homes/julm.nix

   1 {
   2   pkgs,
   3   lib,
   4   config,
   5   hostName,
   6   ...
   7 }:
   8 {
   9   imports = [
  10     ../home-manager/profiles/essential.nix
  11     ../home-manager/profiles/vim.nix
  12     ../home-manager/options.nix
  13     julm/mutt.nix
  14     (import (julm/hosts + "/${hostName}.nix"))
  15   ];
  16   programs.bash.shellAliases = {
  17     firefox-calyx = "sudo systemd-run -P -p JoinsNamespaceOf=netns-calyx.service -p PrivateNetwork=true -p BindReadOnlyPaths=/etc/netns/calyx/resolv.conf:/etc/resolv.conf -E DISPLAY=$DISPLAY -p User=julm -E DBUS_SESSION_BUS_ADDRESS=$DBUS_SESSION_BUS_ADDRESS -E LANG=$LANG -E LOCALE_ARCHIVE=$LOCALE_ARCHIVE -E PATH=$PATH -- firefox -P calyx";
  18   };
  19   programs.browserpass.enable = config.programs.firefox.enable;
  20   programs.firefox.profiles =
  21     let
  22       defaultProfile = {
  23         settings = {
  24           "browser.bookmarks.showMobileBookmarks" = true;
  25           "browser.compactmode.show" = true;
  26           "browser.search.isUS" = false;
  27           "browser.search.region" = "FR";
  28           "distribution.searchplugins.defaultLocale" = "fr-FR";
  29           "dom.security.https_first" = true;
  30           "dom.security.https_only_mode" = true;
  31           "general.useragent.locale" = "fr-FR";
  32           "privacy.globalprivacycontrol.enabled" = true;
  33           "privacy.globalprivacycontrol.functionality.enabled" = true;
  34           "security.identityblock.show_extended_validation" = true;
  35           "toolkit.legacyUserProfileCustomizations.stylesheets" = true;
  36           #"privacy.firstparty.isolate" = true;
  37         };
  38         userChrome = lib.readFile ../home-manager/profiles/firefox/userChrome.css;
  39       };
  40     in
  41     {
  42       "rvbxj7n5.2026" = lib.mkMerge [
  43         defaultProfile
  44         {
  45           id = 0;
  46           name = "2026";
  47           settings = {
  48             "browser.startup.homepage" = "https://democracynow.org";
  49           };
  50         }
  51       ];
  52       "rD9bggx0.2025" = lib.mkMerge [
  53         defaultProfile
  54         {
  55           id = 1;
  56           name = "2025";
  57           settings = {
  58             "browser.startup.homepage" = "https://democracynow.org";
  59           };
  60         }
  61       ];
  62       "8y3d28fa.tor" = lib.mkMerge [
  63         defaultProfile
  64         {
  65           id = 2;
  66           name = "tor";
  67           settings = {
  68             "browser.startup.homepage" = "https://check.torproject.org";
  69             "privacy.firstparty.isolate" = true;
  70           };
  71         }
  72       ];
  73       "zqa1ck7d.calyx" = lib.mkMerge [
  74         defaultProfile
  75         {
  76           id = 3;
  77           name = "calyx";
  78           settings = {
  79             "browser.startup.homepage" = "https://icanhazip.com";
  80             "privacy.firstparty.isolate" = true;
  81           };
  82         }
  83       ];
  84       "0yplujgj.2022" = lib.mkMerge [
  85         defaultProfile
  86         {
  87           id = 4;
  88           name = "2022";
  89           settings = {
  90             "browser.startup.homepage" = "https://democracynow.org";
  91           };
  92         }
  93       ];
  94     };
  95   home.file."${config.programs.gpg.homedir}/gpg.conf".text = ''
  96     # julm@autogeree.net
  97     trusted-key 0xD15AF7F467E8299B
  98     # julm@sourcephile.fr (2021-08-12)
  99     trusted-key 0xA58CD81C3863926F
 100   '';
 101   # ExplanationNote: manage SSH keys imperatively for more flexibility
 102   #services.gpg-agent.sshKeys = [ ];
 103   programs.irssi.extraConfig = lib.readFile julm/irssi/irssi.conf;
 104   xdg.configFile."doom/config.el".text = lib.readFile julm/emacs/config.el;
 105   home.file.".irssi/passwd" = lib.mkIf config.programs.irssi.enable {
 106     text = ''
 107       FreeNode   : ${pkgs.pass}/bin/pass freenode.net/irc/julm
 108       GeekNode   : ${pkgs.pass}/bin/pass geeknode.org/irc/julm
 109       IndyMedia  : ${pkgs.pass}/bin/pass indymedia.org/irc/julm
 110       Libera     : ${pkgs.pass}/bin/pass libera.chat/irc/julm
 111       OFTC       : ${pkgs.pass}/bin/pass oftc.net/irc/julm
 112       ToileLibre : ${pkgs.pass}/bin/pass toile-libre.org/irc/julm
 113     '';
 114   };
 115   programs.ssh.matchBlocks = {
 116     "aubergine.sp" = {
 117       #compression = true; # Helps to get a better framerate with forwardX11
 118       forwardAgent = true;
 119       forwardX11 = true;
 120       forwardX11Trusted = true;
 121       serverAliveInterval = 15;
 122       extraOptions = {
 123         Ciphers = "aes128-gcm@openssh.com";
 124       };
 125     };
 126     "blackberry.sp" = {
 127       user = "julm";
 128     };
 129     "courge.sp" = {
 130       user = "mo";
 131     };
 132     "patate.sp" = {
 133       user = "sevy";
 134     };
 135   }
 136   // lib.genAttrs [ "lan.losurdo.sourcephile.fr" "losurdo.sp" ] (_: {
 137     compression = true; # Helps to get a better framerate with forwardX11
 138     forwardX11 = true;
 139     forwardX11Trusted = true;
 140     serverAliveInterval = 15;
 141   });
 142   programs.git = {
 143     userName = "Julien Moutinho";
 144     userEmail = "julm@sourcephile.fr";
 145     signing.key = "0x4FE467034C11017B429BAC53A58CD81C3863926F";
 146     signing.signByDefault = false;
 147     extraConfig = {
 148       sendemail.smtpEncryption = "ssl"; # Yes, "ssl", not "tls" which does not work because it expects STARTTLS.
 149       sendemail.smtpServer = "mail.sourcephile.fr";
 150       sendemail.smtpServerPort = "465";
 151       sendemail.smtpUser = "julm@sourcephile.fr";
 152     };
 153   };
 154 }