refactor everything holy fuck

modules/sys/compat.nix

@@ -0,0 +1,6 @@
+{
+  programs.nix-ld.enable = true;
+  programs.appimage.enable = true;
+  programs.appimage.binfmt = true;
+  services.dbus.implementation = "broker";
+}

modules/sys/firewall.nix

@@ -0,0 +1,13 @@
+{
+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [ 4713 ];
+    #allowedUDPPorts = [ 80 443 ];
+    allowedTCPPortRanges = [
+      { from = 8000; to = 9000; }
+    ];
+    allowedUDPPortRanges = [
+      { from = 8000; to = 9000; }
+    ];
+  };
+}

modules/sys/fs/btrfs.nix

@@ -0,0 +1,7 @@
+{
+  services.btrfs.autoScrub = {
+    enable = true;
+    interval = "weekly";
+    fileSystems = [ "/" ];
+  };
+}

modules/sys/hw/boot.nix

@@ -0,0 +1,9 @@
+{ pkgs, ... }:
+
+{
+  boot.loader.limine.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+  boot.kernelPackages = pkgs.linuxPackages_xanmod_latest;
+  boot.extraModulePackages = [ ];
+  boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "ahci" "usb_storage" "usbhid" "sd_mod" "sr_mod" ];
+}

modules/sys/hw/cpu/amd64.nix

@@ -0,0 +1,5 @@
+{
+  boot.binfmt.preferStaticEmulators = true;
+  boot.binfmt.emulatedSystems = [ "aarch64-linux" "x86_64-windows" ];
+  boot.kernelModules = [ "kvm-amd" ];
+}

modules/sys/hw/cpu/arm64.nix

@@ -0,0 +1,4 @@
+{
+  boot.binfmt.preferStaticEmulators = true;
+  boot.binfmt.emulatedSystems = [ "x86_64-linux" "i386-linux" ];
+}

modules/sys/hw/cpu/intel.nix

@@ -0,0 +1,5 @@
+{
+  boot.binfmt.preferStaticEmulators = true;
+  boot.binfmt.emulatedSystems = [ "aarch64-linux" "x86_64-windows" ];
+  boot.kernelModules = [ "kvm-intel" ];
+}

modules/sys/hw/gpu/amd.nix

@@ -0,0 +1,3 @@
+{
+    
+}

modules/sys/hw/gpu/intel.nix

@@ -0,0 +1,20 @@
+{ pkgs, ... }:
+{
+  boot.kernelParams = [ "i915.enable_guc=3" ];
+  # Graphics
+  hardware.enableRedistributableFirmware = true;
+  hardware.graphics = {
+    enable = true;
+    enable32Bit = true;
+    extraPackages = with pkgs; [
+      # Required for modern Intel GPUs (Xe iGPU and ARC)
+      intel-media-driver     # VA-API (iHD) userspace
+      vpl-gpu-rt             # oneVPL (QSV) runtime
+
+      # Optional (compute / tooling):
+      intel-compute-runtime  # OpenCL (NEO) + Level Zero for Arc/Xe
+      # NOTE: 'intel-ocl' also exists as a legacy package; not recommended for Arc/Xe.
+      # libvdpau-va-gl       # Only if you must run VDPAU-only apps
+    ];
+  };
+}

modules/sys/nix.nix

@@ -0,0 +1,21 @@
+{
+  nix = {
+    settings = {
+      experimental-features = [ "nix-command" "flakes" ];
+      substituters = [
+        "https://nix-community.cachix.org"
+        "https://cache.nixos.org/"
+      ];
+      trusted-public-keys = [
+        "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
+      ];
+    };
+    optimise.automatic = true;
+    gc = {
+      automatic = true;
+      dates = "daily";
+      options = "--delete-older-than 2d";
+    };
+  };
+  nixpkgs.config.allowUnfree = true;
+}

modules/sys/perf.nix

@@ -0,0 +1,8 @@
+{
+  services.system76-scheduler.enable = true;
+  #services.thermald.enable = true;
+  services.power-profiles-daemon.enable = true;
+  systemd.coredump.enable = false;
+  zramSwap.enable = true;
+  zramSwap.memoryPercent = 80;
+}

modules/sys/pkgs.nix

@@ -0,0 +1,15 @@
+{ pkgs, ... }:
+{
+  environment.systemPackages = with pkgs; [
+    git
+    neovim
+    caligula
+    openssl
+    topgrade
+    htop
+    mosh
+    btop
+    wget2
+    python314
+  ];
+}

modules/sys/rc/openssh.nix

@@ -0,0 +1,6 @@
+{
+  services.openssh = {
+    enable = true;
+    settings.PasswordAuthentication = true;
+  };
+}

modules/sys/rc/sunshine.nix

@@ -0,0 +1,8 @@
+{
+  services.sunshine = {
+    enable = true;
+    autoStart = true;
+    capSysAdmin = true;
+    openFirewall = true;
+  };
+}

modules/sys/rgb.nix

@@ -0,0 +1,13 @@
+{ pkgs, lib, ... }:
+
+{
+  # OpenRGB
+  services.hardware.openrgb = { 
+    enable = true; 
+    package = pkgs.openrgb-with-all-plugins; 
+    motherboard = "amd"; 
+    server = { 
+      port = 6742;
+    }; 
+  };
+}

modules/sys/security.nix

@@ -0,0 +1,10 @@
+{
+  security.polkit.enable = true;
+  system.autoUpgrade = {
+    enable = true;
+    flake = "git+https://k3t.dev/git/nixconf.git?branch=main";
+    operation = "boot";
+    allowReboot = true;
+    rebootWindow = { lower = "10:00"; upper = "14:00"; };
+  };
+}

modules/sys/shell.nix

@@ -0,0 +1,7 @@
+{ pkgs, ... }:
+
+{
+  programs.zsh.enable = true;
+  users.defaultUserShell = pkgs.zsh;
+  environment.pathsToLink = [ "/share/zsh" ];
+}

modules/sys/stateversion.nix

@@ -0,0 +1,3 @@
+{
+  system.stateVersion = "25.11";
+}

modules/sys/tz.nix

@@ -0,0 +1,15 @@
+{
+  time.timeZone = "America/Denver";
+  i18n.defaultLocale = "en_US.UTF-8";
+  i18n.extraLocaleSettings = {
+    LC_ADDRESS = "en_US.UTF-8";
+    LC_IDENTIFICATION = "en_US.UTF-8";
+    LC_MEASUREMENT = "en_US.UTF-8";
+    LC_MONETARY = "en_US.UTF-8";
+    LC_NAME = "en_US.UTF-8";
+    LC_NUMERIC = "en_US.UTF-8";
+    LC_PAPER = "en_US.UTF-8";
+    LC_TELEPHONE = "en_US.UTF-8";
+    LC_TIME = "en_US.UTF-8";
+  };
+}

modules/sys/users.nix

@@ -0,0 +1,9 @@
+{
+  users.users.k3t = {
+    description = "Kai Moore";
+    isNormalUser = true;
+    extraGroups = [ "audio" "video" "bluetooth" "wheel" "input" "networkmanager" ];
+    initialPassword = "password";
+    linger = true;
+  };
+}