update rlcone

.envrc

@@ -0,0 +1,2 @@
+# export SOPS_AGE_KEY_FILE=${HOME}/.config/sops/age/keys.txt
+export SOPS_AGE_KEY_FILE=$(pwd)/.keys.txt

.gitignore

@@ -0,0 +1 @@
+.keys.txt

.sops.yaml

@@ -0,0 +1,4 @@
+creation_rules:
+  - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
+    age: >-
+      age1fwwfdh3np846pcwlsre2d8py3a8z5gfltx3jcyghdfx9esn6a40sm60mdj

README.md

@@ -13,5 +13,16 @@ curl --proto '=https' --tlsv1.2 -sSf -L https://install.determinate.systems/nix
 git clone https://github.com/cupcakearmy/nix-macos ~/.config/nix-darwin
 
 # Installation
-nix run nix-darwin -- switch --flake ~/.config/nix-darwin#sflx
+nix run nix-darwin -- switch --flake ~/.config/nix-darwin#mbp
+```
+
+
+## Sops
+
+Secrets are managed by sops-nix
+
+```bash
+# To edit the secrets files
+nix shell nixpkgs#sops
+sops ./secrets/foo.yaml
 ```

cask.nix

@@ -1,22 +1,29 @@
 [
+  "knockknock"
+  "lulu"
+  "oversight"
+
   "aldente"
   "alt-tab"
   "keka"
-  "knockknock"
-  "lulu"
-  "kap"
+  "jordanbaird-ice"
   "keycastr"
   "raycast"
-  "kitty"
+  "ghostty"
+  "lihaoyun6/tap/quickrecorder"
 
   # Dev
   "docker"
   "sloth"
   "vscodium"
-  "httpie"
+  "hoppscotch"
+  "utm"
+  "balenaetcher"
 
   # Apps
+  "figma"
   "arc"
+  "zen-browser"
   "bitwarden"
   "spotify"
   "vlc"
@@ -26,5 +33,8 @@
   "mediahuman-audio-converter"
   "imageoptim"
   "appcleaner"
-
+  "daisydisk"
+  "discord"
+  "signal"
+  "vlc"
 ]

darwin.nix

@@ -0,0 +1,72 @@
+{
+  pkgs,
+  host,
+  flake,
+  lib,
+  ...
+}:
+{
+  nix.settings.experimental-features = "nix-command flakes";
+
+  # Set Git commit hash for darwin-version.
+  system.configurationRevision = flake.rev or flake.dirtyRev or null;
+
+  # Used for backwards compatibility, please read the changelog before changing.
+  # $ darwin-rebuild changelog
+  system.stateVersion = 5;
+  nixpkgs.hostPlatform = host.platform;
+  nixpkgs.config.allowUnfree = true;
+
+  # Nix Darwin
+  # https://daiderd.com/nix-darwin/manual/index.html
+
+  # Security
+  system.defaults.screensaver.askForPassword = true;
+  system.defaults.screensaver.askForPasswordDelay = 0;
+  system.defaults.loginwindow.GuestEnabled = false;
+
+  # Dock
+  system.defaults.dock.autohide = true;
+  system.defaults.dock.orientation = "left";
+  system.defaults.dock.show-recents = false;
+  system.defaults.dock.persistent-apps = [
+    "/Applications/Arc.app"
+    "/Applications/Ghostty.app"
+    "/Applications/VSCodium.app"
+    "/Applications/Spotify.app"
+    "/System/Applications/System Settings.app"
+  ];
+  system.defaults.dock.persistent-others = [ ];
+
+  # Input devices
+  system.keyboard.enableKeyMapping = true;
+  system.keyboard.remapCapsLockToEscape = true;
+  system.defaults.NSGlobalDomain.InitialKeyRepeat = 25;
+  system.defaults.NSGlobalDomain.KeyRepeat = 2;
+  system.defaults.NSGlobalDomain."com.apple.mouse.tapBehavior" = 1;
+  system.defaults.NSGlobalDomain."com.apple.trackpad.scaling" = 0.875;
+  system.defaults.trackpad.Dragging = true;
+
+  # Finder
+  system.defaults.finder.AppleShowAllExtensions = true;
+  system.defaults.finder.ShowPathbar = true;
+
+  # Other
+  system.startup.chime = false;
+
+  users.users.${host.username} = {
+    home = "/Users/${host.username}";
+    shell = pkgs.fish;
+  };
+  programs.fish.enable = true;
+
+  homebrew = {
+    enable = true;
+    casks = (import ./cask.nix) ++ (lib.attrByPath [ "extras" "casks" ] [ ] host);
+    taps = [ "lihaoyun6/tap" ];
+    onActivation = {
+      autoUpdate = true;
+      cleanup = "zap";
+    };
+  };
+}

files/ghostty/config

@@ -0,0 +1,4 @@
+font-family = "JetBrainsMono Nerd Font"
+quit-after-last-window-closed=true
+theme = "rose-pine"
+window-save-state = "always"

files/git/gitconfig

@@ -10,12 +10,6 @@
 [commit]
 	gpgsign = false
 
-[includeIf "gitdir:/Users/nicco/"]
-	path = "~/.dotfiles/files/git/config.personal"
-
-[includeIf "gitdir:/Users/niccoloborgioli/"]
-	path = "~/.dotfiles/files/git/config.work"
-
 [pull]
 	rebase = false
 
@@ -25,3 +19,6 @@
 	sort = -committerdate
 [alias]
 	fpush = push --force-with-lease
+
+[include]
+    path = ~/.gitconfig.local

files/nvim/lazy-lock.json

@@ -1,19 +1,19 @@
 {
-  "LazyVim": { "branch": "main", "commit": "704c29110d578186f0ca3eac67b753ddf52541fc" },
-  "SchemaStore.nvim": { "branch": "main", "commit": "f8d6e9068861888651f68958521b1958314aac41" },
-  "bg.nvim": { "branch": "main", "commit": "00a12555962047b71ccb1a724eaf3293d3e995de" },
+  "LazyVim": { "branch": "main", "commit": "4d596cf4b4dcb369b2aef7e4d09635416b6c5a3f" },
+  "SchemaStore.nvim": { "branch": "main", "commit": "291b15c6a03d8f859da8d83f46ed41ae6bb0ea8d" },
+  "auto-session": { "branch": "main", "commit": "8d2eddb14ef66ed1019c92251e2d31bb7a2a2f87" },
+  "bg.nvim": { "branch": "main", "commit": "18b4161e22decab29fa8705c174bb29b5b39be36" },
   "bufferline.nvim": { "branch": "main", "commit": "5cc447cb2b463cb499c82eaeabbed4f5fa6a0a44" },
   "catppuccin": { "branch": "main", "commit": "637d99e638bc6f1efedac582f6ccab08badac0c6" },
   "cmp-buffer": { "branch": "main", "commit": "3022dbc9166796b644a841a02de8dd1cc1d311fa" },
   "cmp-git": { "branch": "main", "commit": "ec049036e354ed8ed0215f2427112882e1ea7051" },
   "cmp-nvim-lsp": { "branch": "main", "commit": "39e2eda76828d88b773cc27a3f61d2ad782c922d" },
   "cmp-path": { "branch": "main", "commit": "91ff86cd9c29299a64f968ebb45846c485725f23" },
-  "conform.nvim": { "branch": "master", "commit": "023f795dbcf32d4351b6a9ed2e613d471b5bb812" },
+  "conform.nvim": { "branch": "master", "commit": "62d5accad8b29d6ba9b58d3dff90c43a55621c60" },
   "crates.nvim": { "branch": "main", "commit": "8bf8358ee326d5d8c11dcd7ac0bcc9ff97dbc785" },
-  "dashboard-nvim": { "branch": "master", "commit": "ae309606940d26d8c9df8b048a6e136b6bbec478" },
   "flash.nvim": { "branch": "main", "commit": "34c7be146a91fec3555c33fe89c7d643f6ef5cf1" },
   "friendly-snippets": { "branch": "main", "commit": "de8fce94985873666bd9712ea3e49ee17aadb1ed" },
-  "fzf-lua": { "branch": "main", "commit": "2a7eb32871a131e24021dd1756865e475fe7e274" },
+  "fzf-lua": { "branch": "main", "commit": "9427dc65afaa7972fb20fc52280cd1449f691928" },
   "gitsigns.nvim": { "branch": "main", "commit": "ac5aba6dce8c06ea22bea2c9016f51a2dbf90dc7" },
   "grug-far.nvim": { "branch": "main", "commit": "9a2f78219390b47d67795ab09390d7f092e23976" },
   "hop.nvim": { "branch": "master", "commit": "08ddca799089ab96a6d1763db0b8adc5320bf050" },
@@ -21,9 +21,9 @@
   "lazy.nvim": { "branch": "main", "commit": "7967abe55752aa90532e6bb4bd4663fe27a264cb" },
   "lazydev.nvim": { "branch": "main", "commit": "d5800897d9180cea800023f2429bce0a94ed6064" },
   "lualine.nvim": { "branch": "master", "commit": "2a5bae925481f999263d6f5ed8361baef8df4f83" },
-  "luvit-meta": { "branch": "main", "commit": "ce76f6f6cdc9201523a5875a4471dcfe0186eb60" },
+  "luvit-meta": { "branch": "main", "commit": "57d464c4acb5c2e66bd4145060f5dc9e96a7bbb7" },
   "markdown-preview.nvim": { "branch": "master", "commit": "a923f5fc5ba36a3b17e289dc35dc17f66d0548ee" },
-  "mason-lspconfig.nvim": { "branch": "main", "commit": "cab00668464d2914d0752b86168b4a431cc93eb2" },
+  "mason-lspconfig.nvim": { "branch": "main", "commit": "43894adcf10bb1190c2184bd7c1750e8ea2b3dce" },
   "mason.nvim": { "branch": "main", "commit": "e2f7f9044ec30067bc11800a9e266664b88cda22" },
   "mini.ai": { "branch": "main", "commit": "31c149067d38b97720d2a179619f7745a0006ecc" },
   "mini.animate": { "branch": "main", "commit": "d33ddf0eefee6338bbd95805c4595c1b34e6bfe2" },
@@ -32,24 +32,24 @@
   "mini.pairs": { "branch": "main", "commit": "7e834c5937d95364cc1740e20d673afe2d034cdb" },
   "mini.surround": { "branch": "main", "commit": "48a9795c9d352c771e1ab5dedab6063c0a2df037" },
   "neo-tree.nvim": { "branch": "main", "commit": "a77af2e764c5ed4038d27d1c463fa49cd4794e07" },
-  "noice.nvim": { "branch": "main", "commit": "221ffbc499d322699ea079fcd878a2399529e775" },
+  "noice.nvim": { "branch": "main", "commit": "203f74adaae11d47440a667555b4af9156be807b" },
   "nui.nvim": { "branch": "main", "commit": "b58e2bfda5cea347c9d58b7f11cf3012c7b3953f" },
-  "nvim-cmp": { "branch": "main", "commit": "f17d9b4394027ff4442b298398dfcaab97e40c4f" },
-  "nvim-lint": { "branch": "master", "commit": "36da8dd0ddc4f88e0beae234c20e75397326f143" },
-  "nvim-lspconfig": { "branch": "master", "commit": "87c7c83ce62971e0bdb29bb32b8ad2b19c8f95d0" },
+  "nvim-cmp": { "branch": "main", "commit": "40a03dc225383c4f6256596c2cdf27e03b8119b5" },
+  "nvim-lint": { "branch": "master", "commit": "8e9562de7261e5b862c631958df616e1a65552cd" },
+  "nvim-lspconfig": { "branch": "master", "commit": "291a8f1a319dc712db85bcc174b0cf406f0a5b69" },
   "nvim-snippets": { "branch": "main", "commit": "56b4052f71220144689caaa2e5b66222ba5661eb" },
-  "nvim-treesitter": { "branch": "master", "commit": "20e10ca6914f65cf1410232433fb58de70ab6b39" },
+  "nvim-treesitter": { "branch": "master", "commit": "a3a732107f8b529f97bf4921b3e1af5dcc756bb6" },
   "nvim-treesitter-textobjects": { "branch": "master", "commit": "3e450cd85243da99dc23ebbf14f9c70e9a0c26a4" },
   "nvim-ts-autotag": { "branch": "main", "commit": "e239a560f338be31337e7abc3ee42515daf23f5e" },
   "nvim-ts-context-commentstring": { "branch": "main", "commit": "9c74db656c3d0b1c4392fc89a016b1910539e7c0" },
   "persistence.nvim": { "branch": "main", "commit": "f6aad7dde7fcf54148ccfc5f622c6d5badd0cc3d" },
   "plenary.nvim": { "branch": "master", "commit": "2d9b06177a975543726ce5c73fca176cedbffe9d" },
-  "render-markdown.nvim": { "branch": "main", "commit": "82184c4a3c3580a7a859b2cb7e58f16c10fd29ef" },
-  "rustaceanvim": { "branch": "master", "commit": "8ece53be36515cb9e76f3d03511643636469502d" },
-  "snacks.nvim": { "branch": "main", "commit": "313954efdfb064a85df731b29fa9b86bc711044a" },
+  "render-markdown.nvim": { "branch": "main", "commit": "d6a82d70765aa238b7ea48d257a1d57a92501423" },
+  "rustaceanvim": { "branch": "master", "commit": "6e742b9fc6a37e46181879f6c32cecfa8cd2cebf" },
+  "snacks.nvim": { "branch": "main", "commit": "a365d3e854641ad9a5b362d35cc13e0fb8032e88" },
   "tailwindcss-colorizer-cmp.nvim": { "branch": "main", "commit": "3d3cd95e4a4135c250faf83dd5ed61b8e5502b86" },
   "todo-comments.nvim": { "branch": "main", "commit": "ae0a2afb47cf7395dc400e5dc4e05274bf4fb9e0" },
-  "tokyonight.nvim": { "branch": "main", "commit": "9758827c3b380ba89da4a2212b6255d01afbcf08" },
+  "tokyonight.nvim": { "branch": "main", "commit": "c2725eb6d086c8c9624456d734bd365194660017" },
   "trouble.nvim": { "branch": "main", "commit": "3dc00c0447c016cd43e03054c3d49436a1f2076d" },
   "ts-comments.nvim": { "branch": "main", "commit": "2002692ad1d3f6518d016550c20c2a890f0cbf0e" },
   "vim-startuptime": { "branch": "master", "commit": "ac2cccb5be617672add1f4f3c0a55ce99ba34e01" },

files/nvim/lazyvim.json

@@ -25,7 +25,7 @@
     "lazyvim.plugins.extras.util.startuptime"
   ],
   "news": {
-    "NEWS.md": "7107"
+    "NEWS.md": "7429"
   },
   "version": 7
-}
+}

flake.lock

@@ -2,16 +2,14 @@
   "nodes": {
     "home-manager": {
       "inputs": {
-        "nixpkgs": [
-          "nixpkgs"
-        ]
+        "nixpkgs": "nixpkgs"
       },
       "locked": {
-        "lastModified": 1731786860,
-        "narHash": "sha256-130gQ5k8kZlxjBEeLpE+SvWFgSOFgQFeZlqIik7KgtQ=",
+        "lastModified": 1738878603,
+        "narHash": "sha256-fmhq8B3MvQLawLbMO+LWLcdC2ftLMmwSk+P29icJ3tE=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "1bd5616e33c0c54d7a5b37db94160635a9b27aeb",
+        "rev": "433799271274c9f2ab520a49527ebfe2992dcfbd",
         "type": "github"
       },
       "original": {
@@ -27,11 +25,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1731768170,
-        "narHash": "sha256-9Zj2baKY3KaKzs5+nqZgIwr/o/iibhENFxjOnpU+IOU=",
+        "lastModified": 1738743987,
+        "narHash": "sha256-O3bnAfsObto6l2tQOmQlrO6Z2kD6yKwOWfs7pA0CpOc=",
         "owner": "LnL7",
         "repo": "nix-darwin",
-        "rev": "2bcef10f4319f34ddebadb5f37eaa81ca2510730",
+        "rev": "ae406c04577ff9a64087018c79b4fdc02468c87c",
         "type": "github"
       },
       "original": {
@@ -42,17 +40,33 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1731676161,
-        "narHash": "sha256-R0HVwLNR6/a7tonc/7ChJIRB8fJ0dyQmJYH4lOU1Zm0=",
+        "lastModified": 1738680400,
+        "narHash": "sha256-ooLh+XW8jfa+91F1nhf9OF7qhuA/y1ChLx6lXDNeY5U=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "8809585e6937d0b07fc066792c8c9abf9c3fe5c4",
+        "rev": "799ba5bffed04ced7067a91798353d360788b30d",
         "type": "github"
       },
       "original": {
         "owner": "NixOS",
+        "ref": "nixos-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs_2": {
+      "locked": {
+        "lastModified": 1738797219,
+        "narHash": "sha256-KRwX9Z1XavpgeSDVM/THdFd6uH8rNm/6R+7kIbGa+2s=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "1da52dd49a127ad74486b135898da2cef8c62665",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixpkgs-unstable",
         "repo": "nixpkgs",
-        "rev": "8809585e6937d0b07fc066792c8c9abf9c3fe5c4",
         "type": "github"
       }
     },
@@ -60,7 +74,28 @@
       "inputs": {
         "home-manager": "home-manager",
         "nix-darwin": "nix-darwin",
-        "nixpkgs": "nixpkgs"
+        "nixpkgs": "nixpkgs_2",
+        "sops-nix": "sops-nix"
+      }
+    },
+    "sops-nix": {
+      "inputs": {
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1738291974,
+        "narHash": "sha256-wkwYJc8cKmmQWUloyS9KwttBnja2ONRuJQDEsmef320=",
+        "owner": "Mic92",
+        "repo": "sops-nix",
+        "rev": "4c1251904d8a08c86ac6bc0d72cc09975e89aef7",
+        "type": "github"
+      },
+      "original": {
+        "owner": "Mic92",
+        "repo": "sops-nix",
+        "type": "github"
       }
     }
   },

flake.nix

@@ -1,90 +1,55 @@
 {
-  description = "Example nix-darwin system flake";
+  description = "Personal Nix configuration";
 
   inputs = {
-    # https://github.com/LnL7/nix-darwin/issues/1176
-    # nixpkgs.url = "github:NixOS/nixpkgs/nixpkgs-unstable";
-    nixpkgs.url = "github:NixOS/nixpkgs/8809585e6937d0b07fc066792c8c9abf9c3fe5c4";
+    nixpkgs.url = "github:NixOS/nixpkgs/nixpkgs-unstable";
 
     nix-darwin.url = "github:LnL7/nix-darwin";
     nix-darwin.inputs.nixpkgs.follows = "nixpkgs";
 
     home-manager.url = "github:nix-community/home-manager";
-    home-manager.inputs.nixpkgs.follows = "nixpkgs";
+    # home-manager.inputs.nixpkgs.follows = "nixpkgs";
+
+    sops-nix.url = "github:Mic92/sops-nix";
+    sops-nix.inputs.nixpkgs.follows = "nixpkgs";
   };
 
   outputs =
-    inputs@{
+    {
       self,
       nix-darwin,
       nixpkgs,
       home-manager,
+      sops-nix,
     }:
     let
-      configuration =
-        { pkgs, ... }:
-        {
-          nix.settings.experimental-features = "nix-command flakes";
-
-          # Set Git commit hash for darwin-version.
-          system.configurationRevision = self.rev or self.dirtyRev or null;
-
-          # Used for backwards compatibility, please read the changelog before changing.
-          # $ darwin-rebuild changelog
-          system.stateVersion = 5;
-          nixpkgs.hostPlatform = "aarch64-darwin";
-          nixpkgs.config.allowUnfree = true;
-
-          # Nix Darwin
-          # https://daiderd.com/nix-darwin/manual/index.html
-          environment.systemPackages = [ ];
-
-          system.defaults.dock.autohide = true;
-          system.defaults.dock.orientation = "left";
-          system.defaults.finder.AppleShowAllExtensions = true;
-          system.keyboard.enableKeyMapping = true;
-          system.keyboard.remapCapsLockToEscape = true;
-          system.defaults.NSGlobalDomain.InitialKeyRepeat = 25;
-          system.defaults.NSGlobalDomain.KeyRepeat = 2;
-          system.defaults.NSGlobalDomain."com.apple.mouse.tapBehavior" = 1;
-          system.defaults.NSGlobalDomain."com.apple.trackpad.scaling" = 0.875;
-          system.defaults.trackpad.Dragging = true;
-
-          users.users."niccoloborgioli" = {
-            home = "/Users/niccoloborgioli";
-            shell = pkgs.fish;
-          };
-          programs.fish.enable = true;
-
-          homebrew.enable = true;
-          homebrew.casks = import ./cask.nix;
-          # homebrew.taps = [
-          #   "hashicorp/tap"
-          # ];
-          # homebrew.brews = [
-          #   "hashicorp/tap/vault"
-          # ];
-
-          # Home Manager
-          home-manager.backupFileExtension = "backup";
-        };
+      hosts = import ./hosts;
+      inherit (builtins) listToAttrs;
     in
     {
-      # Build darwin flake using:
-      # $ darwin-rebuild build --flake .#Niccolo-Borgioli-s-MacBook-Pro
-      darwinConfigurations."sflx" = nix-darwin.lib.darwinSystem {
-        modules = [
-          configuration
-          home-manager.darwinModules.home-manager
-          {
-            home-manager.useGlobalPkgs = true;
-            home-manager.useUserPackages = true;
-            home-manager.users.niccoloborgioli = import ./home.nix;
-          }
-        ];
-      };
-
-      # Expose the package set, including overlays, for convenience.
-      darwinPackages = self.darwinConfigurations."sflx".pkgs;
+      darwinConfigurations = listToAttrs (
+        map (host: {
+          name = host.hostName;
+          value = nix-darwin.lib.darwinSystem {
+            specialArgs = {
+              inherit sops-nix;
+              inherit host;
+              flake = self;
+            };
+            modules = [
+              (import ./darwin.nix)
+              sops-nix.darwinModules.sops
+              home-manager.darwinModules.home-manager
+              {
+                home-manager.sharedModules = [ sops-nix.homeManagerModules.sops ];
+                home-manager.backupFileExtension = "backup";
+                home-manager.useGlobalPkgs = true;
+                home-manager.useUserPackages = true;
+                home-manager.users.${host.username} = import ./home/home.nix { inherit host; };
+              }
+            ];
+          };
+        }) hosts
+      );
     };
 }

home.nix

@@ -1,113 +0,0 @@
-{ config, pkgs, ... }:
-
-{
-  # https://nix-community.github.io/home-manager
-  home.stateVersion = "24.11"; # Please read the comment before changing.
-  programs.home-manager.enable = true;
-
-  home.username = "niccoloborgioli";
-  home.homeDirectory = "/Users/niccoloborgioli";
-
-  home.packages = [
-    pkgs.tmux
-    pkgs.oh-my-posh
-    pkgs.git
-    pkgs.git-lfs
-    pkgs.git-crypt
-    pkgs.gnutar
-    pkgs.gnupg
-    pkgs.htop
-    pkgs.rclone
-    pkgs.rename
-    pkgs.tmux
-    pkgs.tree
-    pkgs.wget
-    pkgs.woff2
-    pkgs.bat
-    pkgs.rsync
-    pkgs.direnv
-    pkgs.zoxide
-
-    # Editor
-    pkgs.neovim
-    pkgs.fzf
-    pkgs.lazygit
-    pkgs.lua
-    pkgs.luajitPackages.luarocks
-    pkgs.ast-grep
-    pkgs.ripgrep
-
-    # Language specific
-    pkgs.nixfmt-rfc-style
-    pkgs.fnm
-
-    # sflx
-    pkgs.vault
-
-    (pkgs.nerdfonts.override { fonts = [ "JetBrainsMono" ]; })
-  ];
-
-  home.sessionVariables = {
-    EDITOR = "nvim";
-  };
-
-  home.file = {
-    ".config/omp/config.yaml".source = ./files/omp/config.yaml;
-    ".config/kitty".source = ./files/kitty;
-    ".gitconfig".source = ./files/git/gitconfig;
-    ".gitignore_global".source = ./files/git/gitignore_global;
-    ".config/nvim".source = ./files/nvim;
-  };
-
-  home.shellAliases = {
-    l = "ls -hal";
-    dc = "docker compose";
-    rsync = "rsync -az --info=progress2";
-    t = "tmux new-session -A -s main";
-    e = "nvim";
-    hms = "home-manager switch --flake ~/nix#root -b backup";
-    snd = "darwin-rebuild switch --flake ~/.config/nix-darwin#sflx";
-  };
-
-  programs.fish = {
-    enable = true;
-    interactiveShellInit = ''
-      if type -q oh-my-posh
-        oh-my-posh init fish --config ~/.config/omp/config.yaml | source
-      end
-      if type -q fnm
-        fnm env --use-on-cd | source
-      end
-      if type -q direnv
-        direnv hook fish | source
-      end
-      if type -q zoxide
-        zoxide init fish | source
-      end
-    '';
-  };
-  programs.bash = {
-    enable = true;
-  };
-  programs.tmux = {
-    enable = true;
-    clock24 = true;
-    mouse = true;
-    extraConfig = ''
-      # switch panes using Alt-arrow without prefix
-      bind -n M-Left select-pane -L
-      bind -n M-Right select-pane -R
-      bind -n M-Up select-pane -U
-      bind -n M-Down select-pane -D
-
-      # switch panes using jkhl
-      bind h select-pane -L
-      bind l select-pane -R
-      bind j select-pane -U
-      bind k select-pane -D
-    '';
-    shell = "${pkgs.fish}/bin/fish";
-    terminal = "tmux-256color";
-  };
-
-}

home/home.nix

@@ -0,0 +1,97 @@
+{ host }:
+{
+  pkgs,
+  lib,
+  config,
+  sops-nix,
+  ...
+}:
+{
+  # https://nix-community.github.io/home-manager
+  home.stateVersion = "25.05";
+  programs.home-manager.enable = true;
+
+  home.username = host.username;
+  home.homeDirectory = "/Users/${host.username}";
+
+  home.packages =
+    (import ./pkgs.nix { inherit pkgs; })
+    ++ ((lib.attrByPath [ "extras" "pkgs" ] (pkgs: [ ]) host) pkgs);
+
+  fonts.fontconfig.enable = true;
+
+  home = {
+    sessionVariables = {
+      EDITOR = "nvim";
+    };
+
+    file = {
+      ".config/omp/config.yaml".source = ../files/omp/config.yaml;
+      ".config/ghostty/config".source = ../files/ghostty/config;
+      ".gitconfig".source = ../files/git/gitconfig;
+      ".gitignore_global".source = ../files/git/gitignore_global;
+      ".gitconfig.local".source = ../files/git/config.work;
+      ".config/nvim".source = ../files/nvim;
+    };
+
+    shellAliases = {
+      l = "ls -hal";
+      dc = "docker compose";
+      rsync = "rsync -az --info=progress2";
+      t = "tmux new-session -A -s main";
+      e = "nvim";
+      vai = "darwin-rebuild switch --flake ~/.config/nix-darwin#${host.hostName}";
+    };
+  };
+
+  programs = {
+    direnv.enable = true;
+    zoxide.enable = true;
+
+    fish = {
+      enable = true;
+      interactiveShellInit = ''
+        if type -q oh-my-posh
+          oh-my-posh init fish --config ~/.config/omp/config.yaml | source
+        end
+        if type -q fnm
+          fnm env --use-on-cd | source
+        end
+      '';
+    };
+    bash = {
+      enable = true;
+    };
+    tmux = {
+      enable = true;
+      clock24 = true;
+      mouse = true;
+      extraConfig = ''
+        # switch panes using Alt-arrow without prefix
+        bind -n M-Left select-pane -L
+        bind -n M-Right select-pane -R
+        bind -n M-Up select-pane -U
+        bind -n M-Down select-pane -D
+
+        # switch panes using jkhl
+        bind h select-pane -L
+        bind l select-pane -R
+        bind j select-pane -U
+        bind k select-pane -D
+      '';
+      shell = "${pkgs.fish}/bin/fish";
+      terminal = "tmux-256color";
+    };
+  };
+
+  # Secrets
+  sops = {
+    age.keyFile = "${config.home.homeDirectory}/.config/sops/age/keys.txt";
+    defaultSopsFile = ../secrets/ssh.yaml;
+    secrets.config = {
+      mode = "0600";
+      path = "${config.home.homeDirectory}/.ssh/config";
+    };
+  };
+
+}

home/pkgs.nix

@@ -0,0 +1,57 @@
+{ pkgs }:
+with pkgs;
+[
+  # Base
+  tmux
+  oh-my-posh
+  git
+  git-lfs
+  git-crypt
+  bfg-repo-cleaner
+  gnutar
+  gnupg
+  htop
+  btop
+  rclone
+  rename
+  tmux
+  tree
+  wget
+  woff2
+  bat
+  rsync
+  sops
+  #bitwarden-cli
+
+  # Dev
+  devenv
+  nixpacks
+  ollama
+  colima
+  lazydocker
+
+  # Editor
+  neovim
+  fzf
+  lazygit
+  lua
+  luajitPackages.luarocks
+  ast-grep
+  ripgrep
+
+  # Language specific
+  nixfmt-rfc-style
+  fnm
+  bun
+  deno
+  zig
+  uv
+  ruff
+  tectonic
+  tex-fmt
+  rustup
+  shfmt
+
+  # Fonts
+  nerd-fonts.jetbrains-mono
+]

hosts/default.nix

@@ -0,0 +1,4 @@
+[
+  (import ./mac14.nix)
+  (import ./mac16.nix)
+]

hosts/mac14.nix

@@ -0,0 +1,5 @@
+{
+  username = "cupcakearmy";
+  hostName = "mac14";
+  platform = "aarch64-darwin";
+}

hosts/mac16.nix

@@ -0,0 +1,21 @@
+{
+  username = "niccoloborgioli";
+  hostName = "mac16";
+  platform = "aarch64-darwin";
+
+  extras = {
+    casks = [
+      "phpstorm"
+      "datagrip"
+      "tailscale"
+    ];
+    pkgs =
+      pkgs: with pkgs; [
+        vault
+        cocoapods
+        phrase-cli
+        boundary
+        awscli2
+      ];
+  };
+}

secrets/rclone.yaml

@@ -0,0 +1,21 @@
+config: ENC[AES256_GCM,data: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,iv:tku1FKoT+483p4f/0ETC/k7YTVpBLEZvZwTBYIByiuE=,tag:vcZTgJnryU+4Q70tYqjpbA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1fwwfdh3np846pcwlsre2d8py3a8z5gfltx3jcyghdfx9esn6a40sm60mdj
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFTVJuQlA1aXFzeGI5SFZZ
+            c09USmpJeTRVWG5VR3AxWXVPNWxnMEtmbGljCmFFTTBNaUd5WUQ4aHhyQ29STHhj
+            eTBtTGhKWXpLWGlURFlrcll4cTRYUVUKLS0tIGFtOGZ3dU5HQ1UyY0NKUnVDaDNP
+            a0RONm94bWQ5ZXdEUmxRTHJsREJjQk0Kdiuyrb7pcah6HVMQpStFhG4+JUWuLA7F
+            WD6deMpuxiuLooQhcVVKPrK8jmbCGFvmEoDlRFegaTjofYsBUAnhfg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-02-14T15:41:40Z"
+    mac: ENC[AES256_GCM,data:PJX1Sce3MAd/vwQguJKPTjoJb6gRzNjPErEBS3iIY155P3NxdReWwEHHBlOtObYwJlv1DlwalyZkegJVysYC7kueDHO0tCxLfa6uIbxDrJ2hIkEJZ36m0txWSDIx12UaDAPkeQKMH73JogwCnS2AvpyyclKyYqEOhJy0ENQLpTY=,iv:Fcnt+HtwEPbKDCclzOXxtGjtTxlBcXZVGmRQC1kqtZM=,tag:WNifjYJks6bMit1MQxmcOA==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.4

secrets/ssh.yaml

@@ -0,0 +1,21 @@
+config: ENC[AES256_GCM,data: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,iv:8BiTj23eULj7Rjw+iWbJ0QR80Xss9xDSla3hSz/9E6M=,tag:OdJIcXwA9P65o2H4Ii6UcQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1fwwfdh3np846pcwlsre2d8py3a8z5gfltx3jcyghdfx9esn6a40sm60mdj
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOQng5V1YwTDdWbVBocStY
+            NXo5OFBBU1krbzFkNU52MDhJR2lkUGcwbndNCkpYMlRQU3NTVWJYN2lPWXhieUtw
+            R2R2OXV1N1dEQnN5QzgvUjdxR1doV2sKLS0tIFRuTUNYOFZ5YWNlWjR6MmxneTBy
+            dnowaVoyc0FhTEJLQmJYM1VQTDlKZ0EKBnlbVqp+D6C8Avs39SQr3ESNRCvQKcMO
+            MFz3pV9ENOaTrY10xuA8J0easXwyqCc3EgMPYp86FQXENpt+9m3efw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-01-29T11:05:11Z"
+    mac: ENC[AES256_GCM,data:HYsosS2tyBvU1rQp3xH48YTY2lmA+115ls4ZhxmAm43yjfqvFtHKVQSDIYEeWGANX58GnN3wOj9ANVC6BZX3v4DUoD9VAXqfPc1S8Sb1C7rc1W5vT1V4Qjz5VsSX+jpjzj8dbROxJ+h5kd6II1gpl47ZtMaWynsAd5N6v9lU5s8=,iv:22lMFqrDZ7ctPjbHV/0HWSW1AfGoIn1KcwjcpCnDMno=,tag:hF/361akPsRSoXWFMQQZXQ==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.3

test.nix

@@ -0,0 +1,11 @@
+let
+  hosts = import ./hosts;
+  inherit (builtins) listToAttrs;
+  result = listToAttrs (
+    map (item: {
+      name = item.hostName;
+      value = item;
+    }) hosts
+  );
+in
+result