "Bibata-Modern-Ice" 24
 # xwayland 窗口先渲染到 200% 再降到 hyprland config 里 monitor 设置的值，看上去和原生没啥区别
 # 相比较一开始的方案输入法字体大小也正确了．唯一有点问题的可能是 xwayland 窗口下的鼠标指针大小不对
 exec-once = xprop -root -f _XWAYLAND_GLOBAL_OUTPUT_SCALE 32c -set _XWAYLAND_GLOBAL_OUTPUT_SCALE 2
+
 exec-once = xrdb -merge ~/.Xresources
 # env = GDK_SCALE,2
 env = XCURSOR_SIZE,48

home/linux/hyprland/hypr-conf/scripts/menu

@@ -1,13 +1,7 @@
 #!/usr/bin/env bash
 
-## launch wofi with alt config
-
-CONFIG="$HOME/.config/hypr/wofi/config"
-STYLE="$HOME/.config/hypr/wofi/style.css"
-COLORS="$HOME/.config/hypr/wofi/colors"
-
-if [[ ! $(pidof wofi) ]]; then
-	wofi --show drun --prompt 'Search...' --conf ${CONFIG} --style ${STYLE} --color ${COLORS}
+if [[ ! $(pidof anyrun) ]]; then
+	anyrun
 else
-	pkill wofi
+	pkill anyrun
 fi

home/linux/hyprland/hypr-conf/scripts/startup

@@ -11,7 +11,7 @@ for _prs in "${_ps[@]}"; do
 done
 
 # Set wallpaper
-swaybg --output '*' --mode fill --image ~/.config/hypr/wallpapers/wallpaper.png &
+swaybg --output '*' --mode fill --image ~/.config/wallpapers/default_wallpaper &
 
 # Lauch notification daemon (mako)
 ~/.config/hypr/scripts/notifications &

home/linux/hyprland/hypr-conf/scripts/statusbar

@@ -2,7 +2,7 @@
 
 ## launch waybar with alt config
 
-CONFIG="$HOME/.config/hypr/waybar/config.json"
+CONFIG="$HOME/.config/hypr/waybar/config.jsonc"
 STYLE="$HOME/.config/hypr/waybar/style.css"
 
 if [[ ! $(pidof waybar) ]]; then

home/linux/hyprland/hypr-conf/wofi/colors

@@ -1,6 +0,0 @@
-#1e1e2e
-#262636
-#d9e0ee
-#89b4fa
-#f38ba8
-#cba6f7

home/linux/hyprland/hypr-conf/wofi/config

@@ -1,39 +0,0 @@
-## Wofi Config
-
-## General
-show=drun
-prompt=Apps
-normal_window=true
-layer=top
-term=alacritty
-
-## Geometry
-width=500px
-height=305px
-location=0
-orientation=vertical
-halign=fill
-line_wrap=off
-dynamic_lines=false
-
-## Images
-allow_markup=true
-allow_images=true
-image_size=24
-
-## Search
-exec_search=false
-hide_search=false
-parse_search=false
-insensitive=false
-
-## Other
-hide_scroll=true
-no_actions=true
-sort_order=default
-gtk_dark=true
-filter_rate=100
-
-## Keys
-key_expand=Tab
-key_exit=Escape

home/linux/hyprland/hypr-conf/wofi/style.css

@@ -1,60 +0,0 @@
-/** ********** Fonts ********** **/
-* {
-    font-family: "JetBrains Mono", "Iosevka Nerd Font", sans-serif;
-    font-size: 12px;
-}
-
-#window {
-	background-color: --wofi-color0;
-	color: --wofi-color2;
-	border: 2px solid --wofi-color1;
-	border-radius: 0px;
-}
-
-#outer-box {
-	padding: 20px;
-}
-
-#input {
-	background-color: --wofi-color1;
-	border: 0px solid --wofi-color3;
-	padding: 8px 12px;
-}
-
-#scroll {
-	margin-top: 20px;
-}
-
-#inner-box {
-}
-
-#img {
-	padding-right: 8px;
-}
-
-#text {
-	color: --wofi-color2;
-}
-
-#text:selected {
-	color: --wofi-color0;
-}
-
-#entry {
-	padding: 6px;
-}
-
-#entry:selected {
-	background-color: --wofi-color3;
-	color: --wofi-color0;
-}
-
-#unselected {
-}
-
-#selected {
-}
-
-#input, #entry:selected {
-	border-radius: 4px;
-}

home/linux/hyprland/wayland-apps.nix

@@ -20,21 +20,7 @@
     firefox = {
       enable = true;
       enableGnomeExtensions = false;
-      # package = pkgs.firefox-wayland; # firefox with wayland support
-    };
-
-    vscode = {
-      enable = true;
-      # use the stable version
-      # package = pkgs.vscode.override {
-      #   commandLineArgs = [
-      #     # make it use text-input-v1, which works for kwin 5.27 and weston
-      #     # "--enable-wayland-ime"
-      #   ];
-      # };
-
-      # let vscode sync and update its configuration & extensions across devices, using github account.
-      # userSettings = {};
+      package = pkgs.firefox-wayland; # firefox with wayland support
     };
   };
 }

home/linux/i3/config

@@ -262,7 +262,7 @@ exec --no-startup-id ~/.screenlayout/monitor.sh
 
 # set wallpaper
 # exec --no-startup-id sleep 2 && nitrogen --restore
-exec --no-startup-id sleep 1 && feh --bg-fill ~/.config/i3/wallpaper.png
+exec --no-startup-id sleep 1 && feh --bg-fill ~/.config/wallpapers/default_wallpaper
 
 # set powersavings for display:
 exec --no-startup-id xset s 480 dpms 600 600 600
@@ -312,25 +312,42 @@ for_window [class="urxvt"] border pixel 1
 # color settings for bar and windows #
 ######################################
 
-# Define colors variables:
-set $darkbluetrans	#08052be6
-set $darkblue		#08052b
-set $lightblue		#5294e2
-set $urgentred		#e53935
-set $white		#ffffff
-set $black		#000000
-set $purple		#e345ff
-set $darkgrey		#383c4a
-set $grey		#b0b5bd
-set $mediumgrey		#8b8b8b
-set $yellowbrown	#e1b700
+# https://github.com/catppuccin/i3/blob/main/themes/catppuccin-mocha
+set $rosewater #f5e0dc
+set $flamingo  #f2cdcd
+set $pink      #f5c2e7
+set $mauve     #cba6f7
+set $red       #f38ba8
+set $maroon    #eba0ac
+set $peach     #fab387
+set $green     #a6e3a1
+set $teal      #94e2d5
+set $sky       #89dceb
+set $sapphire  #74c7ec
+set $blue      #89b4fa
+set $lavender  #b4befe
+set $text      #cdd6f4
+set $subtext1  #bac2de
+set $subtext0  #a6adc8
+set $overlay2  #9399b2
+set $overlay1  #7f849c
+set $overlay0  #6c7086
+set $surface2  #585b70
+set $surface1  #45475a
+set $surface0  #313244
+set $base      #1e1e2e
+# use colors in the RGBA format, the last two digits are transparency
+set $base_i3bar      #1e1e2ee6
+set $mantle    #181825
+set $crust     #11111b
 
-# define colors for windows:
-#class					border		bground		text		indicator	child_border
-client.focused				$lightblue	$darkblue	$white		$mediumgrey	$mediumgrey
-client.unfocused			$darkblue	$darkblue	$grey		$darkgrey	$darkgrey
-client.focused_inactive		$darkblue	$darkblue	$grey		$black		$black
-client.urgent				$urgentred	$urgentred	$white		$yellowbrown	$yellowbrown
+# target                 title     bg    text   indicator  border
+client.focused           $red     $base $text     $rosewater $red
+client.focused_inactive  $mauve    $base $text     $rosewater $mauve
+client.unfocused         $lavender   $base $text     $rosewater $lavender
+client.urgent            $pink    $base $lavender $overlay0  $pink
+client.placeholder       $overlay0 $base $text     $overlay0  $overlay0
+client.background        $base
 
 
 ############################################
@@ -361,14 +378,14 @@ bar {
 	##strip_workspace_name no
 
 	colors {
-		separator		$purple
-		background		$darkgrey
-		statusline		$white
+		separator		$pink
+		background		$base_transparent
+		statusline		$lavender
 		#					          border			bg			    txt			    indicator
-		focused_workspace	$mediumgrey		$grey		$darkgrey	$purple
-		active_workspace	$lightblue		$mediumgrey	$darkgrey	$purple
-		inactive_workspace	$darkgrey		$darkgrey	$grey		$purple
-		urgent_workspace	$urgentred		$urgentred	$white		$purple
+		focused_workspace	  $surface2		$overlay1		$surface1	  $pink
+		active_workspace	  $peach		  $surface2	  $surface1	  $pink
+		inactive_workspace	$surface1		$surface2	  $overlay1		$pink
+		urgent_workspace	  $red		    $red	      $lavender		$pink
 	}
 }
 

home/linux/i3/default.nix

@@ -6,8 +6,6 @@
   ];
 
   home.file = {
-    # wallpaper, binary file
-    ".config/i3/wallpaper.png".source = ../wallpapers/wallpaper.png;
     ".config/i3/config".source = ./config;
     ".config/i3/i3blocks.conf".source = ./i3blocks.conf;
     ".config/i3/scripts" = {
@@ -46,18 +44,4 @@
     "__GLX_VENDOR_LIBRARY_NAME" = "nvidia";
   };
 
-  # set dpi for 4k monitor
-  xresources.properties = {
-    # dpi for Xorg's font
-    "Xft.dpi" = 162;
-    # or set a generic dpi
-    "*.dpi" = 162;
-  };
-
-  # set Xcursor.theme & Xcursor.size in ~/.Xresources automatically
-  home.pointerCursor = {
-    name = "Qogir-dark";
-    package = pkgs.qogir-theme;
-    size = 64;
-  };
 }

home/linux/i3/x11-apps.nix

@@ -17,17 +17,5 @@
       # commandLineArgs = [
       # ];
     };
-
-    vscode = {
-      enable = true;
-      # use the stable version
-      # package = pkgs.vscode.override {
-      #   commandLineArgs = [
-      #   ];
-      # };
-
-      # let vscode sync and update its configuration & extensions across devices, using github account.
-      # userSettings = {};
-    };
   };
 }

home/linux/server-riscv64.nix

@@ -0,0 +1,24 @@
+{ username, ... }: {
+  imports = [
+  ];
+
+  # Home Manager needs a bit of information about you and the
+  # paths it should manage.
+  home = {
+    username = username;
+    homeDirectory = "/home/${username}";
+
+    # This value determines the Home Manager release that your
+    # configuration is compatible with. This helps avoid breakage
+    # when a new Home Manager release introduces backwards
+    # incompatible changes.
+    #
+    # You can update Home Manager without changing this value. See
+    # the Home Manager release notes for a list of state version
+    # changes in each release.
+    stateVersion = "23.05";
+  };
+
+  # Let Home Manager install and manage itself.
+  programs.home-manager.enable = true;
+}

home/linux/wallpapers/convert_to_png.nu

@@ -1,22 +0,0 @@
-# convert all images to png
-
-def to_png [old_path: string, old_format: string] {
-  # 将后缀改为 .png 得到新图片的 path
-  let webp_path = ($old_path | split row $old_format | append ".png" | str join)
-  # 使用 ffmpeg 进行格式转换
-  ffmpeg -y -i $old_path $webp_path
-  # 删除旧图片
-  rm $old_path
-}
-
-def convert_format [old_format: string] {
-    # 递归找出所有大于 10kib 的图片
-    let old_paths = (ls $"**/*($old_format)" | where size > 10kb | each {|it| $it.name})
-    $old_paths | to md
-
-    # 1. 执行图片格式转换与压缩，同时删除原图片
-    $old_paths | each { |it| to_png $it $old_format }
-}
-
-convert_format ".webp"
-# convert_format ".jpg"

home/linux/wallpapers/wallpaper.png

@@ -1 +0,0 @@
-jiaocha_anime-girls_seagulls.jpg

hosts/12kingdoms/suzu/default.nix

@@ -0,0 +1,62 @@
+{
+  config,
+  username,
+  nixos-rk3588,
+  ...
+} @ args:
+#############################################################
+#
+#  Aquamarine - A NixOS VM running on Proxmox
+#
+#############################################################
+{
+  imports = [
+    {
+      nixpkgs.crossSystem = {
+        config = "aarch64-unknown-linux-gnu";
+      };
+    }
+
+    # import the rk3588 module, which contains the configuration for bootloader/kernel/firmware
+    (nixos-rk3588 + "/modules/boards/orangepi5.nix")
+
+    # core-riscv64 only the core packages, it's suitable for aarch64 too.
+    ../../../modules/nixos/core-riscv64.nix
+    ../../../modules/nixos/user-group.nix
+  ];
+
+  users.users.root.openssh.authorizedKeys.keys = config.users.users."${username}".openssh.authorizedKeys.keys;
+
+  networking = {
+    hostName = "suzu"; # Define your hostname.
+    wireless.enable = false; # Enables wireless support via wpa_supplicant.
+    networkmanager.enable = false;
+
+    # Configure network proxy if necessary
+    # proxy.default = "http://user:password@proxy:port/";
+    # proxy.noProxy = "127.0.0.1,localhost,internal.domain";
+
+    interfaces.end1 = {
+      useDHCP = false;
+      ipv4.addresses = [
+        {
+          address = "192.168.5.107";
+          prefixLength = 24;
+        }
+      ];
+    };
+    defaultGateway = "192.168.5.201";
+    nameservers = [
+      "119.29.29.29" # DNSPod
+      "223.5.5.5" # AliDNS
+    ];
+  };
+
+  # This value determines the NixOS release from which the default
+  # settings for stateful data, like file locations and database versions
+  # on your system were taken. It‘s perfectly fine and recommended to leave
+  # this value at the release version of the first install of this system.
+  # Before changing this value read the documentation for this option
+  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
+  system.stateVersion = "23.05"; # Did you read the comment?
+}

hosts/README.md

@@ -0,0 +1,48 @@
+# Hosts
+
+1. `harmonica`: My MacBook Pro 2020 13-inch, for work.
+2. `idols`
+   1. `ai`: My main computer, with NixOS + I5-13600KF + RTX 4090 GPU, for gaming & daily use.
+   2. `aquamarine`: My NixOS virtual machine with R9-5900HX(8C16T), for distributed building & testing.
+   3. `kana`: Yet another NixOS vm on another physical machine with R5-5625U(6C12T).
+   4. `ruby`: Another NixOS vm on another physical machine with R7-5825U(8C16T).
+3. `rolling_girls`: My RISCV64 hosts.
+   1. `nozomi`: Lichee Pi 4A, TH1520(4xC910@2.0G), 8GB RAM + 32G eMMC + 64G SD Card.
+   2. `yukina`: Lichee Pi 4A(Internal Test Version), TH1520(4xC910@2.0G), 8GB RAM + 8G eMMC + 128G SD Card.
+   3. `chiaya`: Milk-V Mars, JH7110(4xU74@1.5 GHz), 4G RAM + No eMMC + 64G SD Card.
+4. `12kingdoms`: Currently only one aarch64 host
+   1. `suzu`: Orange Pi 5, RK3588s(4xA76 + 4xA55), GPU(4Cores, Mail-G610), NPU(6Tops@int8), 8G RAM + 256G SSD.
+
+
+# idols - Oshi no Ko
+
+These four servers are named after the four main characters of the mange/anime Oshi no Ko, they form a NixOS distributed building cluster,
+I usually run the build command on `Ai` and nix will distribute the build to other three machines, which is convenient and fast.
+
+When building some packages for riscv64 or aarch64, I often have no cache available because of various changes under the hood, so I need to build much more packages than usual, which is one of the reasons why the cluster was originally built, and another reason is distributed building is cool!
+
+![](/_img/nix-distributed-building.webp)
+
+![](/_img/nix-distributed-building-log.webp)
+
+## rolling girls
+
+My All RISCV64 hosts.
+
+![](/_img/nixos-riscv-cluster.webp)
+
+## References
+
+[Oshi no Ko 【推しの子】 - Wikipedia](https://en.wikipedia.org/wiki/Oshi_no_Ko):
+
+![](/_img/idols-famaily.webp)
+![](/_img/idols-ai.webp)
+
+[The Rolling Girls【ローリング☆ガールズ】 - Wikipedia](https://en.wikipedia.org/wiki/The_Rolling_Girls):
+
+![](/_img/rolling_girls.webp)
+
+[List of Twelve Kingdoms characters](https://en.wikipedia.org/wiki/List_of_Twelve_Kingdoms_characters)
+
+![](/_img/12kingdoms-1.webp)
+![](/_img/12kingdoms-Youko-Rakushun.webp)

hosts/idols/README.md

@@ -1,17 +0,0 @@
-# Oshi no Ko
-
-These four servers are named after the four main characters of the mange/anime Oshi no Ko, they form a NixOS distributed building cluster,
-I usually run the build command on `Ai` and nix will distribute the build to other three machines, which is convenient and fast.
-
-When building some packages for riscv64 or aarch64, I often have no cache available because of various changes under the hood, so I need to build much more packages than usual, which is one of the reasons why the cluster was originally built, and another reason is distributed building is cool!
-
-![](/_img/nix-distributed-building.webp)
-
-![](/_img/nix-distributed-building-log.webp)
-
-## References
-
-![](/_img/idols-famaily.webp)
-![](/_img/idols-ai.webp)
-
-See [Oshi no Ko 【推しの子】 - Wikipedia](https://en.wikipedia.org/wiki/Oshi_no_Ko) for more information.

hosts/idols/ai/default.nix

@@ -1,4 +1,4 @@
-{config, ...} @ args:
+{lanzaboote, ...} @ args:
 #############################################################
 #
 #  Ai - my main computer, with NixOS + I5-13600KF + RTX 4090 GPU, for gaming & daily use.
@@ -10,10 +10,13 @@
     # Include the results of the hardware scan.
     ./hardware-configuration.nix
 
-    ../../../modules/nixos/fhs-fonts.nix
+    ./impermanence.nix
+    ./secureboot.nix
+
+    # ../../../modules/nixos/fhs-fonts.nix
     ../../../modules/nixos/libvirt.nix
     ../../../modules/nixos/core-desktop.nix
-    # ../../../modules/nixos/remote-building.nix
+    ../../../modules/nixos/remote-building.nix
     ../../../modules/nixos/user-group.nix
 
     ../../../secrets/nixos.nix
@@ -21,30 +24,6 @@
 
   nixpkgs.overlays = import ../../../overlays args;
 
-  # Enable binfmt emulation of aarch64-linux, this is required for cross compilation.
-  boot.binfmt.emulatedSystems = ["aarch64-linux" "riscv64-linux"];
-  # supported fil systems, so we can mount any removable disks with these filesystems
-  boot.supportedFilesystems = [
-    "ext4"
-    "btrfs"
-    "xfs"
-    #"zfs"
-    "ntfs"
-    "fat"
-    "vfat"
-    "exfat"
-    "cifs" # mount windows share
-  ];
-
-  # Bootloader.
-  boot.loader = {
-    efi = {
-      canTouchEfiVariables = true;
-      efiSysMountPoint = "/boot/efi"; # ← use the same mount point here.
-    };
-    systemd-boot.enable = true;
-  };
-
   networking = {
     hostName = "ai";
     wireless.enable = false; # Enables wireless support via wpa_supplicant.
@@ -77,8 +56,15 @@
   # for Nvidia GPU
   services.xserver.videoDrivers = ["nvidia"]; # will install nvidia-vaapi-driver by default
   hardware.nvidia = {
-    package = config.boot.kernelPackages.nvidiaPackages.stable;
+    # Optionally, you may need to select the appropriate driver version for your specific GPU.
+    # package = config.boot.kernelPackages.nvidiaPackages.stable;
+
+    # Modesetting is needed for most Wayland compositors
     modesetting.enable = true;
+    # Use the open source version of the kernel module
+    # Only available on driver 515.43.04+
+    open = false;
+
     powerManagement.enable = true;
   };
   virtualisation.docker.enableNvidia = true; # for nvidia-docker
@@ -97,5 +83,5 @@
   # this value at the release version of the first install of this system.
   # Before changing this value read the documentation for this option
   # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
-  system.stateVersion = "22.11"; # Did you read the comment?
+  system.stateVersion = "23.11"; # Did you read the comment?
 }

hosts/idols/ai/hardware-configuration.nix

@@ -12,23 +12,98 @@
     (modulesPath + "/installer/scan/not-detected.nix")
   ];
 
+  # Use the EFI boot loader.
+  boot.loader.efi.canTouchEfiVariables = true;
+  # depending on how you configured your disk mounts, change this to /boot or /boot/efi.
+  boot.loader.efi.efiSysMountPoint = "/boot";
+  boot.loader.systemd-boot.enable = true;
+
   boot.initrd.availableKernelModules = ["xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod"];
   boot.initrd.kernelModules = [];
   boot.kernelModules = ["kvm-intel"];
+  boot.kernelParams = [ "nvidia.NVreg_PreserveVideoMemoryAllocations=1" ];
   boot.extraModulePackages = [];
 
-  fileSystems."/" = {
-    device = "/dev/disk/by-uuid/231466f6-cdf3-40e1-b9d2-6b4e8d10a4d3";
-    fsType = "btrfs";
-    options = ["subvol=@"];
+  # Enable binfmt emulation of aarch64-linux, this is required for cross compilation.
+  boot.binfmt.emulatedSystems = ["aarch64-linux" "riscv64-linux"];
+  # supported fil systems, so we can mount any removable disks with these filesystems
+  boot.supportedFilesystems = [
+    "ext4"
+    "btrfs"
+    "xfs"
+    "ntfs"
+    "fat"
+    "vfat"
+    "cifs" # mount windows share
+  ];
+
+
+  boot.initrd = {
+    # unlocked luks devices via a keyfile or prompt a passphrase.
+    luks.devices."crypted-nixos" = {
+      device = "/dev/nvme0n1p2";
+      # the keyfile(or device partition) that should be used as the decryption key for the encrypted device.
+      # if not specified, you will be prompted for a passphrase instead.
+      #keyFile = "/root-part.key";
+
+      # whether to allow TRIM requests to the underlying device.
+      # it's less secure, but faster.
+      allowDiscards = true;
+    };
   };
 
-  fileSystems."/boot/efi" = {
-    device = "/dev/disk/by-uuid/87ED-8B2E";
+  # equal to `mount -t tmpfs tmpfs /`
+  fileSystems."/" = {
+    device = "tmpfs";
+    fsType = "tmpfs";
+    # set mode to 755, otherwise systemd will set it to 777, which cause problems.
+    options = ["relatime" "mode=755"];
+  };
+
+  fileSystems."/nix" = {
+    device = "/dev/disk/by-uuid/1167076c-dee1-486c-83c1-4b1af37555cd";
+    fsType = "btrfs";
+    options = ["subvol=@nix" "noatime" "compress-force=zstd:1"];
+  };
+
+  fileSystems."/persistent" = {
+    device = "/dev/disk/by-uuid/1167076c-dee1-486c-83c1-4b1af37555cd";
+    fsType = "btrfs";
+    options = ["subvol=@persistent" "compress-force=zstd:1"];
+    neededForBoot = true;
+  };
+
+  fileSystems."/snapshots" = {
+    device = "/dev/disk/by-uuid/1167076c-dee1-486c-83c1-4b1af37555cd";
+    fsType = "btrfs";
+    options = ["subvol=@snapshots" "compress-force=zstd:1"];
+  };
+
+  # mount swap subvolume in readonly mode.
+  fileSystems."/swap" = {
+    device = "/dev/disk/by-uuid/1167076c-dee1-486c-83c1-4b1af37555cd";
+    fsType = "btrfs";
+    options = ["subvol=@swap" "ro"];
+  };
+
+  # remount swapfile in read-write mode
+  fileSystems."/swap/swapfile" = {
+    # the swapfile is located in /swap subvolume, so we need to mount /swap first.
+    depends = ["/swap"];
+
+    device = "/swap/swapfile";
+    fsType = "none";
+    options = ["bind" "rw"];
+  };
+
+  fileSystems."/boot" = {
+    device = "/dev/nvme0n1p1";
     fsType = "vfat";
   };
 
-  swapDevices = [{device = "/dev/disk/by-uuid/17391ca0-8cdb-4598-a40b-fd9548fd9b37";}];
+  swapDevices = [
+    {device = "/swap/swapfile";}
+  ];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's

hosts/idols/ai/impermanence.nix

@@ -0,0 +1,112 @@
+{
+  impermanence,
+  pkgs,
+  ...
+}: {
+  imports = [
+    impermanence.nixosModules.impermanence
+  ];
+
+  environment.systemPackages = [
+    # `sudo ncdu -x /`
+    pkgs.ncdu
+  ];
+
+  # There are two ways to clear the root filesystem on every boot:
+  ##  1. use tmpfs for /
+  ##  2. (btrfs/zfs only)take a blank snapshot of the root filesystem and revert to it on every boot via:
+  ##  3. boot.initrd.postDeviceCommands = ''
+  ##       mkdir -p /run/mymount
+  ##       mount -o subvol=/ /dev/disk/by-uuid/UUID /run/mymount
+  ##       btrfs subvolume delete /run/mymount
+  ##       btrfs subvolume snapshot / /run/mymount
+  ##     '';
+  #
+  #  See also https://grahamc.com/blog/erase-your-darlings/
+  environment.persistence."/persistent" = {
+    # sets the mount option x-gvfs-hide on all the bind mounts
+    # to hide them from the file manager
+    hideMounts = true;
+    directories = [
+      "/etc/NetworkManager/system-connections"
+      "/etc/ssh"
+      "/etc/nix/inputs"
+      "/etc/secureboot" # lanzaboote - secure boot
+      # my secrets
+      "/etc/agenix/"
+
+      "/var/log"
+      "/var/lib"
+
+      # created by modules/nixos/fhs-fonts.nix
+      # for flatpak apps
+      # "/usr/share/fonts"
+      # "/usr/share/icons"
+    ];
+    files = [
+      "/etc/machine-id"
+    ];
+    users.ryan = {
+      directories = [
+        "codes"
+        "nix-config"
+        "tmp"
+
+        "Downloads"
+        "Music"
+        "Pictures"
+        "Documents"
+        "Videos"
+
+        {
+          directory = ".gnupg";
+          mode = "0700";
+        }
+        {
+          directory = ".ssh";
+          mode = "0700";
+        }
+        {
+          directory = ".aws";
+          mode = "0700";
+        }
+        {
+          directory = ".docker";
+          mode = "0700";
+        }
+        {
+          directory = ".kube";
+          mode = "0700";
+        }
+
+        # misc
+        ".config/pulse"
+        ".pki"
+
+        # remote desktop
+        ".config/remmina"
+        ".config/freerdp"
+
+        # browsers
+        ".mozilla"
+        ".config/google-chrome"
+
+        # neovim / remmina / flatpak / ...
+        ".local/share"
+        ".local/state"
+
+        # language package managers
+        ".npm"
+        "go"
+
+        # neovim plugins(wakatime & copilot)
+        ".wakatime"
+        ".config/github-copilot"
+      ];
+      files = [
+        ".wakatime.cfg"
+        ".config/nushell/history.txt"
+      ];
+    };
+  };
+}

hosts/idols/ai/secureboot.nix

@@ -0,0 +1,34 @@
+{
+  pkgs,
+  lib,
+  lanzaboote,
+  ...
+}: {
+  # How to enter setup mode - msi motherboard
+  ## 1. enter BIOS via [Del] Key
+  ## 2. <Advance mode> => <Settings> => <Security> => <Secure Boot>
+  ## 3. enable <Secure Boot>
+  ## 4. set <Secure Boot Mode> to <Custom>
+  ## 5. enter <Key Management>
+  ## 6. select <Delete All Secure Boot Variables>, and then select <No> for <Reboot Without Saving>
+  ## 7. Press F10 to saving and reboot.
+  imports = [
+    lanzaboote.nixosModules.lanzaboote
+  ];
+
+  environment.systemPackages = [
+    # For debugging and troubleshooting Secure Boot.
+    pkgs.sbctl
+  ];
+
+  # Lanzaboote currently replaces the systemd-boot module.
+  # This setting is usually set to true in configuration.nix
+  # generated at installation time. So we force it to false
+  # for now.
+  boot.loader.systemd-boot.enable = lib.mkForce false;
+
+  boot.lanzaboote = {
+    enable = true;
+    pkiBundle = "/etc/secureboot";
+  };
+}

hosts/rolling_girls/chiaya/default.nix

@@ -0,0 +1,69 @@
+{
+  config,
+  username,
+  # nixos-jh7110,
+  ...
+} @ args:
+#############################################################
+#
+#  Chiaya - NixOS Configuration for Milk-V Mars
+#
+#  WIP, not working yet.
+#
+#############################################################
+{
+  imports = [
+    {
+      # cross-compilation this flake.
+      nixpkgs.crossSystem = {
+        system = "riscv64-linux";
+      };
+    }
+
+    # TODO
+
+    ../../../modules/nixos/core-riscv64.nix
+    ../../../modules/nixos/user-group.nix
+  ];
+
+  users.users.root.openssh.authorizedKeys.keys = config.users.users."${username}".openssh.authorizedKeys.keys;
+
+  # Set static IP address / gateway / DNS servers.
+  networking = {
+    hostName = "chiaya"; # Define your hostname.
+    wireless.enable = false;
+
+    # Failed to enable firewall due to the following error:
+    #   firewall-start[2300]: iptables: Failed to initialize nft: Protocol not supported
+    firewall.enable = false;
+
+    defaultGateway = "192.168.5.201";
+    nameservers = [
+      "119.29.29.29" # DNSPod
+      "223.5.5.5" # AliDNS
+    ];
+
+    # Configure network proxy if necessary
+    # proxy.default = "http://user:password@proxy:port/";
+    # proxy.noProxy = "127.0.0.1,localhost,internal.domain";
+
+    # milkv-mars RJ45 port
+    interfaces.end0 = {
+      useDHCP = false;
+      ipv4.addresses = [
+        {
+          address = "192.168.5.106";
+          prefixLength = 24;
+        }
+      ];
+    };
+  };
+
+  # This value determines the NixOS release from which the default
+  # settings for stateful data, like file locations and database versions
+  # on your system were taken. It‘s perfectly fine and recommended to leave
+  # this value at the release version of the first install of this system.
+  # Before changing this value read the documentation for this option
+  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
+  system.stateVersion = "23.05"; # Did you read the comment?
+}

hosts/rolling_girls/nozomi/default.nix

@@ -0,0 +1,102 @@
+{
+  config,
+  username,
+  nixos-licheepi4a,
+  ...
+} @ args:
+#############################################################
+#
+#  Nozomi - NixOS configuration for Lichee Pi 4A
+#
+#############################################################
+{
+  imports = [
+    {
+      # cross-compilation this flake.
+      nixpkgs.crossSystem = {
+        system = "riscv64-linux";
+      };
+    }
+
+    # import the licheepi4a module, which contains the configuration for bootloader/kernel/firmware
+    (nixos-licheepi4a + "/modules/licheepi4a.nix")
+    # import the sd-image module, which contains the fileSystems & kernel parameters for booting from sd card.
+    (nixos-licheepi4a + "/modules/sd-image/sd-image-lp4a.nix")
+
+    ../../../modules/nixos/core-riscv64.nix
+    ../../../modules/nixos/user-group.nix
+  ];
+
+  users.users.root.openssh.authorizedKeys.keys = config.users.users."${username}".openssh.authorizedKeys.keys;
+
+  # Set static IP address / gateway / DNS servers.
+  networking = {
+    hostName = "nozomi"; # Define your hostname.
+    wireless = {
+      # https://wiki.archlinux.org/title/wpa_supplicant
+      enable = true;
+      # The path to the file containing the WPA passphrase.
+      # secrets are not supported well on riscv64, I nned to create this file manually.
+      # Format: "PSK_WEMEET_PRIVATE_WIFI=your_password"
+      environmentFile = "/etc/wpa_supplicant.env";
+      # The network definitions to automatically connect to when wpa_supplicant is running. 
+      networks = {
+        # read WPAPSK from environmentFile
+        "shadow_light_ryan".psk = "@PSK_WEMEET_PRIVATE_WIFI@";
+      };
+    };
+
+    # Failed to enable firewall due to the following error:
+    #   firewall-start[2300]: iptables: Failed to initialize nft: Protocol not supported
+    firewall.enable = false;
+
+    defaultGateway = "192.168.5.201";
+    nameservers = [
+      "119.29.29.29" # DNSPod
+      "223.5.5.5" # AliDNS
+    ];
+
+    # Configure network proxy if necessary
+    # proxy.default = "http://user:password@proxy:port/";
+    # proxy.noProxy = "127.0.0.1,localhost,internal.domain";
+
+    # LPI4A's wireless interface
+    interfaces.wlan0 = {
+      useDHCP = false;
+      ipv4.addresses = [
+        {
+          address = "192.168.5.104";
+          prefixLength = 24;
+        }
+      ];
+    };
+    # LPI4A's first ethernet interface
+    # interfaces.end0 = {
+    #   useDHCP = false;
+    #   ipv4.addresses = [
+    #     {
+    #       address = "192.168.5.104";
+    #       prefixLength = 24;
+    #     }
+    #   ];
+    # };
+    # LPI4A's second ethernet interface
+    # interfaces.end1 = {
+    #   useDHCP = false;
+    #   ipv4.addresses = [
+    #     {
+    #       address = "192.168.xx.xx";
+    #       prefixLength = 24;
+    #     }
+    #   ];
+    # };
+  };
+
+  # This value determines the NixOS release from which the default
+  # settings for stateful data, like file locations and database versions
+  # on your system were taken. It‘s perfectly fine and recommended to leave
+  # this value at the release version of the first install of this system.
+  # Before changing this value read the documentation for this option
+  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
+  system.stateVersion = "23.05"; # Did you read the comment?
+}

hosts/rolling_girls/yukina/default.nix

@@ -0,0 +1,102 @@
+{
+  config,
+  username,
+  nixos-licheepi4a,
+  ...
+} @ args:
+#############################################################
+#
+#  Yukina - NixOS configuration for Lichee Pi 4A
+#
+#############################################################
+{
+  imports = [
+    {
+      # cross-compilation this flake.
+      nixpkgs.crossSystem = {
+        system = "riscv64-linux";
+      };
+    }
+
+    # import the licheepi4a module, which contains the configuration for bootloader/kernel/firmware
+    (nixos-licheepi4a + "/modules/licheepi4a.nix")
+    # import the sd-image module, which contains the fileSystems & kernel parameters for booting from sd card.
+    (nixos-licheepi4a + "/modules/sd-image/sd-image-lp4a.nix")
+
+    ../../../modules/nixos/core-riscv64.nix
+    ../../../modules/nixos/user-group.nix
+  ];
+
+  users.users.root.openssh.authorizedKeys.keys = config.users.users."${username}".openssh.authorizedKeys.keys;
+
+  # Set static IP address / gateway / DNS servers.
+  networking = {
+    hostName = "yukina"; # Define your hostname.
+    wireless = {
+      # https://wiki.archlinux.org/title/wpa_supplicant
+      enable = true;
+      # The path to the file containing the WPA passphrase.
+      # secrets are not supported well on riscv64, I nned to create this file manually.
+      # Format: "PSK_WEMEET_PRIVATE_WIFI=your_password"
+      environmentFile = "/etc/wpa_supplicant.env";
+      # The network definitions to automatically connect to when wpa_supplicant is running. 
+      networks = {
+        # read WPAPSK from environmentFile
+        "shadow_light_ryan".psk = "@PSK_WEMEET_PRIVATE_WIFI@";
+      };
+    };
+
+    # Failed to enable firewall due to the following error:
+    #   firewall-start[2300]: iptables: Failed to initialize nft: Protocol not supported
+    firewall.enable = false;
+
+    defaultGateway = "192.168.5.201";
+    nameservers = [
+      "119.29.29.29" # DNSPod
+      "223.5.5.5" # AliDNS
+    ];
+
+    # Configure network proxy if necessary
+    # proxy.default = "http://user:password@proxy:port/";
+    # proxy.noProxy = "127.0.0.1,localhost,internal.domain";
+
+    # LPI4A's wireless interface
+    interfaces.wlan0 = {
+      useDHCP = false;
+      ipv4.addresses = [
+        {
+          address = "192.168.5.105";
+          prefixLength = 24;
+        }
+      ];
+    };
+    # LPI4A's first ethernet interface
+    # interfaces.end0 = {
+    #   useDHCP = false;
+    #   ipv4.addresses = [
+    #     {
+    #       address = "192.168.5.105";
+    #       prefixLength = 24;
+    #     }
+    #   ];
+    # };
+    # LPI4A's second ethernet interface
+    # interfaces.end1 = {
+    #   useDHCP = false;
+    #   ipv4.addresses = [
+    #     {
+    #       address = "192.168.xx.xx";
+    #       prefixLength = 24;
+    #     }
+    #   ];
+    # };
+  };
+
+  # This value determines the NixOS release from which the default
+  # settings for stateful data, like file locations and database versions
+  # on your system were taken. It‘s perfectly fine and recommended to leave
+  # this value at the release version of the first install of this system.
+  # Before changing this value read the documentation for this option
+  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
+  system.stateVersion = "23.05"; # Did you read the comment?
+}

lib/README.md

@@ -0,0 +1,8 @@
+# Library
+
+Some helper functions, used by `flake.nix` to reduce code duplication and make it easier to add new machines:
+
+1. `macosSystem.nix`: A function to generate config(attribute set) for macOS([nix-darwin](https://github.com/LnL7/nix-darwin)).
+2. `nixosSystem.nix`: A function to generate config(attribute set) for NixOS.
+3. `colmenaSystem.nix`: A function that generate config(another function) for remote deployment using [colmena](https://github.com/zhaofengli/colmena).
+

lib/colmenaSystem.nix

@@ -0,0 +1,40 @@
+# colmena - Remote Deployment via SSH
+{
+  nixpkgs,
+  home-manager,
+  specialArgs,
+  nixos-modules,
+  home-module ? null,
+  host_tags,
+  targetUser ? specialArgs.username,
+}: let
+  username = specialArgs.username;
+in
+  { name, nodes, ... }: {
+    deployment = {
+      targetHost = name;  # hostName or IP address
+      targetUser = targetUser;
+      tags = host_tags;
+    };
+
+    imports =
+      nixos-modules
+      ++ [
+        {
+          # make `nix run nixpkgs#nixpkgs` use the same nixpkgs as the one used by this flake.
+          nix.registry.nixpkgs.flake = nixpkgs;
+          # make `nix repl '<nixpkgs>'` use the same nixpkgs as the one used by this flake.
+          environment.etc."nix/inputs/nixpkgs".source = "${nixpkgs}";
+          nix.nixPath = ["/etc/nix/inputs"];
+        }
+      ] ++ (if (home-module != null) then [
+        home-manager.nixosModules.home-manager
+        {
+          home-manager.useGlobalPkgs = true;
+          home-manager.useUserPackages = true;
+
+          home-manager.extraSpecialArgs = specialArgs;
+          home-manager.users."${username}" = home-module;
+        }
+      ] else []);
+  }

lib/macosSystem.nix

@@ -1,4 +1,5 @@
 {
+  nixpkgs,
   nix-darwin,
   home-manager,
   system,
@@ -13,6 +14,15 @@ in
     modules =
       darwin-modules
       ++ [
+        {
+          # make `nix run nixpkgs#nixpkgs` use the same nixpkgs as the one used by this flake.
+          nix.registry.nixpkgs.flake = nixpkgs;
+
+          # make `nix repl '<nixpkgs>'` use the same nixpkgs as the one used by this flake.
+          environment.etc."nix/inputs/nixpkgs".source = "${nixpkgs}";
+          nix.nixPath = ["/etc/nix/inputs"];
+        }
+
         home-manager.darwinModules.home-manager
         {
           home-manager.useGlobalPkgs = true;

lib/nixosSystem.nix

@@ -14,6 +14,15 @@ in
     modules =
       nixos-modules
       ++ [
+        {
+          # make `nix run nixpkgs#nixpkgs` use the same nixpkgs as the one used by this flake.
+          nix.registry.nixpkgs.flake = nixpkgs;
+
+          # make `nix repl '<nixpkgs>'` use the same nixpkgs as the one used by this flake.
+          environment.etc."nix/inputs/nixpkgs".source = "${nixpkgs}";
+          nix.nixPath = ["/etc/nix/inputs"];
+        }
+
         nixos-generators.nixosModules.all-formats
         {
           # formatConfigs.iso = {config, ...}: {};

modules/README.md

@@ -0,0 +1,5 @@
+# NixOS / Nix-Darwin's Submodules
+
+1. `darwin`: macOS-specific configuration.
+2. `nixos`: NixOS-specific configuration.
+