nix: use nixfmt-rfc-style

flake.nix

@@ -2,8 +2,12 @@
   description = "Samw's home environment, as managed by nix/home-manager.";
   inputs = {
     # Nixpkgs
-    nixpkgs = {url = "github:nixos/nixpkgs/release-25.05";};
+    nixpkgs = {
-    nixpkgs-unstable = {url = "github:nixos/nixpkgs";};
+      url = "github:nixos/nixpkgs/release-25.05";
+    };
+    nixpkgs-unstable = {
+      url = "github:nixos/nixpkgs";
+    };
     # Other modules
     home-manager = {
       url = "github:nix-community/home-manager/release-25.05";
@@ -16,96 +20,133 @@
       inputs.nixpkgs.follows = "nixpkgs";
     };
   };
-  outputs = inputs: let
+  outputs =
-    overlays = [
+    inputs:
-      # Add our own local packages
+    let
-      (final: prev: {
+      overlays = [
-        # Make my local packages available as pkgs.mypkgs.<foo>
+        # Add our own local packages
-        mypkgs = prev.callPackage ./pkgs {};
+        (final: prev: {
-      })
+          # Make my local packages available as pkgs.mypkgs.<foo>
-      # more up to date ssh-tpm-agent. Can probably ditch this post-24.05
+          mypkgs = prev.callPackage ./pkgs { };
-      (final: prev: {
+        })
-        ssh-tpm-agent = (import inputs.nixpkgs-unstable { system = prev.system; }).ssh-tpm-agent;
+        # more up to date ssh-tpm-agent. Can probably ditch this post-24.05
-      })
+        (final: prev: {
-    ];
+          ssh-tpm-agent = (import inputs.nixpkgs-unstable { system = prev.system; }).ssh-tpm-agent;
-  in (rec {
+        })
-      profiles = import ./home/profiles.nix;
+      ];
-      lib = {
+    in
-        mkHome = {
+    (
-          profiles,
+      rec {
-          system,
+        profiles = import ./home/profiles.nix;
-          username ? "samw",
+        lib = {
-        }:
+          mkHome =
-          inputs.home-manager.lib.homeManagerConfiguration {
+            {
-            pkgs = (import inputs.nixpkgs { 
+              profiles,
-              inherit system;
+              system,
-              config.allowUnfree = true;  # Yes I know it's bad for me
+              username ? "samw",
-            });
+            }:
-            modules = [
+            inputs.home-manager.lib.homeManagerConfiguration {
-              { home = { 
+              pkgs = (
-              inherit username;
+                import inputs.nixpkgs {
-              homeDirectory =
+                  inherit system;
-                if (inputs.nixpkgs.lib.systems.elaborate system).isDarwin
+                  config.allowUnfree = true; # Yes I know it's bad for me
-                then "/Users/${username}"
+                }
-                else "/home/${username}";
+              );
-              stateVersion = "21.11";
+              modules = [
-            };}] ++ profiles ++ [
+                {
-              {nixpkgs.overlays = overlays;}
+                  home = {
-              # See comment in home/default.nix.
+                    inherit username;
-              ({ pkgs, ... }: {
+                    homeDirectory =
-                nix = {
+                      if (inputs.nixpkgs.lib.systems.elaborate system).isDarwin then
-                  enable = true;
+                        "/Users/${username}"
-                  package = pkgs.nix;
+                      else
-                  settings.experimental-features = "nix-command flakes";
+                        "/home/${username}";
-                  settings.max-jobs = "auto"; # Gotta go fast (build derivations in parallel)
+                    stateVersion = "21.11";
-                  # Pin the nixpkgs registry to our locked nixpkgs. This means that we
+                  };
-                  # get the same packages via e.g. nix shell as we have at the system
+                }
-                  # level, so less duplication overall and no more fetching that 30MB src
+              ]
-                  # every time you run nix shell.
+              ++ profiles
-                  registry.nixpkgs.flake = inputs.nixpkgs;
+              ++ [
-                };
+                { nixpkgs.overlays = overlays; }
-              })
+                # See comment in home/default.nix.
-            ];
+                (
-            extraSpecialArgs = {inherit system;};
+                  { pkgs, ... }:
-          };
+                  {
-      };
+                    nix = {
+                      enable = true;
+                      package = pkgs.nix;
+                      settings.experimental-features = "nix-command flakes";
+                      settings.max-jobs = "auto"; # Gotta go fast (build derivations in parallel)
+                      # Pin the nixpkgs registry to our locked nixpkgs. This means that we
+                      # get the same packages via e.g. nix shell as we have at the system
+                      # level, so less duplication overall and no more fetching that 30MB src
+                      # every time you run nix shell.
+                      registry.nixpkgs.flake = inputs.nixpkgs;
+                    };
+                  }
+                )
+              ];
+              extraSpecialArgs = { inherit system; };
+            };
+        };
 
-      # Standalone home-manager configurations
+        # Standalone home-manager configurations
-      homeConfigurations = {
+        homeConfigurations = {
-        zinc = lib.mkHome {
+          zinc = lib.mkHome {
-          system = "aarch64-darwin";
+            system = "aarch64-darwin";
-          profiles = with profiles; [default dev dev-gui sensitive mac];
+            profiles = with profiles; [
+              default
+              dev
+              dev-gui
+              sensitive
+              mac
+            ];
+          };
+          luroy = lib.mkHome {
+            system = "x86_64-linux";
+            profiles = with profiles; [
+              default
+              dev
+            ];
+          };
+          phosphorus = lib.mkHome {
+            system = "aarch64-darwin";
+            profiles = with profiles; [
+              default
+              dev
+              sensitive
+              mac
+            ];
+          };
         };
-        luroy = lib.mkHome {
+      }
-          system = "x86_64-linux";
+      # Per-system things
-          profiles = with profiles; [default dev];
+      // (inputs.flake-utils.lib.eachDefaultSystem (
-        };
+        system:
-        phosphorus = lib.mkHome {
+        let
-          system = "aarch64-darwin";
+          pkgs = import inputs.nixpkgs {
-          profiles = with profiles; [default dev sensitive mac];
+            inherit system;
-        };
+            overlays = overlays ++ [ inputs.devshell.overlays.default ];
-      };
+          };
-    }
+          platform = pkgs.lib.systems.elaborate system;
-    # Per-system things
+        in
-    // (inputs.flake-utils.lib.eachDefaultSystem (system: let
+        {
-      pkgs = import inputs.nixpkgs {
+          # Flake interface to my local packages.
-        inherit system;
+          # - `callPackage` puts some junk in mypkgs (`override` and
-        overlays = overlays ++ [inputs.devshell.overlays.default];
+          #   `overrideDerivation`) so we filter out anything that isn't a derivation
-      };
+          # - We also filter out any packages that aren't supported on the current
-      platform = pkgs.lib.systems.elaborate system;
+          #   platform.
-    in {
+          packages =
-      # Flake interface to my local packages.
+            with pkgs.lib;
-      # - `callPackage` puts some junk in mypkgs (`override` and
+            (filterAttrs (_: v: (isDerivation v && meta.availableOn platform v)) pkgs.mypkgs);
-      #   `overrideDerivation`) so we filter out anything that isn't a derivation
+          formatter = pkgs.nixfmt-tree;
-      # - We also filter out any packages that aren't supported on the current
+          # A devshell with useful utils
-      #   platform.
+          devShells.default = pkgs.devshell.mkShell {
-      packages = with pkgs.lib; (filterAttrs (_: v: (isDerivation v && meta.availableOn platform v)) pkgs.mypkgs);
+            packages = [
-      formatter = pkgs.alejandra;
+              inputs.home-manager.packages.${system}.default
-      # A devshell with useful utils
+            ];
-      devShells.default = pkgs.devshell.mkShell {
+          };
-        packages = [
+        }
-          inputs.home-manager.packages.${system}.default
+      ))
-        ];
+    );
-      };
-    })));
 }

home/aws.nix

@@ -1 +1,4 @@
-{pkgs, ...}: {home.packages = with pkgs; [awscli2];}
+{ pkgs, ... }:
+{
+  home.packages = with pkgs; [ awscli2 ];
+}

home/default.nix

@@ -1,23 +1,25 @@
 {
   pkgs,
   ...
-}: let
+}:
-  packages = pkgs.callPackage ./packages.nix {};
+let
-in {
+  packages = pkgs.callPackage ./packages.nix { };
+in
+{
   home.packages = packages.all;
   home.sessionVariables = {
     EDITOR = "vim"; # is overriden to nvim in vim.nix if needed
     WORDCHARS = "\${WORDCHARS//[\\/.=]/}"; # ctrl-w on paths without make angery
   };
   /*
-  # For some reason this doesn't play nice when using home manager config from inside
+    # For some reason this doesn't play nice when using home manager config from inside
-  # a nixos configuration.
+    # a nixos configuration.
-  nix = {
+    nix = {
-    enable = true;
+      enable = true;
-    package = pkgs.nix;
+      package = pkgs.nix;
-    settings.experimental-features = "nix-command flakes";
+      settings.experimental-features = "nix-command flakes";
-    settings.max-jobs = "auto"; # Gotta go fast (build derivations in parallel)
+      settings.max-jobs = "auto"; # Gotta go fast (build derivations in parallel)
-  };
+    };
   */
   programs = {
     home-manager.enable = true;
@@ -77,7 +79,9 @@ in {
         format = "$username$hostname$shlvl$directory$git_branch$git_commit$git_state$git_metrics$git_status$hg_branch$docker_context$golang$kotlin$nodejs$python$rust$terraform$nix_shell$memory_usage$aws$gcloud$openstack$azure$env_var$crystal$custom$sudo$cmd_duration$line_break$jobs$status$shell$character";
         username.format = "[$user]($style) ";
         hostname.format = "[$hostname]($style) ";
-        directory = {truncation_length = -1;};
+        directory = {
+          truncation_length = -1;
+        };
         git_branch.format = "[$symbol$branch]($style) ";
         python.format = "[py \${pyenv_prefix}(\${version} )(\\($virtualenv\\) )]($style)";
         nodejs.format = "[js ($version )]($style)";
@@ -98,7 +102,7 @@ in {
 
     ssh = {
       enable = true;
-      includes = ["~/.ssh/config.local"];
+      includes = [ "~/.ssh/config.local" ];
       matchBlocks."*" = {
         user = "samw";
         serverAliveInterval = 30;

home/docker.nix

@@ -1 +1,7 @@
-{pkgs, ...}: {home.packages = with pkgs; [docker colima];}
+{ pkgs, ... }:
+{
+  home.packages = with pkgs; [
+    docker
+    colima
+  ];
+}

home/git.nix

@@ -1,5 +1,9 @@
-{pkgs, ...}: {
+{ pkgs, ... }:
-  home.packages = with pkgs; [ git-open tea ];
+{
+  home.packages = with pkgs; [
+    git-open
+    tea
+  ];
   programs.git = {
     enable = true;
     lfs.enable = true;
@@ -9,7 +13,9 @@
     delta = {
       # Better diffs
       enable = true;
-      options = {line-numbers = true;};
+      options = {
+        line-numbers = true;
+      };
     };
 
     aliases = {
@@ -36,8 +42,7 @@
       sw = "switch";
       swc = "switch --create";
 
-      gone = ''
+      gone = ''! git fetch -p && git for-each-ref --format '%(refname:short) %(upstream:track)' │ awk '$2 == "[gone]" {print $1}' | xargs -r git branch -D'';
-        ! git fetch -p && git for-each-ref --format '%(refname:short) %(upstream:track)' │ awk '$2 == "[gone]" {print $1}' | xargs -r git branch -D'';
     };
     extraConfig = {
       branch.sort = "-committerdate";

home/gpg.nix

@@ -1,4 +1,5 @@
-{pkgs, lib, ...}: {
+{ pkgs, lib, ... }:
+{
   programs.gpg = {
     enable = true;
     mutableKeys = false;
@@ -19,7 +20,7 @@
     ];
     # make yubikey work on macos? lolgpg
     # https://github.com/NixOS/nixpkgs/issues/155629
-    scdaemonSettings = (lib.optionalAttrs pkgs.stdenv.isDarwin {disable-ccid = true;});
+    scdaemonSettings = (lib.optionalAttrs pkgs.stdenv.isDarwin { disable-ccid = true; });
   };
 
   # Shouldn't have an effect on macos, on linux we need to specify a pinentry

home/helix.nix

@@ -1,4 +1,5 @@
-{ ... }: {
+{ ... }:
+{
   programs.helix = {
     enable = true;
     settings = {
@@ -8,20 +9,24 @@
     languages = {
       language-server.basedpyright = {
         command = "basedpyright-langserver";
-        args = ["--stdio"];
+        args = [ "--stdio" ];
       };
-      language = [{
+      language = [
-        name = "python";
+        {
-        roots = [
+          name = "python";
-          "pyproject.toml"
+          roots = [
-          "setup.py"
+            "pyproject.toml"
-          "poetry.lock"
+            "setup.py"
-          ".git"
+            "poetry.lock"
-        ];
+            ".git"
-        language-servers = [{
+          ];
-          name = "basedpyright";
+          language-servers = [
-        }];
+            {
-      }];
+              name = "basedpyright";
+            }
+          ];
+        }
+      ];
     };
   };
 }

home/macs.nix

@@ -2,14 +2,19 @@
   pkgs,
   lib,
   ...
-}: {
+}:
+{
   # Mac specific packages.
   # TODO: have this in a central packages place rather than here
-  home.packages = with pkgs; [pngpaste mypkgs.qrclip];
+  home.packages = with pkgs; [
+    pngpaste
+    mypkgs.qrclip
+  ];
   # Use secretive for SSH agent
   programs.ssh.matchBlocks.all = lib.mkIf pkgs.stdenv.isDarwin {
     host = "*";
-    extraOptions."IdentityAgent" = "~/Library/Containers/com.maxgoedjen.Secretive.SecretAgent/Data/socket.ssh";
+    extraOptions."IdentityAgent" =
+      "~/Library/Containers/com.maxgoedjen.Secretive.SecretAgent/Data/socket.ssh";
   };
   programs.zsh.initContent = "eval $(/opt/homebrew/bin/brew shellenv)";
 }

home/packages.nix

@@ -1,5 +1,6 @@
-{pkgs}:
+{ pkgs }:
-with pkgs; rec {
+with pkgs;
+rec {
   # The stuff you want installed everywhere. The necessities.
   base = [
     bat # cat replacement, aliased to cat in home-manager
@@ -15,10 +16,23 @@ with pkgs; rec {
   ];
 
   # Networking shit
-  net = [dig iperf3 nmap socat tcpdump whois];
+  net = [
+    dig
+    iperf3
+    nmap
+    socat
+    tcpdump
+    whois
+  ];
 
   # development tools
-  dev = [jq nixfmt-rfc-style gh glab hexyl ];
+  dev = [
+    jq
+    nixfmt-rfc-style
+    gh
+    glab
+    hexyl
+  ];
 
   all = base ++ net ++ dev;
 }

home/passwords.nix

@@ -1,9 +1,12 @@
-{pkgs, ...}: {
+{ pkgs, ... }:
-  home.packages = with pkgs; [yubikey-manager];
+{
+  home.packages = with pkgs; [ yubikey-manager ];
   programs.password-store = {
     enable = true;
-    settings = {PASSWORD_STORE_DIR = "$HOME/.password-store";};
+    settings = {
-    package = pkgs.pass.withExtensions (exts: [exts.pass-otp]);
+      PASSWORD_STORE_DIR = "$HOME/.password-store";
+    };
+    package = pkgs.pass.withExtensions (exts: [ exts.pass-otp ]);
   };
   programs.zsh.shellAliases = {
     p = "pass";

home/profiles.nix

@@ -2,22 +2,33 @@
   # The basics that you'll want everywhere
   default = ./default.nix;
   # A machine for development
-  dev = {...}: {
+  dev =
-    imports = [./git.nix ./vim.nix ./vim-dev ./helix.nix];
+    { ... }:
-  };
+    {
+      imports = [
+        ./git.nix
+        ./vim.nix
+        ./vim-dev
+        ./helix.nix
+      ];
+    };
   # A machine for dev with a GUI
   # TODO: detect this automatically somehow?
-  dev-gui = {...}: {
+  dev-gui =
-    imports = [./vscode.nix];
+    { ... }:
-  };
+    {
+      imports = [ ./vscode.nix ];
+    };
   tpmssh = ./tpmssh.nix;
   # Sensitive stuff
-  sensitive = {...}: {
+  sensitive =
-    imports = [
+    { ... }:
-      ./passwords.nix
+    {
-      ./gpg.nix
+      imports = [
-    ];
+        ./passwords.nix
-  };
+        ./gpg.nix
+      ];
+    };
   # A MacOS machine
   mac = ./macs.nix;
   # A machine you want to do docker stuff on
@@ -25,5 +36,13 @@
   # A machine you want to do aws stuff on
   aws = ./aws.nix;
   # A server
-  server = {...}: {imports = [./default.nix ./git.nix ./vim.nix];};
+  server =
+    { ... }:
+    {
+      imports = [
+        ./default.nix
+        ./git.nix
+        ./vim.nix
+      ];
+    };
 }

home/tpmssh.nix

@@ -1,5 +1,6 @@
 # Enable tpm-ssh-agent in a systemd user service
-{pkgs, config, ...}: {
+{ pkgs, config, ... }:
+{
   home.packages = [ pkgs.ssh-tpm-agent ];
   home.sessionVariables = {
     SSH_AUTH_SOCK = "$(${pkgs.ssh-tpm-agent}/bin/ssh-tpm-agent --print-socket)";
@@ -22,11 +23,18 @@
       Environment = ''
         SSH_AUTH_SOCK="%t/ssh-tpm-agent.sock"
       '';
-      ExecStart = "${pkgs.writeShellScriptBin "start-ssh-tpm-agent" (if config.services.gpg-agent.enableSshSupport then ''
+      ExecStart = "${
-        ${pkgs.ssh-tpm-agent}/bin/ssh-tpm-agent -A $(${config.programs.gpg.package}/bin/gpgconf --list-dirs agent-ssh-socket)
+        pkgs.writeShellScriptBin "start-ssh-tpm-agent" (
-      '' else ''
+          if config.services.gpg-agent.enableSshSupport then
-        ${pkgs.ssh-tpm-agent}/bin/ssh-tpm-agent
+            ''
-      '')}/bin/start-ssh-tpm-agent";
+              ${pkgs.ssh-tpm-agent}/bin/ssh-tpm-agent -A $(${config.programs.gpg.package}/bin/gpgconf --list-dirs agent-ssh-socket)
+            ''
+          else
+            ''
+              ${pkgs.ssh-tpm-agent}/bin/ssh-tpm-agent
+            ''
+        )
+      }/bin/start-ssh-tpm-agent";
       PassEnvironment = "SSH_AGENT_PID";
       SuccessExitStatus = 2;
       Type = "simple";

home/vim-dev/default.nix

@@ -3,9 +3,11 @@
   lib,
   system,
   ...
-}: {
+}:
-  home.packages = with pkgs; [nil];
+{
-  programs.neovim.plugins = with pkgs.vimPlugins;
+  home.packages = with pkgs; [ nil ];
+  programs.neovim.plugins =
+    with pkgs.vimPlugins;
     [
       # More fancy shit
       nvim-treesitter
@@ -32,7 +34,7 @@
     ]
     # delve is unsupported on aarch64-linux and golangci-lint is broken on darwin
     # (see https://github.com/NixOS/nixpkgs/issues/168984).
-    ++ lib.optionals (system != "aarch64-linux" && !pkgs.stdenv.isDarwin) [vim-go];
+    ++ lib.optionals (system != "aarch64-linux" && !pkgs.stdenv.isDarwin) [ vim-go ];
   programs.neovim.extraConfig = ''
     lua <<EOF
         ${builtins.readFile ./dev.lua}

home/vim.nix

@@ -4,9 +4,10 @@
   pkgs,
   lib,
   ...
-}: {
+}:
+{
   home.sessionVariables.EDITOR = lib.mkForce "nvim";
-  home.packages = with pkgs; [ripgrep];
+  home.packages = with pkgs; [ ripgrep ];
   programs.neovim = {
     enable = true;
     viAlias = true;
@@ -26,7 +27,7 @@
       vim-gitgutter
       # More stuff idk
       emmet-vim
-      vim-sleuth # guess whitespace settings from file
+      vim-sleuth # guess whitespace settings from file
     ];
     extraConfig = ''
       lua <<EOF

home/vscode.nix

@@ -1,4 +1,5 @@
-{pkgs, ...}: {
+{ pkgs, ... }:
+{
   programs.vscode = {
     enable = true;
     package = pkgs.vscodium;

pkgs/default.nix

@@ -1,4 +1,5 @@
 # TODO: auto import everything
-{pkgs, ...}: {
+{ pkgs, ... }:
-  qrclip = pkgs.callPackage ./qrclip {};
+{
+  qrclip = pkgs.callPackage ./qrclip { };
 }

pkgs/qrclip/default.nix

@@ -2,11 +2,14 @@
   pkgs,
   lib,
   stdenv,
-}: let
+}:
-  zbar = pkgs.zbar.override {enableVideo = false;};
+let
+  zbar = pkgs.zbar.override { enableVideo = false; };
 in
-  (pkgs.writeShellScriptBin "qrclip" ''
+(pkgs.writeShellScriptBin "qrclip" ''
-    set -eo pipefail
+  set -eo pipefail
-    ${pkgs.pngpaste}/bin/pngpaste - | ${zbar}/bin/zbarimg --raw -q1 -
+  ${pkgs.pngpaste}/bin/pngpaste - | ${zbar}/bin/zbarimg --raw -q1 -
-  '')
+'')
-  // {meta.platforms = lib.platforms.darwin;}
+// {
+  meta.platforms = lib.platforms.darwin;
+}