disable hugepages in vfio_ready specialisation, add pythonlsp and coq-nvim for autocompletion

flake.lock

@@ -5,11 +5,11 @@
         "nixpkgs": "nixpkgs"
       },
       "locked": {
-        "lastModified": 1763110997,
+        "lastModified": 1768575137,
-        "narHash": "sha256-S2vF+3D/9vna3/vBV7LHiGUbp+ltPsQhvccIyim6VQg=",
+        "narHash": "sha256-e0SsKnkSnq+UwZNS9ZyPJjTjabzq9TRc1hqeDnvOF1Q=",
         "owner": "catppuccin",
         "repo": "nix",
-        "rev": "e6928cdd3dd20636326c2756d2bc8fd1cd825768",
+        "rev": "48e67b4ad22072f1ae30b0ed8e1cb020cf06c611",
         "type": "github"
       },
       "original": {
@@ -26,11 +26,11 @@
       },
       "locked": {
         "dir": "pkgs/firefox-addons",
-        "lastModified": 1763352296,
+        "lastModified": 1768622624,
-        "narHash": "sha256-3501S69Eft93hXhLUzdnwP4xVIO8mZ1zrZWPsSbnJLU=",
+        "narHash": "sha256-Em6PP667PeXbEjidbV2LnNwmUYohbrSFvVPLYLUDHms=",
         "owner": "rycee",
         "repo": "nur-expressions",
-        "rev": "63f8d49eee3e1e79bbe325393f9de48266e337c5",
+        "rev": "8061c6d9199dc6cc0727d4241959eea28f2fa0a6",
         "type": "gitlab"
       },
       "original": {
@@ -47,11 +47,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1763313531,
+        "lastModified": 1768598210,
-        "narHash": "sha256-yvdCYUL85zEDp2NzPUBmaNBXP6KnWEOhAk3j7PTfsKw=",
+        "narHash": "sha256-kkgA32s/f4jaa4UG+2f8C225Qvclxnqs76mf8zvTVPg=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "3670a78eee49deebe4825fc8ecc46b172d1a8391",
+        "rev": "c47b2cc64a629f8e075de52e4742de688f930dc6",
         "type": "github"
       },
       "original": {
@@ -62,11 +62,11 @@
     },
     "nixos-hardware": {
       "locked": {
-        "lastModified": 1762847253,
+        "lastModified": 1768584846,
-        "narHash": "sha256-BWWnUUT01lPwCWUvS0p6Px5UOBFeXJ8jR+ZdLX8IbrU=",
+        "narHash": "sha256-IRPmIOV2tPwxbhP/I9M5AmwhTC0lMPtoPStC+8T6xl0=",
         "owner": "NixOS",
         "repo": "nixos-hardware",
-        "rev": "899dc449bc6428b9ee6b3b8f771ca2b0ef945ab9",
+        "rev": "cce68f4a54fa4e3d633358364477f5cc1d782440",
         "type": "github"
       },
       "original": {
@@ -78,11 +78,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1762111121,
+        "lastModified": 1768305791,
-        "narHash": "sha256-4vhDuZ7OZaZmKKrnDpxLZZpGIJvAeMtK6FKLJYUtAdw=",
+        "narHash": "sha256-AIdl6WAn9aymeaH/NvBj0H9qM+XuAuYbGMZaP0zcXAQ=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "b3d51a0365f6695e7dd5cdf3e180604530ed33b4",
+        "rev": "1412caf7bf9e660f2f962917c14b1ea1c3bc695e",
         "type": "github"
       },
       "original": {
@@ -94,11 +94,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1763283776,
+        "lastModified": 1768564909,
-        "narHash": "sha256-Y7TDFPK4GlqrKrivOcsHG8xSGqQx3A6c+i7novT85Uk=",
+        "narHash": "sha256-Kell/SpJYVkHWMvnhqJz/8DqQg2b6PguxVWOuadbHCc=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "50a96edd8d0db6cc8db57dab6bb6d6ee1f3dc49a",
+        "rev": "e4bae1bd10c9c57b2cf517953ab70060a828ee6f",
         "type": "github"
       },
       "original": {
@@ -125,11 +125,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1763264763,
+        "lastModified": 1768481291,
-        "narHash": "sha256-N0BEoJIlJ+M6sWZJ8nnfAjGY9VLvM6MXMitRenmhBkY=",
+        "narHash": "sha256-NjKtkJraCZEnLHAJxLTI+BfdU//9coAz9p5TqveZwPU=",
         "owner": "Mic92",
         "repo": "sops-nix",
-        "rev": "882e56c8293e44d57d882b800a82f8b2ee7a858f",
+        "rev": "e085e303dfcce21adcb5fec535d65aacb066f101",
         "type": "github"
       },
       "original": {

flake.nix

@@ -6,7 +6,7 @@
 #    By: tomoron <tomoron@student.42angouleme.fr>   +#+  +:+       +#+         #
 #                                                 +#+#+#+#+#+   +#+            #
 #    Created: 2024/10/17 18:15:24 by tomoron           #+#    #+#              #
-#    Updated: 2025/09/24 02:10:00 by tomoron          ###   ########.fr        #
+#    Updated: 2025/12/16 19:01:21 by tomoron          ###   ########.fr        #
 #                                                                              #
 # **************************************************************************** #
 
@@ -46,7 +46,12 @@
       osConfig = {flakeName, extraModules ? []}: nixpkgs.lib.nixosSystem {
         specialArgs = { inherit inputs; flakeName = flakeName; };
         modules = nixpkgs.lib.concatLists [
-		  [./osConfigs/os.nix ./osConfigs/hosts/${flakeName}.nix catppuccin.nixosModules.catppuccin]
+		  [
+		    ./osConfigs/os.nix
+			./osConfigs/hosts/${flakeName}.nix
+			catppuccin.nixosModules.catppuccin
+			inputs.sops-nix.nixosModules.sops
+		  ]
 		  extraModules
 		];
       };

homeConfigs/hosts/laptop.nix

@@ -44,6 +44,7 @@
     blender
 	wireshark
 	localsend
+	impala
   ];
 
 }

homeConfigs/modules/git.nix

@@ -21,7 +21,7 @@
 		help.autocorrect = 1;
 		user.signingkey = "251B4BD73683A8DF13D760A868BFAFE31DF313AD";
 		commit.gpgsign = true;
-        aliase = {
+        alias = {
           fuck = "!f() { git reset --hard \"@{upstream}\" && git restore . && git clean -f .; };f";
           back = "reset HEAD~";
         };

homeConfigs/modules/vim.nix

@@ -2,35 +2,65 @@
 
 {
   options.mods.vim.enable = lib.mkOption {
-	type = lib.types.bool;
+    type = lib.types.bool;
-	default = true;
+    default = true;
-	description = "install and configure vim";
+    description = "install and configure vim";
   };
 
   config = lib.mkIf config.mods.vim.enable {
     programs.neovim = {
       enable = true;
-	  defaultEditor = true;
+      defaultEditor = true;
       viAlias = true;
-	  vimAlias = true;
+      vimAlias = true;
-	};
+    };
 
     home.packages = with pkgs; [
       clang-tools
       nixd
       nodejs_24
-	  glsl_analyzer
+      glsl_analyzer
+      (pkgs.python3.withPackages (ps: with ps; [
+        python-lsp-server
+        pylsp-mypy
+        python-lsp-ruff
+        pycodestyle
+      ]))
     ];
 
-	programs.neovim.extraConfig = ''
+#    programs.neovim.extraLuaConfig = ''
+#      vim.lsp.config('pylsp', {})
+#    '';
+
+    programs.neovim.extraLuaConfig = ''
+      local coq = require "coq"
+
+      vim.lsp.config('clangd', coq.lsp_ensure_capabilities({}))
+      vim.lsp.enable('clangd')
+
+      vim.lsp.config('nixd', coq.lsp_ensure_capabilities({}))
+      vim.lsp.enable('nixd')
+
+      vim.lsp.config('glsl_analyzer', coq.lsp_ensure_capabilities({}))
+      vim.lsp.enable('glsl_analyzer')
+
+      vim.lsp.config('pylsp', coq.lsp_ensure_capabilities({
+        cmd = {"pylsp", "-vvv", "--log-file", "/tmp/lsp.log"}
+      }))
+      vim.lsp.enable('pylsp')
+
+    '';
+
+    programs.neovim.extraConfig = ''
       set number
       set ai
       autocmd BufWinLeave *.* mkview
       autocmd BufWinEnter *.* silent! loadview
+	  autocmd VimEnter * COQnow --shut-up
       set tabstop=4
       set scrolloff=10
       set smartindent 
-	  set shiftwidth=4
+      set shiftwidth=4
       map <silent> <C-N> :bnext<CR>
       map <silent> <C-P> :bprevious<CR>
       nmap <silent> <c-k> :wincmd k<CR>
@@ -57,41 +87,42 @@
       Plug 'bluz71/vim-nightfly-colors'
       Plug 'catppuccin/nvim', { 'as': 'catppuccin' }
       Plug 'tikhomirov/vim-glsl'
-	  Plug 'lambdalisue/nerdfont.vim'
+      Plug 'lambdalisue/nerdfont.vim'
-	  Plug 'lambdalisue/glyph-palette.vim'
+      Plug 'lambdalisue/glyph-palette.vim'
-	  Plug 'lambdalisue/fern-renderer-nerdfont.vim'
+      Plug 'lambdalisue/fern-renderer-nerdfont.vim'
-	  Plug 'lambdalisue/fern-git-status.vim'
+      Plug 'lambdalisue/fern-git-status.vim'
-	  Plug 'lambdalisue/fern.vim'
+      Plug 'lambdalisue/fern.vim'
+      Plug 'ms-jpq/coq_nvim', { 'branch': 'coq' }
+      Plug 'ms-jpq/coq.artifacts', { 'branch': 'artifacts' }
+      Plug 'ms-jpq/coq.thirdparty', { 'branch': '3p' }
       call plug#end()
       
       colorscheme catppuccin-mocha
       
-      lua require'lspconfig'.clangd.setup{}
-      lua require'lspconfig'.nixd.setup{}
-      lua require'lspconfig'.glsl_analyzer.setup{}
       set signcolumn=auto
 
       nnoremap <leader>ff <cmd>Telescope find_files<cr>
       nnoremap <leader>fg <cmd>Telescope live_grep<cr>
       nnoremap <leader>fb <cmd>Telescope buffers<cr>
       nnoremap <leader>fh <cmd>Telescope help_tags<cr>
-	  nnoremap <leader>fi <cmd>Fern %:h<cr>
+      nnoremap <leader>fi <cmd>Fern %:h<cr>
 
-      let g:user42	= 'tomoron'
+      let g:user42    = 'tomoron'
-      let g:mail42	= 'tomoron@student.42angouleme.fr'
+      let g:mail42    = 'tomoron@student.42angouleme.fr'
-	  let g:fern#renderer = "nerdfont"
+      let g:fern#renderer = "nerdfont"
-	'';
+
+    '';
 
     home.file = {
       #install plug.vim
-      ".local/share/nvim/site/autoload/plug.vim".source = "${builtins.fetchGit {
+      ".local/share/nvim/site/autoload/plug.vim".source = "${fetchGit {
         url = "https://github.com/junegunn/vim-plug";
         rev = "d80f495fabff8446972b8695ba251ca636a047b0";
         ref = "master"; 
       }}/plug.vim";
 
       #install stdheader 42
-      ".config/nvim/plugin/stdheader.vim".source = "${builtins.fetchGit {
+      ".config/nvim/plugin/stdheader.vim".source = "${fetchGit {
         url = "https://github.com/42Paris/42header";
         rev = "e6e6b191871545e0d43f1aad817070bc806b8fa7";
         ref = "master";

homeConfigs/modules/wayland/hyprland.nix

@@ -168,7 +168,11 @@
         layout = "dwindle";
       };
 
-	  layerrule = "noanim, selection";
+	  layerrule = {
+		name = "no_anim_for_selection";
+        no_anim = "on";
+        "match:namespace" = "selection";
+	  };
   
   	  cursor.no_warps = true;
   

homeConfigs/packages.nix

@@ -6,7 +6,7 @@
 #    By: tomoron <tomoron@student.42angouleme.fr>   +#+  +:+       +#+         #
 #                                                 +#+#+#+#+#+   +#+            #
 #    Created: 2025/02/09 22:01:56 by tomoron           #+#    #+#              #
-#    Updated: 2025/11/17 11:55:17 by tomoron          ###   ########.fr        #
+#    Updated: 2026/02/06 23:43:40 by tomoron          ###   ########.fr        #
 #                                                                              #
 # **************************************************************************** #
 
@@ -34,7 +34,6 @@
     unison
     brightnessctl  
     playerctl
-    python3
     vlc
     nix-index
     yubikey-manager
@@ -47,5 +46,6 @@
 	sops
 	libreoffice
 	doxygen
+	qimgv
   ];
 }

osConfigs/global/ld.nix

@@ -0,0 +1,160 @@
+# **************************************************************************** #
+#                                                                              #
+#                                                         :::      ::::::::    #
+#    ld.nix                                             :+:      :+:    :+:    #
+#                                                     +:+ +:+         +:+      #
+#    By: tomoron <tomoron@student.42angouleme.fr>   +#+  +:+       +#+         #
+#                                                 +#+#+#+#+#+   +#+            #
+#    Created: 2025/12/30 20:37:07 by tomoron           #+#    #+#              #
+#    Updated: 2026/02/05 12:47:23 by tomoron          ###   ########.fr        #
+#                                                                              #
+# **************************************************************************** #
+
+{pkgs, ... }:
+
+{
+	programs.nix-ld.enable = true;
+	programs.nix-ld.libraries = with pkgs; [
+	  # List by default
+      zlib
+      zstd
+      stdenv.cc.cc
+      curl
+      openssl
+      attr
+      libssh
+      bzip2
+      libxml2
+      acl
+      libsodium
+      util-linux
+      xz
+      systemd
+      
+      # My own additions
+      xorg.libXcomposite
+      xorg.libXtst
+      xorg.libXrandr
+      xorg.libXext
+      xorg.libX11
+      xorg.libXfixes
+      libGL
+      libva
+      pipewire
+      xorg.libxcb
+      xorg.libXdamage
+      xorg.libxshmfence
+      xorg.libXxf86vm
+      libelf
+
+      # Required
+      glib
+      gtk2
+
+      # Inspired by steam
+      # https://github.com/NixOS/nixpkgs/blob/master/pkgs/by-name/st/steam/package.nix#L36-L85
+      networkmanager      
+      vulkan-loader
+      libgbm
+      libdrm
+      libxcrypt
+      coreutils
+      pciutils
+      zenity
+      # glibc_multi.bin # Seems to cause issue in ARM
+      
+      # # Without these it silently fails
+      xorg.libXinerama
+      xorg.libXcursor
+      xorg.libXrender
+      xorg.libXScrnSaver
+      xorg.libXi
+      xorg.libSM
+      xorg.libICE
+      gnome2.GConf
+      nspr
+      nss
+      cups
+      libcap
+      SDL2
+      libusb1
+      dbus-glib
+      ffmpeg
+      # Only libraries are needed from those two
+      libudev0-shim
+      
+      # needed to run unity
+      gtk3
+      icu
+      libnotify
+      gsettings-desktop-schemas
+      # https://github.com/NixOS/nixpkgs/issues/72282
+      # https://github.com/NixOS/nixpkgs/blob/2e87260fafdd3d18aa1719246fd704b35e55b0f2/pkgs/applications/misc/joplin-desktop/default.nix#L16
+      # log in /home/leo/.config/unity3d/Editor.log
+      # it will segfault when opening files if you don’t do:
+      # export XDG_DATA_DIRS=/nix/store/0nfsywbk0qml4faa7sk3sdfmbd85b7ra-gsettings-desktop-schemas-43.0/share/gsettings-schemas/gsettings-desktop-schemas-43.0:/nix/store/rkscn1raa3x850zq7jp9q3j5ghcf6zi2-gtk+3-3.24.35/share/gsettings-schemas/gtk+3-3.24.35/:$XDG_DATA_DIRS
+      # other issue: (Unity:377230): GLib-GIO-CRITICAL **: 21:09:04.706: g_dbus_proxy_call_sync_internal: assertion 'G_IS_DBUS_PROXY (proxy)' failed
+      
+      # Verified games requirements
+      xorg.libXt
+      xorg.libXmu
+      libogg
+      libvorbis
+      SDL
+      SDL2_image
+      glew_1_10
+      libidn
+      tbb
+      
+      # Other things from runtime
+      flac
+      freeglut
+      libjpeg
+      libpng
+      libpng12
+      libsamplerate
+      libmikmod
+      libtheora
+      libtiff
+      pixman
+      speex
+      SDL_image
+      SDL_ttf
+      SDL_mixer
+      SDL2_ttf
+      SDL2_mixer
+      libappindicator-gtk2
+      libdbusmenu-gtk2
+      libindicator-gtk2
+      libcaca
+      libcanberra
+      libgcrypt
+      libvpx
+      librsvg
+      xorg.libXft
+      libvdpau
+      # ...
+      # Some more libraries that I needed to run programs
+      pango
+      cairo
+      atk
+      gdk-pixbuf
+      fontconfig
+      freetype
+      dbus
+      alsa-lib
+      expat
+      # for blender
+      libxkbcommon
+
+      libxcrypt-legacy # For natron
+      libGLU # For natron
+
+      # Appimages need fuse, e.g. https://musescore.org/fr/download/musescore-x86_64.AppImage
+      fuse
+      e2fsprogs
+
+      webkitgtk_4_1
+	  libsoup_3
+	];
+}

osConfigs/global/nix-alien.nix

@@ -0,0 +1,12 @@
+{ ... }:
+
+let
+  nix-alien-pkgs = import (
+    builtins.fetchTarball "https://github.com/thiagokokada/nix-alien/tarball/master"
+  ) { };
+in
+{
+  environment.systemPackages = with nix-alien-pkgs; [
+    nix-alien
+  ];
+}

osConfigs/global/packages.nix

@@ -6,7 +6,7 @@
 #    By: tomoron <tomoron@student.42angouleme.fr>   +#+  +:+       +#+         #
 #                                                 +#+#+#+#+#+   +#+            #
 #    Created: 2025/09/06 00:57:21 by tomoron           #+#    #+#              #
-#    Updated: 2025/09/06 00:57:26 by tomoron          ###   ########.fr        #
+#    Updated: 2025/12/30 18:12:05 by tomoron          ###   ########.fr        #
 #                                                                              #
 # **************************************************************************** #
 
@@ -21,5 +21,7 @@
     ntfs3g
     cryptsetup
     acpi
+
+	nss
   ];
 }

osConfigs/global/sops.nix

@@ -0,0 +1,8 @@
+{lib, ...}:
+
+{
+  sops = {
+    defaultSopsFile = ../../secrets/secrets.yaml;
+    age.keyFile = "/home/tom/.config/sops/age/keys.txt";
+  };
+}

osConfigs/global/user.nix

@@ -6,7 +6,7 @@
 #    By: tomoron <tomoron@student.42angouleme.fr>   +#+  +:+       +#+         #
 #                                                 +#+#+#+#+#+   +#+            #
 #    Created: 2025/09/05 23:42:18 by tomoron           #+#    #+#              #
-#    Updated: 2025/09/06 00:57:32 by tomoron          ###   ########.fr        #
+#    Updated: 2026/01/13 16:32:42 by tomoron          ###   ########.fr        #
 #                                                                              #
 # **************************************************************************** #
 

osConfigs/hosts/desktop.nix

@@ -6,7 +6,7 @@
 #    By: tomoron <tomoron@student.42angouleme.fr>   +#+  +:+       +#+         #
 #                                                 +#+#+#+#+#+   +#+            #
 #    Created: 2025/09/06 00:57:04 by tomoron           #+#    #+#              #
-#    Updated: 2025/12/01 19:49:12 by tomoron          ###   ########.fr        #
+#    Updated: 2025/12/23 18:41:48 by tomoron          ###   ########.fr        #
 #                                                                              #
 # **************************************************************************** #
 

osConfigs/hosts/laptop.nix

@@ -6,7 +6,7 @@
 #    By: tomoron <tomoron@student.42angouleme.fr>   +#+  +:+       +#+         #
 #                                                 +#+#+#+#+#+   +#+            #
 #    Created: 2025/09/06 00:56:57 by tomoron           #+#    #+#              #
-#    Updated: 2025/11/21 10:40:19 by tomoron          ###   ########.fr        #
+#    Updated: 2026/02/03 14:40:35 by tomoron          ###   ########.fr        #
 #                                                                              #
 # **************************************************************************** #
 
@@ -40,11 +40,13 @@
   networking.firewall.enable = false;
 
   networking.hostName = "patate-douce";
-  networking.wireless.enable = true;
+#  networking.wireless.enable = true;
+  networking.networkmanager.wifi.backend = "iwd";
+  networking.wireless.iwd.enable = true;
+  networking.wireless.allowAuxiliaryImperativeNetworks = true;
   networking.networkmanager.enable = false;
 
   specialisation.vfio_ready.configuration = {
-    boot.kernel.sysctl."vm.nr_hugepages" = 5120;
     boot.extraModulePackages = with config.boot.kernelPackages; [ kvmfr ];
     boot.kernelModules = [ "kvmfr" ];
     boot.extraModprobeConfig = ''
@@ -57,8 +59,6 @@
             "/dev/random", "/dev/urandom",
             "/dev/ptmx", "/dev/kvm",
             "/dev/rtc","/dev/hpet",
-            "/dev/input/by-id/[some_mouse_device]-event-mouse",
-            "/dev/input/by-id/[some_keyboard_device]-event-kbd"
         ]
     '';
     services.udev.extraRules = ''
@@ -66,6 +66,11 @@
     '';
     environment.systemPackages = with pkgs; [ looking-glass-client ];
   };
+  services.udev.extraRules = ''
+    SUBSYSTEM=="usb", ATTRS{idVendor}=="2e3c", ATTRS{idProduct}=="df11", TAG+="uaccess"
+    SUBSYSTEM=="usb", ATTRS{idVendor}=="0483", ATTRS{idProduct}=="df11", TAG+="uaccess"
+  '';
+   
 
   networking.dhcpcd.enable = false;
   systemd.network.enable = true;
@@ -82,8 +87,6 @@
 
   mods.touchpad.enable = true;
 
-#  programs.gamescope.capSysNice = true;
-
   mods.powerSave = {
     enable = true;
     powahCommandAdditions = [
@@ -125,7 +128,7 @@
   mods.nvidia.prime = true;
 
 
-  services.usbmuxd.enable = true; #hangs when shutting down
+  services.usbmuxd.enable = true; #sometimes hangs when shutting down
 
 #  boot.plymouth = {
 #    enable = true;
@@ -138,13 +141,5 @@
   services.flatpak.enable = true;
 
 
-  services.dnsmasq.enable = true;
+  services.k3s.enable = true;
-  services.dnsmasq.settings = {
-	  "dhcp-range" = ["192.168.1.150,192.168.1.250"];
-	  "dhcp-option" = [
-	    "3,192.168.1.254"
-	    "6,1.1.1.1,8.8.8.8,8.8.4.4"
-	  ];
-	  "interface" = "enp4s0f4u1";
-	};
 }

osConfigs/hosts/server.nix

@@ -6,7 +6,7 @@
 #    By: tomoron <tomoron@student.42angouleme.fr>   +#+  +:+       +#+         #
 #                                                 +#+#+#+#+#+   +#+            #
 #    Created: 2025/09/06 00:57:09 by tomoron           #+#    #+#              #
-#    Updated: 2025/09/06 01:26:26 by tomoron          ###   ########.fr        #
+#    Updated: 2026/01/27 18:56:23 by tomoron          ###   ########.fr        #
 #                                                                              #
 # **************************************************************************** #
 
@@ -20,6 +20,7 @@ let
     8083 137 138 139 445 548 3702 5357 #prob some samba shit
     24454 #minecraft voice chat
     25565 # minecraft server
+	9091 # transmission web interface
   ];
   portRanges = [
     {from = 47950; to = 49000;} #moonlight (wolf)
@@ -31,13 +32,32 @@ in
     config.boot.kernelPackages.gasket #driver for google coral edge tpu
   ];
 
+
   services.openssh.enable = true;
   services.openssh.settings.PasswordAuthentication = false;
   services.openssh.ports = [ 1880 ];
 
+  sops.secrets."cloudflared/token" = {};
+  systemd.services.cloudflared = {
+	after = [
+      "network.target"
+      "network-online.target"
+    ];
+	wants = [
+      "network.target"
+      "network-online.target"
+    ];
+	wantedBy = [ "multi-user.target" ];
+	serviceConfig = {
+	  ExecStart = ''${pkgs.bash}/bin/bash -c '${pkgs.cloudflared}/bin/cloudflared tunnel --no-autoupdate run --token "$(cat ${config.sops.secrets."cloudflared/token".path})"' '';
+	  Restart = "on-failure";
+	};
+  };
+
   boot.extraModprobeConfig = ''
     options amdgpu virtual_display=1
-  ''; #create dummy display to be able to start x11
+# create dummy display to be able to start x11
+  ''; 
 
   boot.supportedFilesystems = [ "zfs" ];
 
@@ -68,6 +88,10 @@ in
   services.fail2ban.enable = true;
   services.fail2ban.bantime = "5h";
 
+  mods.nvidia.enable = true;
+  mods.nvidia.beta = true;
+  mods.nvidia.containerToolkit = true;
+
   mods.docker = {
     enable = true;
     boot = true;

osConfigs/modules/nvidia.nix

@@ -6,7 +6,7 @@
 #    By: tomoron <tomoron@student.42angouleme.fr>   +#+  +:+       +#+         #
 #                                                 +#+#+#+#+#+   +#+            #
 #    Created: 2025/09/05 23:47:19 by tomoron           #+#    #+#              #
-#    Updated: 2025/10/26 21:12:18 by tomoron          ###   ########.fr        #
+#    Updated: 2025/12/23 18:42:01 by tomoron          ###   ########.fr        #
 #                                                                              #
 # **************************************************************************** #
 
@@ -38,7 +38,7 @@
     prime = lib.mkOption {
       type = lib.types.bool;
       default = false;
-      description = "enable nvidia prime offload (saves battery)";
+      description = "enable nvidia prime offload (saves battery). prime ?";
     };
   };
   

secrets/secrets.yaml

@@ -1,6 +1,8 @@
 #ENC[AES256_GCM,data:1NcFm2XqZzmSSlr8wH4aXHDBhf+lOaZ/gUeK2T/U/hIBbqtfKtw=,iv:yS5iogRp6e3We/7wZnGy0XJzqLVfRVKlDhUs+tamcJ0=,tag:+z/qqF9n6/hQfv9aWXkCDQ==,type:comment]
 nextcloud_fuse:
     password: ENC[AES256_GCM,data:Rlyc9wO3rXJ97AAMzM+vJclEJ+eaSPtHkitqRL0=,iv:yuS2Tyo2HZGVb9tbWmmgOEwkyzLhlvq8iZ2YjGD0u9E=,tag:pf8n4pTvseh1pd12w8w4tw==,type:str]
+cloudflared:
+    token: ENC[AES256_GCM,data:LS1VIwbbVsJxZ90p+kK4xJhzrBRJ51XL2j8mGLDVj5JjYJKXKBDIXtlb0x8A9WDIVyBuLBkE9pfSfQXtvfvZdUeyXswVJFUNW0mX3yC/WaeNQdPYy7UgyGjorqk31aNJ6b9XqtdfV0++qPvXQDvwn44UY0juuiIJ5KcLZEskRcqVTilG5WYi/nInhGbSqtzniRNvrbsynIq0CVQDhi3haCHNpCJMQUIyXM/g6Xsc9b++GYlHjgrtHQ==,iv:DbvJfbMblgr6+dYBJqDSzECKK90Nkq8Eci5dC8fMIXQ=,tag:bjAs8p5dAkh2Adon0JDNqg==,type:str]
 sops:
     age:
         - recipient: age1sjzkhwr8ycdsmuj8xg8y4v2hcpuq9vethnhytxtwzeury692dsxqf80fwv
@@ -12,7 +14,7 @@ sops:
             clZaazZQdW5wYUhUNmM0QW91K0NLOTAKB6z7cKg54QmJo0U03u6RQkSCfJOAdeJa
             DiyPYjm02BNe8YPFbBFRpyT7G++j3h0yG+/Nr2zcQFyMMEpMv5QJvg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-09-05T17:58:05Z"
+    lastmodified: "2025-12-16T16:16:27Z"
-    mac: ENC[AES256_GCM,data:96G7VqaG8A46tQ1L7I2asiYtNZF7K3Wf+SzbwPrNV8zQio2jInawtD4WSzHmLs4Nv7M1TBHug/ho8mfYq6auXgpathiSzvj0Tzs/IEKXiTYa86tM3szwAepavMYWOl6OYJ7S39ku6BOMo3qC2BK/gpT5iy4c84ashn2wFd1n41A=,iv:6TShIsqnhCf/3uoAaz/R+Cwr2HrorROOXodXluTKM8M=,tag:BA9rQ73scKgetW3orV0HdQ==,type:str]
+    mac: ENC[AES256_GCM,data:2Ju1exddd4qcru1UjXKXUBjugUWT9D2HJjKV03JwMCL4Wssb/H6DNNRJcmD0oXqA9DnEp5NpElhwa93LcogcNVsXL+sKGzQpP5m+/vDVfl2NcwdLyBVIvTQ0dASee/JMwBLcgcYBZuvL00Twv07/ImdvYROIs/fQUSualc6Sgcw=,iv:XsJ1MYLwLuFPLYGJoa/RsfAqs88AQwuH+3ItWc681LU=,tag:8pNSPKnv0yLoNrmxb9l2Xg==,type:str]
     unencrypted_suffix: _unencrypted
-    version: 3.10.2
+    version: 3.11.0