bump nixos; add timezone secret; add alejandra; reconfigure nix for build testing

nix/home-manager/configuration/graphical-fullblown.nix

@@ -107,10 +107,12 @@ in
         aspellDicts.de
         skypeforlinux
         unstablepkgs.jitsi-meet-electron
-        unstablepkgs.zoom-us
         thunderbird
         evolution # gnome4.glib_networking
         kotatogram-desktop
+        zoom-us
+        thunderbird
+        evolution # gnome4.glib_networking
         gnome.cheese
         masterpkgs.discord
 

nix/home-manager/profiles/common.nix

@@ -7,10 +7,15 @@ in {
   nixpkgs.overlays = builtins.attrValues (import ../../overlays);
 
   nixpkgs.config = {
-    allowBroken = true;
+    allowBroken = false;
     allowUnfree = true;
+
+    permittedInsecurePackages = [];
   };
 
+  nix.settings.experimental-features = ["nix-command" "flakes" "impure-derivations" "ca-derivations" "recursive-nix"];
+  nix.settings.sandbox = "relaxed";
+
   home.keyboard = {
     layout = "us";
     variant = "altgr-intl";
@@ -48,4 +53,6 @@ in {
       ripgrep
       du-dust
     ]);
+
+  home.stateVersion = "22.05";
 }

nix/home-manager/profiles/dotfiles/vcsh.tmpl.nix

@@ -5,7 +5,8 @@
   ...
 }: let
   repoBareLocal =
-    pkgs.runCommand "fetchbare" {
+    pkgs.runCommand "fetchbare"
+    {
       outputHashMode = "recursive";
       outputHashAlgo = "sha256";
       outputHash = "0000000000000000000000000000000000000000000000000000";

nix/home-manager/profiles/qtile-desktop.nix

@@ -1,4 +1,6 @@
 {pkgs, ...}: let
+  passwords = import ../../variables/passwords.crypt.nix;
+
   inherit (import ../lib.nix {}) mkSimpleTrayService;
 
   audio = pkgs.writeShellScript "audio" ''
@@ -208,9 +210,9 @@
             widget.WindowName(),
             widget.Prompt(),
             widget.CPUGraph(),
-            widget.ThermalSensor(),
+            widget.ThermalSensor(tag_sensor = "CPU"),
             widget.Memory(),
-            widget.Net(interface='eth0'),
+            # widget.Net(interface='eth0'),
             widget.Net(interface='wlan0'),
             widget.Clock(format='%Y-%m-%d %a %I:%M %p'),
         ]
@@ -253,6 +255,8 @@ in {
     services = {};
   };
 
+  # systemd.user.sockets.gpg-agent.Socket.Accept = true;
+
   services = {
     gnome-keyring.enable = true;
     blueman-applet.enable = true;
@@ -270,14 +274,16 @@ in {
       grabKeyboardAndMouse = true;
       pinentryFlavor = "gtk2";
       extraConfig = "";
+
+      defaultCacheTtl = 0;
+      maxCacheTtl = 0;
     };
     flameshot.enable = true;
     pasystray.enable = true;
     cbatticon.enable = true;
     redshift = {
       enable = true;
-      longitude = "9.1698";
-      latitude = "47.6691";
+      inherit (passwords.location.stefan) longitude latitude;
       temperature = {
         day = 6700;
         night = 3700;

nix/home-manager/programs/vscode/default.nix

@@ -469,7 +469,7 @@ in {
       ;
   };
 
-  home.packages = [pkgs.nixpkgs-fmt];
+  home.packages = [pkgs.nixpkgs-fmt pkgs.alejandra];
 }
 # TODO: automate
 # rustup install stable