Update workflow, add vscode config for keyring

.github/workflows/check.yml → .github/workflows/check-flake.yml

@@ -1,4 +1,4 @@
-name: Check
+name: check-flake
 
 on: [push, pull_request, workflow_dispatch]
 

.github/workflows/update-flake.yml

@@ -0,0 +1,21 @@
+name: update-flake-lock
+on:
+  workflow_dispatch: # allows manual triggering
+  schedule:
+    - cron: '0 0 * * 0' # runs weekly on Sunday at 00:00
+  push:
+      paths:
+        - 'flake.nix'
+jobs:
+  lockfile:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Install Nix
+        uses: cachix/install-nix-action@v25
+        with:
+          extra_nix_config: |
+            access-tokens = github.com=${{ secrets.GITHUB_TOKEN }}
+      - name: Update flake.lock
+        uses: DeterminateSystems/update-flake-lock@v21

home-manager/vscode/vscode-argv.json

@@ -0,0 +1,22 @@
+// This configuration file allows you to pass permanent command line arguments to VS Code.
+// Only a subset of arguments is currently supported to reduce the likelihood of breaking
+// the installation.
+//
+// PLEASE DO NOT CHANGE WITHOUT UNDERSTANDING THE IMPACT
+//
+// NOTE: Changing this file requires a restart of VS Code.
+{
+	// Use software rendering instead of hardware accelerated rendering.
+	// This can help in cases where you see rendering issues in VS Code.
+	// "disable-hardware-acceleration": true,
+
+	// Allows to disable crash reporting.
+	// Should restart the app if the value is changed.
+	"enable-crash-reporter": true,
+
+	// Unique id used for correlating crash reports sent from this instance.
+	// Do not edit this value.
+	"crash-reporter-id": "0b3302a3-84ab-4ab8-b6d0-3f6fd4d6bcf4",
+
+    "password-store": "gnome" 
+}

home-manager/vscode/vscode.nix

@@ -0,0 +1,8 @@
+# this config file is a wrapper to automatically configure vscode via a config file
+{ ... }:
+{
+  home.file.".vscode/argv.json" = {
+    source = ./vscode-argv.json;
+    executable = false;
+  };
+}

home.nix

@@ -12,6 +12,7 @@
     ./home-manager/pyprland/pyprland.nix # pyprland config wrapper
     ./home-manager/neofetch/neofetch.nix
     ./home-manager/virt-manager/virt-manager.nix
+    ./home-manager/vscode/vscode.nix
   ];
 
   # link the configuration file in current directory to the specified location in home directory

system/boot-kernel.nix

@@ -19,14 +19,14 @@
 
   boot.kernelPatches = [
     # Kernel lockdown patch
-    {
-      name = "kernel-lockdown";
-      patch = null;
-      extraStructuredConfig = with lib.kernel; {
-        SECURITY_LOCKDOWN_LSM = lib.mkForce yes;
-        MODULE_SIG = lib.mkForce yes;
-      };
-    }
+    # {
+    #   name = "kernel-lockdown";
+    #   patch = null;
+    #   extraStructuredConfig = with lib.kernel; {
+    #     SECURITY_LOCKDOWN_LSM = lib.mkForce yes;
+    #     MODULE_SIG = lib.mkForce yes;
+    #   };
+    # }
     {
       # recompiling the kernel with this option is needed for OpenRGB
       name = "NCT6775 driver";
@@ -84,4 +84,4 @@
       }
     )];
   };
-}
+}

system/hardware/disk.nix

@@ -1,14 +1,10 @@
 # Configure disks and zram
-{ ... }:
+{ lib, ... }:
 {
   # Enable support for bcachefs
   boot.supportedFilesystems = [ "bcachefs" ];
   # Enable zram swap
   zramSwap.enable = true;
-  # Disable last access time to increase performance
-  fileSystems = {
-  #  "/".options = [ "noatime" ];
-  };
 
   # fstrim for SSD
   services.fstrim = {
@@ -21,4 +17,4 @@
   services.devmon.enable = true;
   services.gvfs.enable = true;
   services.udisks2.enable = true;
-}
+}