Creating kvm test server

flake.lock

@@ -3,15 +3,15 @@
     "disko": {
       "inputs": {
         "nixpkgs": [
-          "nixpkgs"
+          "nixpkgs-unstable"
         ]
       },
       "locked": {
-        "lastModified": 1758287904,
+        "lastModified": 1763651264,
-        "narHash": "sha256-IGmaEf3Do8o5Cwp1kXBN1wQmZwQN3NLfq5t4nHtVtcU=",
+        "narHash": "sha256-8vvwZbw0s7YvBMJeyPVpWke6lg6ROgtts5N2/SMCcv4=",
         "owner": "nix-community",
         "repo": "disko",
-        "rev": "67ff9807dd148e704baadbd4fd783b54282ca627",
+        "rev": "e86a89079587497174ccab6d0d142a65811a4fd9",
         "type": "github"
       },
       "original": {
@@ -23,11 +23,11 @@
     "mysecrets": {
       "flake": false,
       "locked": {
-        "lastModified": 1759883911,
+        "lastModified": 1763731770,
-        "narHash": "sha256-IAKCQ9dIeMAdoi4fQdJAdWlLrNh/PURqGz7pmlo9cUw=",
+        "narHash": "sha256-ThIVf8jtBOKV7JzShnL/gzHEm7axiLshPie8BYkMYAI=",
         "ref": "refs/heads/main",
-        "rev": "7e39f4cde171d9273efddf2153d972d6fbf2a710",
+        "rev": "07b3f415bd89a6b571f154278c1d9b6b5ca9e473",
-        "revCount": 15,
+        "revCount": 16,
         "type": "git",
         "url": "file:///home/beastie/nixos/secrets"
       },
@@ -36,13 +36,29 @@
         "url": "file:///home/beastie/nixos/secrets"
       }
     },
-    "nixpkgs": {
+    "nixpkgs-stable": {
       "locked": {
-        "lastModified": 1760038930,
+        "lastModified": 1763622513,
-        "narHash": "sha256-Oncbh0UmHjSlxO7ErQDM3KM0A5/Znfofj2BSzlHLeVw=",
+        "narHash": "sha256-1jQnuyu82FpiSxowrF/iFK6Toh9BYprfDqfs4BB+19M=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "c58bc7f5459328e4afac201c5c4feb7c818d604b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-25.05",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs-unstable": {
+      "locked": {
+        "lastModified": 1763421233,
+        "narHash": "sha256-Stk9ZYRkGrnnpyJ4eqt9eQtdFWRRIvMxpNRf4sIegnw=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "0b4defa2584313f3b781240b29d61f6f9f7e0df3",
+        "rev": "89c2b2330e733d6cdb5eae7b899326930c2c0648",
         "type": "github"
       },
       "original": {
@@ -56,22 +72,23 @@
       "inputs": {
         "disko": "disko",
         "mysecrets": "mysecrets",
-        "nixpkgs": "nixpkgs",
+        "nixpkgs-stable": "nixpkgs-stable",
+        "nixpkgs-unstable": "nixpkgs-unstable",
         "sops-nix": "sops-nix"
       }
     },
     "sops-nix": {
       "inputs": {
         "nixpkgs": [
-          "nixpkgs"
+          "nixpkgs-unstable"
         ]
       },
       "locked": {
-        "lastModified": 1759635238,
+        "lastModified": 1763607916,
-        "narHash": "sha256-UvzKi02LMFP74csFfwLPAZ0mrE7k6EiYaKecplyX9Qk=",
+        "narHash": "sha256-VefBA1JWRXM929mBAFohFUtQJLUnEwZ2vmYUNkFnSjE=",
         "owner": "Mic92",
         "repo": "sops-nix",
-        "rev": "6e5a38e08a2c31ae687504196a230ae00ea95133",
+        "rev": "877bb495a6f8faf0d89fc10bd142c4b7ed2bcc0b",
         "type": "github"
       },
       "original": {

flake.nix

@@ -2,16 +2,17 @@
   description = "A very basic flake";
 
   inputs = {
-    nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
+    nixpkgs-stable.url = "github:NixOS/nixpkgs/nixos-25.05";
+    nixpkgs-unstable.url = "github:nixos/nixpkgs/nixos-unstable";
 
     disko = {
       url = "github:nix-community/disko";
-      inputs.nixpkgs.follows = "nixpkgs";
+      inputs.nixpkgs.follows = "nixpkgs-unstable";
     };
 
     sops-nix = {
       url = "github:Mic92/sops-nix";
-      inputs.nixpkgs.follows = "nixpkgs";
+      inputs.nixpkgs.follows = "nixpkgs-unstable";
     };
 
     mysecrets = {
@@ -46,10 +47,10 @@
     {
       nixosConfigurations = {
         #nixos-anywhere -- --flake './#generic' --generate-hardware-config nixos-generate-config ./hosts/generic/hardware-configuration.nix --target-host beastie@192.168.122.204
-        generic = mkSystem inputs.nixpkgs "x86_64-linux" "generic" "beastie";
+        generic = mkSystem inputs.nixpkgs-stable "x86_64-linux" "generic" "beastie";
-        test-kvm = mkSystem inputs.nixpkgs "x86_64-linux" "test-kvm" "beastie";
+        test-kvm = mkSystem inputs.nixpkgs-stable "x86_64-linux" "test-kvm" "beastie";
-        home-nix = mkSystem inputs.nixpkgs "x86_64-linux" "home-nix" "beastie";
+        home-nix = mkSystem inputs.nixpkgs-unstable "x86_64-linux" "home-nix" "beastie";
-        work-nix = mkSystem inputs.nixpkgs "x86_64-linux" "work-nix" "beastie";
+        work-nix = mkSystem inputs.nixpkgs-unstable "x86_64-linux" "work-nix" "beastie";
         # live-usb = mkSystem inputs.nixpkgs "x86_64-linux" "live-usb" "beastie";
         #nixos-rebuild switch --flake ./#home-nix --sudo
       };

hosts/generic/default.nix

@@ -5,7 +5,7 @@
   ...
 }:
 {
-  system.stateVersion = "25.11";
+  system.stateVersion = "25.05";
 
   imports = [
     ./disk-config.nix
@@ -83,6 +83,7 @@
     pkgs.nixos-anywhere
     pkgs.nixos-generators
     pkgs.ssh-to-age
+    pkgs.htop
   ];
 
   services.openssh.enable = true;

hosts/generic/disk-config.nix

@@ -6,7 +6,7 @@
     disk = {
       main = {
         type = "disk";
-        device = "/dev/nvme0n1";
+        device = "/dev/vda";
         content = {
           type = "gpt";
           partitions = {
@@ -23,42 +23,88 @@
             };
             SYS = {
               size = "100%";
-              type = "8309";
+              type = "8300";
               name = "SYS";
               content = {
-                type = "luks";
+                type = "btrfs";
-                name = "rootfs";
+                extraArgs = [ "-f --nodiscard --label root" ];
-                settings = {
+                subvolumes = {
-                  allowDiscards = true;
+                  "@" = {
-                };
+                    mountpoint = "/";
-                content = {
+                    mountOptions = [
-                  type = "btrfs";
+                      "defaults"
-                  extraArgs = [ "-f --nodiscard --label root" ];
+                      "ssd"
-                  subvolumes = {
+                      "compress=zstd"
-                    "@" = {
+                      "autodefrag"
-                      mountpoint = "/";
+                      "noatime"
-                      mountOptions = [ "defaults" "ssd" "compress=zstd" "autodefrag" "noatime" "nodiscard" ];
+                      "nodiscard"
-                    };
+                    ];
-                    "@root" = {
+                  };
-                      mountpoint = "/root";
+                  "@root" = {
-                      mountOptions = [ "defaults" "ssd" "compress=zstd" "autodefrag" "noatime" "nodiscard" ];
+                    mountpoint = "/root";
-                    };
+                    mountOptions = [
-                    "@home" = {
+                      "defaults"
-                      mountpoint = "/home";
+                      "ssd"
-                      mountOptions = [ "defaults" "ssd" "compress=zstd" "autodefrag" "noatime" "nodiscard" ];
+                      "compress=zstd"
-                    };
+                      "autodefrag"
-                    "@nix" = {
+                      "noatime"
-                      mountpoint = "/nix";
+                      "nodiscard"
-                      mountOptions = [ "defaults" "ssd" "compress=zstd" "autodefrag" "noatime" "nodiscard" ];
+                    ];
-                    };
+                  };
-                    "@var" = {
+                  "@home" = {
-                      mountpoint = "/var";
+                    mountpoint = "/home";
-                      mountOptions = [ "defaults" "ssd" "compress=zstd" "autodefrag" "noatime" "nodiscard" ];
+                    mountOptions = [
-                    };
+                      "defaults"
-                    "@games" = {
+                      "ssd"
-                      mountpoint = "/games";
+                      "compress=zstd"
-                      mountOptions = [ "defaults" "ssd" "compress=zstd" "autodefrag" "noatime" "nodiscard" ];
+                      "autodefrag"
-                    };
+                      "noatime"
+                      "nodiscard"
+                    ];
+                  };
+                  "@nix" = {
+                    mountpoint = "/nix";
+                    mountOptions = [
+                      "defaults"
+                      "ssd"
+                      "compress=zstd"
+                      "autodefrag"
+                      "noatime"
+                      "nodiscard"
+                    ];
+                  };
+                  "@var" = {
+                    mountpoint = "/var";
+                    mountOptions = [
+                      "defaults"
+                      "ssd"
+                      "compress=zstd"
+                      "autodefrag"
+                      "noatime"
+                      "nodiscard"
+                    ];
+                  };
+                  "@data" = {
+                    mountpoint = "/games";
+                    mountOptions = [
+                      "defaults"
+                      "ssd"
+                      "compress=zstd"
+                      "autodefrag"
+                      "noatime"
+                      "nodiscard"
+                    ];
+                  };
+                  "@backups" = {
+                    mountpoint = "/games";
+                    mountOptions = [
+                      "defaults"
+                      "ssd"
+                      "compress=zstd"
+                      "autodefrag"
+                      "noatime"
+                      "nodiscard"
+                    ];
                   };
                 };
               };

hosts/generic/hardware-configuration.nix

@@ -5,14 +5,13 @@
 
 {
   imports =
-    [ (modulesPath + "/installer/scan/not-detected.nix")
+    [ (modulesPath + "/profiles/qemu-guest.nix")
     ];
 
-  boot.initrd.availableKernelModules = [ "xhci_pci" "ehci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" ];
+  boot.initrd.availableKernelModules = [ "ahci" "xhci_pci" "virtio_pci" "sr_mod" "virtio_blk" ];
   boot.initrd.kernelModules = [ ];
   boot.kernelModules = [ "kvm-intel" ];
   boot.extraModulePackages = [ ];
 
   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
-  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
 }

hosts/home-nix/default.nix

@@ -1,6 +1,4 @@
 {
-  pkgs,
-  username,
   hostname,
   modulesPath,
   inputs,

hosts/test-kvm/default.nix

@@ -7,50 +7,13 @@
   ...
 }:
 {
-  system.stateVersion = "25.11";
+  system.stateVersion = "25.05";
 
   imports = builtins.trace "${inputs.mysecrets}" [
     (modulesPath + "/installer/scan/not-detected.nix")
-    ./network.nix
     ./disk-config.nix
     ./hardware-configuration.nix
     ../../modules/core
     ../../modules/optionnals/hosts/${hostname}.nix
   ];
-
-  boot.kernelPackages = pkgs.linuxPackages_latest;
-
-  time.timeZone = "Europe/Paris";
-
-  nix = {
-    settings = {
-      ## Enable flakes
-      experimental-features = [
-        "nix-command"
-        "flakes"
-      ];
-      ## Users trusted to use flake command
-      trusted-users = [
-        "root"
-        "${username}"
-      ];
-    };
-  };
-
-  ## Enable virtualisation guest settings
-  services.qemuGuest.enable = true;
-  services.spice-vdagentd.enable = true;
-  services.xserver = {
-    videoDrivers = [ "modesetting" ]; # Driver vidéo optimisé pour QEMU/KVM
-  };
-
-  environment.systemPackages = [
-    pkgs.spice-gtk # Outils SPICE
-    pkgs.spice-protocol # Protocoles SPICE
-  ];
-
-  #fileSystems."/" = {
-  #  device = "/dev/vda2"; # Disque virtuel typique
-  #  fsType = "btrfs";
-  #};
 }

hosts/test-kvm/disk-config.nix

@@ -10,22 +10,103 @@
         content = {
           type = "gpt";
           partitions = {
-            ESP = {
+            EFI = {
               size = "512M";
               type = "EF00";
+              name = "EFI";
               content = {
                 type = "filesystem";
                 format = "vfat";
                 mountpoint = "/boot";
+                mountOptions = [ "umask=0077" ];
               };
             };
-            root = {
+            SYS = {
               size = "100%";
               type = "8300";
+              name = "SYS";
               content = {
-                type = "filesystem";
+                type = "btrfs";
-                format = "btrfs";
+                extraArgs = [ "-f --nodiscard --label root" ];
-                mountpoint = "/";
+                subvolumes = {
+                  "@" = {
+                    mountpoint = "/";
+                    mountOptions = [
+                      "defaults"
+                      "ssd"
+                      "compress=zstd"
+                      "autodefrag"
+                      "noatime"
+                      "nodiscard"
+                    ];
+                  };
+                  "@root" = {
+                    mountpoint = "/root";
+                    mountOptions = [
+                      "defaults"
+                      "ssd"
+                      "compress=zstd"
+                      "autodefrag"
+                      "noatime"
+                      "nodiscard"
+                    ];
+                  };
+                  "@home" = {
+                    mountpoint = "/home";
+                    mountOptions = [
+                      "defaults"
+                      "ssd"
+                      "compress=zstd"
+                      "autodefrag"
+                      "noatime"
+                      "nodiscard"
+                    ];
+                  };
+                  "@nix" = {
+                    mountpoint = "/nix";
+                    mountOptions = [
+                      "defaults"
+                      "ssd"
+                      "compress=zstd"
+                      "autodefrag"
+                      "noatime"
+                      "nodiscard"
+                    ];
+                  };
+                  "@var" = {
+                    mountpoint = "/var";
+                    mountOptions = [
+                      "defaults"
+                      "ssd"
+                      "compress=zstd"
+                      "autodefrag"
+                      "noatime"
+                      "nodiscard"
+                    ];
+                  };
+                  "@data" = {
+                    mountpoint = "/games";
+                    mountOptions = [
+                      "defaults"
+                      "ssd"
+                      "compress=zstd"
+                      "autodefrag"
+                      "noatime"
+                      "nodiscard"
+                    ];
+                  };
+                  "@backups" = {
+                    mountpoint = "/games";
+                    mountOptions = [
+                      "defaults"
+                      "ssd"
+                      "compress=zstd"
+                      "autodefrag"
+                      "noatime"
+                      "nodiscard"
+                    ];
+                  };
+                };
               };
             };
           };

hosts/test-kvm/hardware-configuration.nix

@@ -1,38 +1,16 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{
+{ config, lib, pkgs, modulesPath, ... }:
-  config,
-  lib,
-  pkgs,
-  modulesPath,
-  ...
-}:
 
 {
-  imports = [
+  imports =
-    (modulesPath + "/profiles/qemu-guest.nix")
+    [ (modulesPath + "/profiles/qemu-guest.nix")
-  ];
+    ];
 
-  boot.initrd.availableKernelModules = [
+  boot.initrd.availableKernelModules = [ "ahci" "xhci_pci" "virtio_pci" "sr_mod" "virtio_blk" ];
-    "ahci"
+  boot.initrd.kernelModules = [ ];
-    "xhci_pci"
+  boot.kernelModules = [ "kvm-intel" ];
-    "virtio_pci"
-    "sr_mod"
-    "virtio_blk"
-    "virtio_scsi"
-    "virtio_net"
-    "virtio_blk"
-  ];
-  boot.initrd.kernelModules = [
-    "virtio_balloon"
-    "virtio_console"
-    "virtio_rng"
-  ];
-  boot.kernelModules = [
-    "kvm-intel"
-    "virtio-gpu"
-  ];
   boot.extraModulePackages = [ ];
 
   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";

hosts/work-nix/default.nix

@@ -1,6 +1,4 @@
 {
-  pkgs,
-  username,
   hostname,
   modulesPath,
   inputs,

modules/core/packages.nix

@@ -23,6 +23,7 @@
     pkgs.jq
     pkgs.bash
     pkgs.fzf
+    pkgs.bc
   ];
   services = {
     locate = {

modules/core/system.nix

@@ -2,8 +2,6 @@
   pkgs,
   username,
   hostname,
-  modulesPath,
-  inputs,
   ...
 }:
 {
@@ -23,12 +21,14 @@
         "root"
         "${username}"
       ];
+      ## Use 24 cores during building phases
+      cores = 24;
+      max-jobs = "auto";
     };
   };
 
   networking = {
     hostName = "${hostname}";
-    networkmanager.enable = true;
     firewall.enable = true;
   };
 }

modules/core/tty.nix

@@ -17,6 +17,7 @@
       df = "df -h";
       du = "du -h";
     };
+    # Defined in /etc/set-environnement. Require session restart
     variables = {
       XDG_CONFIG_HOME = "$HOME/.config";
       XDG_CACHE_HOME = "$HOME/.cache";
@@ -33,22 +34,12 @@
     enable = true;
     enableCompletion = true;
     syntaxHighlighting.enable = true;
-    autosuggestions.enable = false;
+    autosuggestions.enable = true;
     histSize = 200000;
     histFile = "$HOME/.config/zsh/.zsh_history";
     setOptions = [
       "SHARE_HISTORY"
     ];
-    # shellInit = ''
-    #   export XDG_CONFIG_HOME=$HOME/.config
-    #   export XDG_CACHE_HOME=$HOME/.cache
-    #   export XDG_DATA_HOME=$HOME/.local/share
-    #   export ZDOTDIR=$HOME/.config/zsh
-    #   export TERMINAL=kitty
-    #   export EDITOR=nvim
-    #   export BROWSER=firefox
-    #   export SAVEHIST=200000
-    # '';
     promptInit = ''
       stty stop undef # Disable ctrl+s to freeze terminal
 
@@ -59,6 +50,9 @@
       zstyle ':completion:*' menu select
       zmodload zsh/complist
 
+      # enable dotfiles in tab directory completion
+      setopt globdots
+
       fzf-history() {
         local selected
         selected=$(fc -l 1 | fzf --tac --no-sort | sed 's/^[ ]*[0-9]*[ ]*//')

modules/core/users.nix

@@ -14,7 +14,6 @@
         description = "Admin account";
         extraGroups = [
           "wheel"
-          "networkmanager"
           "audio"
           "video"
         ];

modules/optionnals/ai.nix

@@ -14,27 +14,33 @@
       OLLAMA_KEEP_ALIVE = "5m";
     };
   };
-
+  # services.open-webui = {
-  services.open-webui = {
+  #   enable = true;
-    enable = true;
+  #   port = 8080; # Port par défaut
-    port = 8080; # Port par défaut
+  #   host = "127.0.0.1"; # Localhost uniquement
-    host = "127.0.0.1"; # Localhost uniquement
+  #   openFirewall = true;
-    openFirewall = true;
+  #   # Pour accès réseau : host = "0.0.0.0";
-    # Pour accès réseau : host = "0.0.0.0";
+  #   environment = {
-    environment = {
+  #     ANONYMIZED_TELEMETRY = "True";
-      ANONYMIZED_TELEMETRY = "True";
+  #     DO_NOT_TRACK = "True";
-      DO_NOT_TRACK = "True";
+  #     SCARF_NO_ANALYTICS = "True";
-      SCARF_NO_ANALYTICS = "True";
+  #     # URL d'Ollama (local)
-      # URL d'Ollama (local)
+  #     OLLAMA_BASE_URL = "http://127.0.0.1:11434";
-      OLLAMA_BASE_URL = "http://127.0.0.1:11434";
+  #     # Autres options optionnelles (https://docs.openwebui.com/getting-started/env-configuration/#web-search)
-      # Autres options optionnelles (https://docs.openwebui.com/getting-started/env-configuration/#web-search)
+  #     WEBUI_AUTH = "False"; # Desactive l'authentification
-      WEBUI_AUTH = "False"; # Desactive l'authentification
+  #     # ENABLE_WEB_SEARCH = "True";
-      # ENABLE_WEB_SEARCH = "True";
+  #     # ENABLE_SEARCH_QUERY_GENERATION = "True";
-      # ENABLE_SEARCH_QUERY_GENERATION = "True";
+  #     # WEB_SEARCH_ENGINE = "duckduckgo";
-      # WEB_SEARCH_ENGINE = "duckduckgo";
+  #     # WEB_LOADER_ENGINE = "safe_web";
-      # WEB_LOADER_ENGINE = "safe_web";
+  #   };
+  # };
+  environment = {
+    systemPackages = [
+      pkgs.lmstudio
+      pkgs.aider-chat-full
+    ];
+    variables = {
+      OLLAMA_API_BASE = "http://localhost:11434";
     };
   };
-
-  environment.systemPackages = [ pkgs.lmstudio ];
 }

modules/optionnals/desktop/code.nix

@@ -74,7 +74,7 @@ in
     (pkgs.vscode-with-extensions.override {
       vscode = pkgs.vscodium;
       vscodeExtensions = [
-        pkgs.vscode-extensions.continue.continue
+        # pkgs.vscode-extensions.continue.continue
         pkgs.vscode-extensions.catppuccin.catppuccin-vsc
         pkgs.vscode-extensions.catppuccin.catppuccin-vsc-icons
         pkgs.vscode-extensions.jnoortheen.nix-ide

modules/optionnals/desktop/config/etc/xdg/hypr/hyprland.conf

@@ -14,7 +14,6 @@ ecosystem {
 ###################
 
 $terminal = kitty
-source = /etc/xdg/hypr/rofi.conf
 
 #################
 ### AUTOSTART ###
@@ -211,9 +210,10 @@ device {
 
 $mainMod = SUPER # Sets "Windows" key as main modifier
 # Apps shortcut
-bind = $mainMod, D, exec, $rofi
+bind = $mainMod, D, exec, rofi -show drun -show-icons -config /etc/xdg/rofi/config.rasi
 bind = $mainMod, L, exec, /etc/xdg/scripts/wayland-disconnect.sh
 bind = $mainMod, M, exec, /etc/xdg/scripts/wayland-mpv.sh
+bind = $mainMod, K, exec, /etc/xdg/scripts/rofi-ssh.sh
 bind = $mainMod SHIFT, P, exec, pavucontrol
 bind = $mainMod SHIFT, T, exec, teams-for-linux
 bind = $mainMod SHIFT, D, exec, discord

modules/optionnals/desktop/config/etc/xdg/rofi/mpv.rasi

@@ -0,0 +1,16 @@
+@import "launcher.rasi"
+window {
+  width: 50%;
+  height: 50%;
+  margin: 0px;
+  location: center;
+  anchor: center;
+}
+
+mainbox {
+  children: [inputbar,listview];
+}
+
+listview {
+  columns: 1;
+}

modules/optionnals/desktop/config/etc/xdg/rofi/ssh.rasi

@@ -0,0 +1,12 @@
+@import "launcher.rasi"
+window {
+  width: 50%;
+  height: 50%;
+  margin: 0px;
+  location: center;
+  anchor: center;
+}
+
+mainbox {
+  children: [inputbar,listview];
+}

modules/optionnals/desktop/config/etc/xdg/scripts/rofi-ssh.sh

@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+
+selected=$(cat ~/.config/zsh/.zsh_history | sed 's/^[ ]*[0-9]*[ ]*//' | grep '^ssh ' | rofi -dmenu -i -theme /etc/xdg/rofi/ssh.rasi -p SSH)
+
+if [[ -n "$selected" ]]; then
+  kitty -e $selected
+fi

modules/optionnals/desktop/config/etc/xdg/scripts/waybar-mailbox.sh

@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+
+_USER=beastie
+_PASSWD='}q6658JD~{}{oiRWsb~Q{P@SV=Qsy,ae'
+_SERVER=unixyourbrain.org
+_FOLDER=Admin
+
+set -e
+
+cd -- "$(dirname -- "$0")"
+_DIRNAME="$(pwd)"
+
+### Sourcer à partir des secrets
+#source ~/.config/polybar/imap_creds
+
+
+_COUNT=$(curl -u "$_USER:$_PASSWD" "imaps://$_SERVER" -X "STATUS $_FOLDER (UNSEEN)" 2>/dev/null | \
+  sed -e 's/)\r//' -e 's/.*UNSEEN //')
+
+_UNSEEN=$(curl -u "$_USER:$_PASSWD" "imaps://$_SERVER/$_FOLDER" -X "SEARCH UNSEEN" 2>/dev/null | \
+  sed -e "s|\\r||" -e "s|* SEARCH ||" -e "s| |,|g")
+
+_MAILS=$(curl -v -u "$_USER:$_PASSWD" "imaps://$_SERVER/$_FOLDER" -X "FETCH $_UNSEEN BODY.PEEK[HEADER.FIELDS (From Subject)]" 2>&1 | \
+  sed -e "s|\\r||" | awk '/< Subject|< From/ {sub(/^< /, ""); printf "%s\\n", $0}')
+
+printf '{"text": "%s ", "tooltip": "%s"}' "$_COUNT" "$_MAILS"

modules/optionnals/desktop/config/etc/xdg/scripts/wayland-disconnect.sh

@@ -0,0 +1,31 @@
+#!/usr/bin/env bash
+
+selected=$(printf "Lock\0icon\x1fsystem-lock-screen
+Update\0icon\x1fsystem-software-update
+Shutdown\0icon\x1fsystem-shutdown
+Reboot\0icon\x1fsystem-reboot
+Exit hyprland\0icon\x1fsystem-log-out
+Reload hyprland\0icon\x1fsystem-log-out" | rofi -dmenu -show-icons -i -theme /etc/xdg/rofi/disconnect.rasi -p System)
+
+echo "$selected"
+
+case $selected in
+  "Lock")
+    /nix/store/4pwvyyjrc7frwkycbszakd7z6nf44qgv-hyprlock-0.9.2/bin/hyprlock
+    ;;
+  "Update")
+    kitty /usr/local/share/dotfiles/scripts/update.sh
+    ;;
+  "Shutdown")
+    systemctl poweroff
+    ;;
+  "Reboot")
+    reboot
+    ;;
+  "Exit hyprland")
+    hyprctl dispatch exit
+    ;;
+  "Reload hyprland")
+    hyprctl reload
+    ;;
+esac

modules/optionnals/desktop/config/etc/xdg/scripts/wayland-mpv.sh

@@ -0,0 +1,31 @@
+#!/usr/bin/env bash
+
+cd -- "$(dirname -- "$0")" || exit
+
+## if not $1
+if [[ -z $1 ]]
+then
+  _LINES=$(curl "http://10.0.0.1:2013" 2>/dev/null | sed -e "s|.*<a href=\"\([^\"]*\).*|$1\1|" -e "s/.*<.*\|.*C=D.*\|.*\/\/$\|.*.nfo//" -e "/^$/d")
+else
+   _LINES="$(curl "http://10.0.0.1:2013/$1" 2>/dev/null | sed -e "s|.*<a href=\"\([^\"]*\).*|$1\1|" -e "s/.*<.*\|.*C=D.*\|.*\/\/$\|.*.nfo//" -e "/^$/d")"
+fi
+
+_RESULT=$(rofi -dmenu -i -theme /etc/xdg/rofi/mpv.rasi -p Mpv <<< "$_LINES")
+
+# If no output
+echo "$_RESULT"
+if [[ -z $_RESULT ]]
+then
+  echo "no output, exiting"
+  exit 0
+fi
+
+#if line end vith /
+if [[ "$_RESULT" =~ .*/$ ]]
+then
+  echo "output is a directory"
+  ./wayland-mpv.sh "$_RESULT"
+  exit 0
+fi
+
+mpv "http://10.0.0.1:2013/$_RESULT"

modules/optionnals/desktop/config/etc/xdg/waybar/config-home-nix.jsonc

@@ -7,12 +7,13 @@
     "memory",
     "disk",
     "network",
-    "pulseaudio",
+    "pulseaudio"
   ],
   "modules-center": [
     "hyprland/workspaces"
   ],
   "modules-right": [
+    "custom/alert",
     "custom/maj",
     "clock",
     "tray"
@@ -78,11 +79,20 @@
     },
     "format": "{name}",
     "format-icons": {
-      "default": "",
+      "default": ""
-    },
+    }
+  },
+  "custom/alert": {
+    "exec": "/etc/xdg/scripts/waybar-mailbox.sh",
+    "interval": 300,
+    "return-type": "json",
+    "format": "{icon}{text}",
+    "format-icons": {
+      "default": "  "
+    }
   },
   "custom/maj": {
-    "exec": "/etc/xdg/scripts/update.sh",
+    "exec": "/etc/xdg/scripts/waybar-update.sh",
     "interval": 300,
     "return-type": "json",
     "format": "{icon}{text}",

modules/optionnals/desktop/config/etc/xdg/waybar/config-work-nix.jsonc

@@ -7,12 +7,13 @@
     "memory",
     "disk",
     "network",
-    "pulseaudio",
+    "pulseaudio"
   ],
   "modules-center": [
     "hyprland/workspaces"
   ],
   "modules-right": [
+    "custom/alert",
     "custom/maj",
     "clock",
     "tray"
@@ -79,11 +80,20 @@
     },
     "format": "{name}",
     "format-icons": {
-      "default": "",
+      "default": ""
-    },
+    }
+  },
+  "custom/alert": {
+    "exec": "/etc/xdg/scripts/waybar-mailbox.sh",
+    "interval": 300,
+    "return-type": "json",
+    "format": "{icon}{text}",
+    "format-icons": {
+      "default": "  "
+    }
   },
   "custom/maj": {
-    "exec": "/etc/xdg/scripts/update.sh",
+    "exec": "/etc/xdg/scripts/waybar-update.sh",
     "interval": 300,
     "return-type": "json",
     "format": "{icon}{text}",

modules/optionnals/desktop/config/etc/xdg/waybar/style.css

@@ -24,6 +24,7 @@
 #disk,
 #network,
 #workspaces,
+#custom-alert,
 #custom-maj,
 #pulseaudio,
 #memory,
@@ -87,24 +88,40 @@
   background: @red;
 }
 
-#network {
+#custom-logo {
-  color: @pink;
+  color: @red;
-}
-
-#pulseaudio {
-  color: @yellow;
 }
 
 #cpu {
-  color: @blue;
+  color: @peach;
 }
 
 #memory {
-  color: @green;
+  color: @maroon;
+}
+
+#disk {
+  color: @pink;
+}
+
+#network {
+  color: @flamingo;
+}
+
+#pulseaudio {
+  color: @rosewater;
+}
+
+#custom-alert {
+  color: @sky;
+}
+
+#custom-maj {
+  color: @sapphire;
 }
 
 #clock {
-  color: @red;
+  color: @blue;
 }
 
 #tray {

modules/optionnals/desktop/rofi.nix

@@ -6,78 +6,6 @@
   environment = {
     etc = {
       "xdg/rofi".source = ./config/etc/xdg/rofi;
-      "xdg/scripts/wayland-disconnect.sh" = {
-        text = ''
-          #!/usr/bin/env bash
-
-          selected=$(printf "Lock\0icon\x1fsystem-lock-screen
-          Update\0icon\x1fsystem-software-update
-          Shutdown\0icon\x1fsystem-shutdown
-          Reboot\0icon\x1fsystem-reboot
-          Exit hyprland\0icon\x1fsystem-log-out
-          Reload hyprland\0icon\x1fsystem-log-out" | ${pkgs.rofi}/bin/rofi -dmenu -show-icons -i -theme /etc/xdg/rofi/disconnect.rasi -p System)
-
-          echo "$selected"
-
-          case $selected in
-            "Lock")
-              ${pkgs.hyprlock}/bin/hyprlock
-              ;;
-            "Update")
-              kitty /usr/local/share/dotfiles/scripts/update.sh
-              ;;
-            "Shutdown")
-              systemctl poweroff
-              ;;
-            "Reboot")
-              reboot
-              ;;
-            "Exit hyprland")
-              hyprctl dispatch exit
-              ;;
-            "Reload hyprland")
-              hyprctl reload
-              ;;
-          esac
-        '';
-        mode = "0755";
-      };
-      "xdg/scripts/wayland-mpv.sh" = {
-        text = ''
-          #!/usr/bin/env bash
-
-          cd -- "$(dirname -- "$0")" || exit
-
-          ## if not $1
-          if [[ -z $1 ]]
-          then
-            _LINES=$(curl "http://10.0.0.1:2013" 2>/dev/null | sed -e "s|.*<a href=\"\([^\"]*\).*|$1\1|" -e "s/.*<.*\|.*C=D.*\|.*\/\/$\|.*.nfo//" -e "/^$/d")
-          else
-             _LINES="$(curl "http://10.0.0.1:2013/$1" 2>/dev/null | sed -e "s|.*<a href=\"\([^\"]*\).*|$1\1|" -e "s/.*<.*\|.*C=D.*\|.*\/\/$\|.*.nfo//" -e "/^$/d")"
-          fi
-
-          _RESULT=$(${pkgs.rofi}/bin/rofi -dmenu -config /etc/xdg/rofi/config.rasi -i <<< "$_LINES")
-
-          # If no output
-          echo "$_RESULT"
-          if [[ -z $_RESULT ]]
-          then
-            echo "no output, exiting"
-            exit 0
-          fi
-
-          #if line end vith /
-          if [[ "$_RESULT" =~ .*/$ ]]
-          then
-            echo "output is a directory"
-            ./wayland-mpv.sh "$_RESULT"
-            exit 0
-          fi
-
-          mpv "http://10.0.0.1:2013/$_RESULT"
-        '';
-        mode = "0755";
-      };
     };
   };
 }

modules/optionnals/desktop/starship.nix

@@ -1,5 +1,4 @@
 {
-  pkgs,
   ...
 }:
 {

modules/optionnals/desktop/virt-manager.nix

@@ -0,0 +1,7 @@
+{
+  ...
+}:
+{
+  programs.virt-manager.enable = true;
+  virtualisation.spiceUSBRedirection.enable = true;
+}

modules/optionnals/desktop/wayland.nix

@@ -28,16 +28,16 @@
       "xdg/hypr/hyprland-host.conf".source = ./config/etc/xdg/hypr/hyprland-${hostname}.conf;
       "xdg/hypr/hyprlock.conf".source = ./config/etc/xdg/hypr/hyprlock.conf;
       "xdg/hypr/hyprpaper.conf".source = ./config/etc/xdg/hypr/hyprpaper.conf;
-      "xdg/hypr/rofi.conf" = {
-        text = ''
-          $rofi = ${pkgs.rofi}/bin/rofi -show drun -show-icons -config /etc/xdg/rofi/config.rasi
-        '';
-      };
       "xdg/waybar/colors.css".source = ./config/etc/xdg/waybar/colors.css;
       "xdg/waybar/config.jsonc".source = ./config/etc/xdg/waybar/config-${hostname}.jsonc;
       "xdg/waybar/style.css".source = ./config/etc/xdg/waybar/style.css;
       "xdg/waybar/custom.css".source = ./config/etc/xdg/waybar/custom-${hostname}.css;
-      "xdg/scripts/update.sh".source = ./config/etc/xdg/scripts/update.sh;
+
+      "xdg/scripts/rofi-ssh.sh".source = ./config/etc/xdg/scripts/rofi-ssh.sh;
+      "xdg/scripts/waybar-mailbox.sh".source = ./config/etc/xdg/scripts/waybar-mailbox.sh;
+      "xdg/scripts/waybar-update.sh".source = ./config/etc/xdg/scripts/waybar-update.sh;
+      "xdg/scripts/wayland-disconnect.sh".source = ./config/etc/xdg/scripts/wayland-disconnect.sh;
+      "xdg/scripts/wayland-mpv.sh".source = ./config/etc/xdg/scripts/wayland-mpv.sh;
     };
   };
   sops = {

modules/optionnals/hosts/home-nix.nix

@@ -8,6 +8,7 @@
     ../ai.nix
     ../autologin.nix
     ../k8s.nix
+    ../libvirt.nix
     ../openfortivpn.nix
     ../packages.nix
     ../sops-desktop.nix
@@ -23,6 +24,7 @@
     ../desktop/qwerty-fr.nix
     ../desktop/rofi.nix
     ../desktop/starship.nix
+    ../desktop/virt-manager.nix
     ../desktop/wayland.nix
 
     ### Import Graphics modules

modules/optionnals/hosts/test-kvm.nix

@@ -1,4 +1,5 @@
 {
+  pkgs,
   ...
 }:
 {
@@ -6,14 +7,21 @@
     ../sops-desktop.nix
     ../sudo-nopasswd.nix
     ../autologin.nix
-    ../ssh.nix
+    ../packages.nix
 
-    ### Import GUI modules
+    ## Server
-    ../desktop/dunst.nix
+    ../server/starship.nix
-    ../desktop/kitty.nix
+  ];
-    ../desktop/packages.nix
+
-    ../desktop/qwerty-fr.nix
+  ## Enable virtualisation guest settings
-    ../desktop/rofi.nix
+  services.qemuGuest.enable = true;
-    ../desktop/wayland.nix
+  services.spice-vdagentd.enable = true;
+  services.xserver = {
+    videoDrivers = [ "modesetting" ]; # Driver vidéo optimisé pour QEMU/KVM
+  };
+
+  environment.systemPackages = [
+    pkgs.spice-gtk # Outils SPICE
+    pkgs.spice-protocol # Protocoles SPICE
   ];
 }

modules/optionnals/hosts/work-nix.nix

@@ -1,11 +1,12 @@
 {
-  pkgs,
+  username,
   ...
 }:
 {
   imports = [
     ../autologin.nix
     ../k8s.nix
+    ../libvirt.nix
     ../openfortivpn.nix
     ../packages.nix
     ../sops-desktop.nix
@@ -22,12 +23,21 @@
     ../desktop/qwerty-fr.nix
     ../desktop/rofi.nix
     ../desktop/starship.nix
+    ../desktop/virt-manager.nix
     ../desktop/wayland.nix
 
     ### Import Graphics modules
     ../desktop/amd.nix
   ];
 
-  networking.wireless.iwd.enable = true;
+  networking = {
+    networkmanager.enable = true;
+    extraHosts = ''
+      carto-interavtive 172.18.20.134
+    '';
+  };
+    users.users.${username} = {
+    extraGroups = [ "networkmanager" ];
+  };
   programs.nm-applet.enable = true;
 }

modules/optionnals/libvirt.nix

@@ -0,0 +1,22 @@
+{
+  pkgs,
+  username,
+  ...
+}:
+{
+  virtualisation = {
+    libvirtd = {
+      enable = true;
+      qemu = {
+        # package = pkgs.qemu_full;
+        package = pkgs.qemu;
+        runAsRoot = true;
+        swtpm.enable = true;
+      };
+    };
+
+  };
+  users.users.${username} = {
+    extraGroups = [ "libvirtd" ];
+  };
+}

modules/optionnals/server/starship.nix

@@ -0,0 +1,96 @@
+{
+  ...
+}:
+{
+  environment.sessionVariables = {
+    KUBECONFIG = "$HOME/.kube/config";
+  };
+  programs.starship = {
+    enable = true;
+    settings = {
+      add_newline = true;
+      command_timeout = 1300;
+      scan_timeout = 50;
+      format = "[┌─](fg:surface1)$hostname$username$directory$git_branch$git_status[](fg:base bg:sky)$fill$kubernetes$time[─┐ ](fg:surface1)$line_break[└ ](fg:surface1)";
+      right_format = "[┘](fg:surface1)";
+      palette = "catppuccin_frappe";
+
+      hostname = {
+        ssh_only = false;
+        format = "[](bg:base fg:mauve)[ $hostname ](bg:mauve fg:base)[](bg:mauve fg:blue)";
+        disabled = false;
+      };
+
+      username = {
+        style_user = "bg:blue fg:base";
+        style_root = "bg:red fg:base bold";
+        format = "[ $user ]($style)[](bg:blue fg:sapphire)";
+        show_always = true;
+        disabled = false;
+      };
+
+      directory = {
+        format = "[ $path ](bg:sapphire fg:base)[](bg:sapphire fg:sky)";
+        truncation_length = 3;
+        truncation_symbol = "…/";
+      };
+
+      git_branch = {
+        symbol = " ";
+        format = "[ $symbol$branch(:$remote_branch) ](fg:base bg:sky)";
+        disabled = false;
+      };
+
+      git_status = {
+        format = "([$all_status$ahead_behind ](fg:base bg:sky))";
+        conflicted = "😵";
+        ahead = "";
+        behind = "";
+        diverged = "😵";
+        up_to_date = "✓";
+        untracked = "★";
+        stashed = "📦";
+        modified = "✗";
+        #staged = "[($count)](fg:base bg:sapphire)"
+        staged = "";
+        renamed = "";
+        deleted = "";
+        disabled = false;
+      };
+
+      kubernetes = {
+        disabled = false;
+        format = "[](fg:blue bg:base)[ ($namespace)/($cluster) ](fg:base bg:blue)[](bg:blue fg:mauve)";
+      };
+
+      palettes.catppuccin_frappe = {
+        rosewater = "#f2d5cf";
+        flamingo = "#eebebe";
+        pink = "#f4b8e4";
+        mauve = "#ca9ee6";
+        red = "#e78284";
+        maroon = "#ea999c";
+        peach = "#ef9f76";
+        yellow = "#e5c890";
+        green = "#a6d189";
+        teal = "#81c8be";
+        sky = "#99d1db";
+        sapphire = "#85c1dc";
+        blue = "#8caaee";
+        lavender = "#babbf1";
+        text = "#c6d0f5";
+        subtext1 = "#b5bfe2";
+        subtext0 = "#a5adce";
+        overlay2 = "#949cbb";
+        overlay1 = "#838ba7";
+        overlay0 = "#737994";
+        surface2 = "#626880";
+        surface1 = "#51576d";
+        surface0 = "#414559";
+        base = "#303446";
+        mantle = "#292c3c";
+        crust = "#232634";
+      };
+    };
+  };
+}