desktop-flake -

	Commit message (Collapse)	Author	Age	Files
*	Provision nh via the shared home profile	Tom van der Lee	2026-09-29	1
\| \| \| \| \| \| \| \| \|	Enables programs.nh so the nh CLI helper is available cross-platform alongside the rest of modules/home/dev-tools.nix, without wiring NH_FLAKE/etc (those wouldn't reliably reach the shell, since the dotfiles repo owns bash config, not home-manager). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
*	Enable nix-ld so uv-managed prebuilt binaries run on NixOS	Tom van der Lee	2026-09-24	1
\| \| \| \| \| \| \| \| \| \|	uv fetches prebuilt CPython interpreters and native wheel extensions that expect a standard glibc loader path, which doesn't exist on NixOS without nix-ld. Enables it unconditionally on every NixOS host and extends its library set with common CPython native-extension dependencies not already covered by nix-ld's own defaults. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
*	Detect NixOS host timezone automatically instead of defaulting to UTC	Tom van der Lee	2026-09-24	1
\| \| \| \| \| \| \| \| \|	Enables services.automatic-timezoned so every host's clock/calendar reflects its actual location with no manual timedatectl step or auth prompt, since GNOME's own automatic-timezone toggle isn't wired to a passwordless polkit rule on NixOS the way KDE's is. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
*	Add helm to the shared developer CLI toolset	Tom van der Lee	2026-09-24	1
\| \| \| \| \| \| \|	Tom wants the Helm CLI available alongside kubectl for managing charts against whatever cluster kubectl is already pointed at. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
*	Provision the JetBrains Mono Nerd Font via the shared home profile	Tom van der Lee	2026-09-24	2
\| \| \| \| \| \| \| \|	Ghostty and Neovim both render glyphs (statusline icons, file-tree icons) that need a Nerd Font, and no font was previously provisioned at all. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
*	Switch Docker to rootful after the rootless setup broke in practice	Tom van der Lee	2026-09-24	1
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Rootless Docker's per-user systemd unit didn't start in a session that was already logged in before a switch, and DOCKER_HOST only reaches freshly-started shells -- both bit Tom immediately (docker run failed against the default rootful socket path, which never existed under rootless). virtualisation.docker.enable = true now runs dockerd as a standard root system service, started at boot; tom joins the docker group for sudo-less access. Trades rootless's isolation guarantee for reliability on a long-lived desktop session. Archives switch-docker-rootful and syncs the container-runtime capability's requirements and Purpose text to match. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01HngxrvqEzq8oBEBDtrYJyB
*	Add uv and a rootless Docker runtime on NixOS hosts	Tom van der Lee	2026-09-24	2
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	uv joins the CLI package list. Docker's daemon is now actually managed on NixOS hosts too, in rootless mode (per-user systemd service, no docker-group root-equivalent access), rather than leaving the runtime entirely externally-managed as before -- the already-installed docker CLI picks it up automatically via DOCKER_HOST. This is a documented, narrow exception to developer-environment's client-only tools policy; kubectl and awscli2 remain unaffected. Archives add-uv-and-docker-runtime and syncs the new container-runtime capability plus the narrowed developer-environment requirement into the main specs. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01HngxrvqEzq8oBEBDtrYJyB
*	Add GNOME Extension Manager on GNOME-enabled NixOS hosts	Tom van der Lee	2026-09-24	1
\| \| \| \| \| \| \| \| \|	pkgs.gnome-extension-manager joins gnome-tweaks in the osConfig-gated list added in the prior change, so it's provisioned only where GNOME is actually enabled rather than on any Linux system. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01HngxrvqEzq8oBEBDtrYJyB
*	Add Ghostty, GNOME Tweaks, and a GNOME dark-mode default	Tom van der Lee	2026-09-24	2
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	Ghostty joins the cross-platform desktop app list (Linux-only in nixpkgs today, filtered out on darwin by the existing availableOn check). GNOME Tweaks is gated on osConfig.services.desktopManager.gnome.enable rather than plain isLinux, since modules/home/desktop-apps.nix is also consumed by the standalone, non-NixOS tom@linux home-manager profile, which has no GNOME involved. Every NixOS host now also gets a dconf default of org/gnome/desktop/interface color-scheme=prefer-dark, left unlocked so GNOME Settings can still switch back to light mode. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01HngxrvqEzq8oBEBDtrYJyB
*	Add Firefox and Bitwarden to the shared desktop-applications profile	Tom van der Lee	2026-09-21	2
\| \| \| \| \| \| \| \| \| \|	Tom wanted a browser and password manager provisioned declaratively: Firefox and the Bitwarden desktop client join the existing GUI app list, and bitwarden-cli joins the developer CLI tools. All three are free-licensed in current nixpkgs, so no unfree-allowlist change is needed. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
*	Add Slack, Discord, Spotify, teams-for-linux, and Claude Code	Tom van der Lee	2026-09-21	3
\| \| \| \| \| \| \| \| \| \|	Provisions these via home-manager, scoping unfree-package access to exactly these packages and skipping any that aren't available for the current system/architecture (e.g. aarch64-linux lacks Discord/Spotify builds) instead of failing evaluation. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01BBSd4VBfoKHjE1HR3P8kmn
*	Provision nodejs/python3/unzip for mason.nvim installers	Tom van der Lee	2026-09-21	1
\| \| \| \| \| \| \| \| \|	mason.nvim (externally-managed Neovim dotfiles config) was failing to install several LSP servers and tools because npm, python3, and unzip weren't on PATH in the Home Manager profile. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01BBSd4VBfoKHjE1HR3P8kmn
*	Fix Nix evaluation deprecation warnings	Tom van der Lee	2026-09-21	2
\| \| \| \| \| \| \| \| \| \| \|	Replace deprecated pkgs.stdenv.isDarwin/isLinux with pkgs.stdenv.hostPlatform.isDarwin/.isLinux, and explicitly pin programs.neovim.withRuby/withPython3 = true so the legacy default doesn't silently change if home.stateVersion is ever bumped. Pure deprecation fixes, no behavior change. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01BBSd4VBfoKHjE1HR3P8kmn
*	Fix Neovim plugins never loading via sideloadInitLua	Tom van der Lee	2026-09-21	2
\| \| \| \| \| \| \| \| \| \| \| \| \|	home-manager's programs.neovim module always writes a non-empty ~/.config/nvim/init.lua, which permanently conflicts with Stow linking the dotfiles-owned lazy.nvim config to that same path - Stow skips the package and plugins never load. Setting sideloadInitLua = true frees that path for the dotfiles config to own exclusively. Also provisions a C compiler and tree-sitter (moved from dev-tools.nix) so natively- built plugins can compile on every platform. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01BBSd4VBfoKHjE1HR3P8kmn
*	Add always-on ~/.bash_profile bootstrap for login shells	Tom van der Lee	2026-09-21	2
\| \| \| \| \| \| \| \| \| \|	NixOS and most other Linux distros don't ship a ~/.bash_profile that sources ~/.bashrc, so login shells miss the user's bash config. Adds a home-manager activation script that creates one only when absent, on every platform, without ever touching a pre-existing .bash_profile. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01BBSd4VBfoKHjE1HR3P8kmn
*	Enable GNOME desktop by default on every NixOS host	Tom van der Lee	2026-09-18	1
\| \| \| \| \| \| \| \| \| \| \|	Add GDM+GNOME, NetworkManager, PipeWire audio, and CUPS+Avahi printing to modules/nixos/common.nix, applied unconditionally to every NixOS host built from this flake, per add-gnome-desktop. nix flake check remains unverified: Nix isn't installed on this machine and no live NixOS host exists yet to boot-test against. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01BBSd4VBfoKHjE1HR3P8kmn
*	Skip platform-irrelevant dotfiles packages during stow	Tom van der Lee	2026-09-18	1
\| \| \| \| \| \| \| \| \| \|	iterm2 was being stowed on Linux and herbstluftwm/xorg on Darwin. Add a built-in Darwin/Linux exclude default plus an excludePackages override option in modules/home/dotfiles.nix, superseding the earlier "accept harmless unused symlinks" decision. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01BBSd4VBfoKHjE1HR3P8kmn
*	Remove unused authorized SSH key (SHA256:Si2Y/8xh...)	Tom van der Lee	2026-09-18	1
\|
*	Provision authorized SSH key for tom, fixing the lockout	Tom van der Lee	2026-09-18	1
\| \| \| \| \| \| \| \|	services.openssh.settings.PasswordAuthentication = false was enabled with no authorized key ever provisioned for the tom user, locking out all SSH access on the first real host (floep). Adds the public keys from https://github.com/tomvanderlee.keys as static literals -- a one-time fetch, not a build-time network dependency, to stay pure.
*	Add most-used dev tools, sshd/firewall, bash+liquidprompt shell	Tom van der Lee	2026-09-17	4
\| \| \| \| \| \| \| \| \| \|	modules/home/dev-tools.nix provisions the developer's evidenced most- used CLI/client tooling (gh, tmux, htop, yq-go, tree-sitter, docker, docker-compose, kubectl, awscli2). modules/home/shell.nix drops zsh/ starship/direnv in favor of bash + liquidprompt, both left entirely to the user's own dotfiles for config since home-manager can't own ~/.bashrc without conflicting with it. modules/nixos/common.nix adds sshd (key-only auth) and a firewall baseline for future NixOS hosts.
*	Add automatic dotfiles clone + stow	Tom van der Lee	2026-09-17	4
\| \| \| \| \| \| \| \| \| \|	modules/home/dotfiles.nix clones ~/dotfiles on activation (only if not already present) and stows every top-level package directory into $HOME, independently per package so one conflict doesn't block the rest. Removes home-manager's own git config management in favor of letting the stowed ~/dotfiles/git/.gitconfig own it, and adds homeConfigurations."tom@darwin" so the feature is usable on this Mac. users/tom.nix now points home.dotfiles.repoUrl at the real repo.
*	Add cross-platform Nix flake bootstrap	Tom van der Lee	2026-09-17	6
	Adds a flake providing shared modules for NixOS and standalone home-manager, a copyable NixOS host template, and the OpenSpec tooling/change scaffolding used to plan this work.