Wimpy's NixOS, nix-darwin & Home Manager Configurations

https://github.com/wimpysworld/nix-config
Admin
A comprehensive Nix Flake managing NixOS, macOS (nix-darwin), and Home Manager configurations across...
Tokens:184,842
Snippets:2,164
Trust Score:9.5
Update:5 months ago
Show doc for...
Tokens:
Raw
### ProjectX Quick Start Example

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/agentic/assistants/agents/velma/prompt.md

Demonstrates a quick start installation and validation command for ProjectX.

```bash
npm install -g projectx
projectx validate ./openapi.yaml
```

--------------------------------

### Example Good README Opening with Quick Start

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/agentic/assistants/agents/velma/commands/create-readme/prompt.md

Demonstrates an effective README opening that includes a concise project description and a clear, actionable quick start command. This format helps users understand the project's purpose and get started quickly.

```bash
# ProjectX

Validate API responses against OpenAPI schemas in CI. Catch breaking changes 
before they reach production.

```bash
npm install -g projectx
projectx validate ./openapi.yaml ./api-responses/
```
```

--------------------------------

### Run NixOS Installer Example

Source: https://github.com/wimpysworld/nix-config/blob/main/nixos/_mixins/scripts/install-system/README.md

This sequence demonstrates the typical workflow for installing a NixOS system using the provided scripts. It involves injecting tokens, SSHing into the host, and initiating the installation.

```bash
# 1. Inject tokens to the ISO host
just inject-tokens 192.168.1.42

# 2. SSH into the ISO host
ssh nixos@192.168.1.42

# 3. Run the installer
install-system skrye
```

--------------------------------

### Zed Debugging Configuration Example

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/development/zed-editor/ZED.md

This example shows how to configure debugging profiles in `.zed/debug.json` for various languages. It covers built-in configurations and custom setups.

```json
{
  "configurations": [
    {
      "name": "Launch Python",
      "type": "python",
      "request": "launch",
      "program": "${file}",
      "console": "integratedTerminal"
    }
  ]
}
```

--------------------------------

### Example Per-Task Output

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/agentic/assistants/agents/donatello/commands/implement-code/prompt.md

An example demonstrating the completed per-task output format, showing how to fill in details for a specific task.

```markdown
## Task 1.2 — Implement token generation service

**Reuse:** `src/utils/crypto.ts` - used existing `generateSecret()` for token signing

**Changes:**
| File | Change |
|------|--------|
| `src/services/auth/token.ts` | Created with sign/verify/refresh using existing crypto utils |
| `src/services/auth/token.test.ts` | Unit tests for all three functions |

**Verification:**
| Success Criterion | Result |
|--------------------|--------|
| Unit tests pass for sign/verify/refresh | ✅ Pass |

**Flags addressed:** 🔍 Token expiry set to 24h based on pattern in session.ts
```

--------------------------------

### Enable and Start GoToSocial Backup systemd Timer

Source: https://github.com/wimpysworld/nix-config/blob/main/nixos/_mixins/server/gotosocial/README.md

Commands to reload systemd, enable the timer to run at boot, and start the timer immediately.

```bash
# Reload systemd to recognize new units
sudo systemctl daemon-reload

# Enable timer to run at boot
sudo systemctl enable gotosocial-backup.timer

# Start the timer
sudo systemctl start gotosocial-backup.timer
```

--------------------------------

### Example Falcon Sensor Check Output

Source: https://github.com/wimpysworld/nix-config/blob/main/nixos/_mixins/policy/NixOS-Falcon-Sensor.md

An example of the output from `sudo falcon-sensor-check`, indicating a healthy installation with PASS, INFO, or WARN statuses for various components.

```text
Service:    PASS  active (running)
CID:       PASS  configured
AID:        PASS  assigned
Backend:   PASS  bpf
RFM:        PASS  false
Log File:   INFO  /var/log/falconctl.log -> /dev/stdout (captured by journald)
```

--------------------------------

### Run install-system

Source: https://github.com/wimpysworld/nix-config/blob/main/nixos/_mixins/scripts/install-system/README.md

Initiates the NixOS installation process. Specify the hostname, and optionally the username and Git branch for the configuration.

```bash
install-system <hostname> [username] [branch]
```

--------------------------------

### Inference/VRAM-Tier Configuration (Flat Pattern)

Source: https://github.com/wimpysworld/nix-config/blob/main/lib/noughty/README.md

An example demonstrating conditional package installation based on host GPU capabilities (acceleration type and VRAM) and a general 'inference' tag. It overrides a package based on detected acceleration.

```nix
{ config, lib, noughtyLib, pkgs, ... }:
let
  inherit (config.noughty) host;
  vram = host.gpu.compute.vram;
  accel = host.gpu.compute.acceleration;
  llamaPackage =
    if accel == "cuda" then pkgs.llama-cpp.override { cudaSupport = true; }
    else if accel == "rocm" then pkgs.llama-cpp.override { rocmSupport = true; }
    else pkgs.llama-cpp;
in
lib.mkIf (noughtyLib.hostHasTag "inference") {
  environment.systemPackages = [ llamaPackage ];
}
```

--------------------------------

### Install Semgrep CLI

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/agentic/assistants/skills/semgrep/SKILL.md

Install Semgrep using pip, Homebrew, or Docker. Pip is the recommended method.

```bash
python3 -m pip install semgrep
```

```bash
brew install semgrep
```

```bash
docker run --rm -v "${PWD}:/src" semgrep/semgrep semgrep --config auto /src
```

--------------------------------

### Shared Collection Vector DB Example

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/agentic/assistants/skills/llm-security/references/vector-embedding.md

Demonstrates a basic setup for a vector database where documents from all tenants are stored in a single collection. This approach lacks tenant isolation.

```python
vector_db = chromadb.Client()
collection = vector_db.create_collection("documents")

def add_document(tenant_id: str, content: str):
    # Documents from all tenants mixed together
    collection.add(
        documents=[content],
        ids=[str(uuid.uuid4())]
    )
```

--------------------------------

### Inject Age Keys for Installation

Source: https://github.com/wimpysworld/nix-config/blob/main/AGENTS.md

The `inject-tokens` command prepares age keys for system installation by placing them on ISO media. These keys are required for `install-system`.

```bash
just inject-tokens
```

--------------------------------

### Start Falcon Sensor Service

Source: https://github.com/wimpysworld/nix-config/blob/main/nixos/_mixins/policy/NixOS-Falcon-Sensor.md

Manually start the falcon-sensor service after installation or update.

```bash
sudo systemctl start falcon-sensor
```

--------------------------------

### Example Build and Test Commands

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/agentic/assistants/agents/rosey/commands/create-instructions/prompt.md

Illustrates how to list build, test, and lint commands for a project using markdown formatting.

```markdown
## Build and test commands

- Build: `npm run build`
- Run tests: `npm test`
- Run linter: `npm run lint`
```

--------------------------------

### Example Output of `noughty facts`

Source: https://github.com/wimpysworld/nix-config/blob/main/lib/noughty/README.md

The `noughty facts` command displays detailed system attributes and configuration information, including host details, OS, form factor, desktop environment, GPU, compute capabilities, user information, and display setup.

```text
  nøughty facts

  Host         vader
  Kind         computer
  OS           linux (x86_64-linux)
  Form         desktop
  Desktop      hyprland
  GPU          amd, nvidia
  Compute      nvidia (16GB) [cuda]
  Tags         studio, trackball, streamdeck, pci-hdmi-capture, inference

  User         martin
  Tailnet      drongo-gamma.ts.net

  Displays     DP-1, DP-2, DP-3
  Primary      DP-1 (2560x2880)

  Flags        workstation, linux
```

--------------------------------

### Error and Warning Logs from Prior Boot

Source: https://github.com/wimpysworld/nix-config/blob/main/nixos/_mixins/desktop/apps/browsers/strix-halo-video-crash.md

Filter logs from a previous boot (`-b -1`) for errors and warnings to identify recurring issues. This example shows common errors like coredump failures and service start issues, distinct from the GPU hang.

```log
May 04 13:59:21 skrye lact[1780]: ERROR ... could not get current performance level: io error: Device or resource busy (os error 16)
May 04 13:59:26 skrye systemd-coredump[3428498]: Failed to send coredump datagram: Connection reset by peer
May 04 13:59:26 skrye systemd-coredump[3428559]: Failed to send coredump datagram: Broken pipe
May 04 13:59:27 skrye systemd[3794]: maestral-gui.service: Main process exited, code=dumped, status=6/ABRT
May 04 13:59:27 skrye systemd[3794]: cliphist.service: Failed with result 'exit-code'.
May 04 13:59:27 skrye systemd[3794]: avizo.service: Start request repeated too quickly.
May 04 13:59:27 skrye systemd[3794]: waybar.service: Start request repeated too quickly.
```

--------------------------------

### Install NixOS System

Source: https://github.com/wimpysworld/nix-config/blob/main/README.md

Installs the NixOS system on the target host. Requires the IP address of the ISO host and optionally a username. This script handles disk partitioning, NixOS installation, and Home Manager configuration.

```bash
ssh nixos@<ip-address>
install-system <hostname> [username]
```

--------------------------------

### Markdown Documentation Example

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/agentic/assistants/agents/velma/commands/update-docs/prompt.md

Example of updating a README.md file to include rate limit information. This is useful for user-facing documentation of API changes.

```markdown
## Rate Limits

- 100 requests/minute (authenticated)
- 10 requests/minute (anonymous)

Exceeding limits returns `429 Too Many Requests` with `Retry-After` header.
```

--------------------------------

### Good Video Script Opening Example

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/agentic/assistants/agents/casper/commands/draft-video-script/prompt.md

An example of an engaging video script opening that uses a hook and a visual cue to capture viewer attention immediately.

```text
Right, confession time. After years, and I mean *years*, of championing Ubuntu, 
I've gone and done something rather drastic.

> VISUAL: NixOS logo with dramatic zoom

I've switched to NixOS. And before you reach for the pitchforks, hear me out—
this isn't betrayal; it's an evolution.
```

--------------------------------

### Sub-module Gating Example

Source: https://github.com/wimpysworld/nix-config/blob/main/lib/noughty/README.md

Demonstrates how an imported sub-module can gate its own configuration based on specific host properties, such as the desktop environment type.

```nix
# ./hyprland/default.nix
{ config, lib, ... }:
lib.mkIf (config.noughty.host.desktop == "hyprland") {
  # Hyprland-specific config
}
```

--------------------------------

### Deploy NixOS Configuration

Source: https://github.com/wimpysworld/nix-config/blob/main/nixos/_mixins/policy/NixOS-Kolide.md

Build and switch the NixOS configuration, which includes enabling and starting the Kolide launcher service.

```bash
cd ~/Zero/nix-config
just switch
```

--------------------------------

### Semgrep Rule Example: Including Safe Cases

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/agentic/assistants/skills/semgrep/SKILL.md

Shows a 'GOOD' Python example that includes both vulnerable ('ruleid:') and safe ('ok:') cases for comprehensive testing.

```python
# GOOD: Include safe cases
# ruleid: my-rule
dangerous(user_input)

# ok: my-rule
dangerous(sanitize(user_input))
```

--------------------------------

### Export GPG Public Key Example

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/users/martin/README.md

An example of exporting a GPG public key for a specific key ID (`15E06DA3`). The output file is named according to the convention `gpg-pubkey-SHORTID.asc`.

```bash
gpg --export --armor 8F04688C17006782143279DA61DF940515E06DA3 \
  > home-manager/_mixins/users/martin/gpg-pubkey-15E06DA3.asc
```

--------------------------------

### Correct Code Example

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/agentic/assistants/skills/code-security/references/_template.md

Demonstrates the correct coding pattern. Adhering to this pattern is recommended for performance.

```typescript
// Good code example here
const good = example()
```

--------------------------------

### Good Description Example for SKILL.md

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/agentic/assistants/agents/rosey/commands/create-skill/prompt.md

Provides an example of a descriptive field for a skill's `SKILL.md` file. This description is designed to be 'pushy' and includes specific contexts to improve skill triggering by models like Claude.

```markdown
Use when the user mentions dashboards, data visualisation, or wants to display metrics data, even if they don't ask for a 'dashboard' explicitly.

```

--------------------------------

### Home Manager Filtering Example

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/scripts/flake-build/README.md

This command evaluates a specific Home Manager configuration to determine its host system, used for platform filtering.

```bash
nix eval .#homeConfigurations."<name>".pkgs.stdenv.hostPlatform.system
```

--------------------------------

### Encrypt Kolide Secret with sops-nix (First-time setup)

Source: https://github.com/wimpysworld/nix-config/blob/main/nixos/_mixins/policy/NixOS-Kolide.md

Initialize and encrypt the Kolide enrollment secret in secrets/policy.yaml using sops-nix.

```bash
cd ~/Zero/nix-config
sops secrets/policy.yaml
```

```yaml
kolide: <paste-your-enrollment-secret-here>
```

--------------------------------

### Configure Daily Server Media Backups

Source: https://github.com/wimpysworld/nix-config/blob/main/nixos/_mixins/server/borgbackup/README.md

Set up daily backups for server media using `services.borgbackup.jobs.media` with `startAt = "daily"`.

```nix
services.borgbackup.jobs.media with startAt = "daily"
```

--------------------------------

### Configure Hourly Workstation Backups

Source: https://github.com/wimpysworld/nix-config/blob/main/nixos/_mixins/server/borgbackup/README.md

Set up hourly backups for workstations using the `services.borgbackup.jobs.home-hourly` configuration with `startAt = "hourly"`.

```nix
services.borgbackup.jobs.home-hourly with startAt = "hourly"
```

--------------------------------

### Configure Daily Workstation Backups

Source: https://github.com/wimpysworld/nix-config/blob/main/nixos/_mixins/server/borgbackup/README.md

Configure daily backups for workstations by defining `services.borgbackup.jobs.home-daily` and setting `startAt = "daily"`.

```nix
services.borgbackup.jobs.home-daily with startAt = "daily"
```

--------------------------------

### Example Code Implementation Plan

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/agentic/assistants/agents/donatello/commands/create-code-plan/prompt.md

Illustrates a structured plan for implementing authentication features, including task IDs, dependencies, scope, success criteria, complexity, reuse suggestions, and flags for review.

```markdown
## Phase 1: Authentication Foundation

### 1.1 — Add JWT dependency and configuration
- **Dependencies**: None
- **Scope**: `package.json`, `src/config/auth.ts`
- **Success Criteria**: `npm test` passes, config loads from env
- **Complexity**: XS

### 1.2 — Implement token generation service
- **Dependencies**: 1.1
- **Scope**: `src/services/auth/token.ts`, `src/services/auth/token.test.ts`
- **Reuse**: `src/utils/crypto.ts` — existing `generateSecret()` for token signing
- **Success Criteria**: Unit tests pass for sign/verify/refresh
- **Complexity**: S
- **Flags**: 🔍 Review token expiry values

### 1.3 — Add auth middleware
- **Dependencies**: 1.2
- **Scope**: `src/middleware/auth.ts`, `src/middleware/auth.test.ts`
- **Reuse**: `src/middleware/validate.ts` — follow existing middleware pattern and error handling
- **Success Criteria**: Protected routes return 401 without valid token
- **Complexity**: M
- **Flags**: ⚠️ Affects all protected endpoints
```

--------------------------------

### Defold SDK Installation Functions

Source: https://github.com/wimpysworld/nix-config/blob/main/pkgs/defold/README.md

Code snippet showing how various platform SDKs are downloaded. Requires SDKs to be provided via DM_PACKAGES_URL or --package-path.

```python
def install_sdk(self):
    # macOS SDK
    download_sdk(self, '%s/%s.tar.gz' % (self.package_path, sdk.PACKAGES_MACOS_SDK), ...)
    # iOS SDK  
    download_sdk(self, '%s/%s.tar.gz' % (self.package_path, sdk.PACKAGES_IOS_SDK), ...)
    # Windows SDK
    download_sdk(self, '%s/%s.tar.gz' % (self.package_path, sdk.PACKAGES_WIN32_SDK_10), ...)
    # Android NDK
    download_sdk(self, '%s/%s-%s.tar.gz' % (self.package_path, PACKAGES_ANDROID_NDK, host), ...)
    # Emscripten
    download_sdk(self, '%s/%s-%s.tar.gz' % (self.package_path, sdk.PACKAGES_EMSCRIPTEN_SDK, self.host), ...)
```

--------------------------------

### Apply NixOS and Home Manager Configurations

Source: https://github.com/wimpysworld/nix-config/blob/main/README.md

Commands to build and switch NixOS, nix-darwin, and Home Manager configurations using the provided justfile. Use 'just host' for NixOS/nix-darwin, 'just home' for Home Manager, and 'just switch' for both.

```bash
just host
```

```bash
just build-host
```

```bash
just switch-host
```

```bash
just home
```

```bash
just build-home
```

```bash
just switch-home
```

```bash
just build
```

```bash
just switch
```

--------------------------------

### Troubleshoot Kolide Service Start Failures

Source: https://github.com/wimpysworld/nix-config/blob/main/nixos/_mixins/policy/NixOS-Kolide.md

Common checks for diagnosing why the Kolide launcher service fails to start.

```bash
sudo cat /etc/kolide-k2/secret
sudo ls -la /var/lib/private/sops/age/keys.txt
journalctl -u kolide-launcher -e
```

--------------------------------

### Waf Build System Configuration Example

Source: https://github.com/wimpysworld/nix-config/blob/main/pkgs/defold/README.md

Illustrative Python code showing platform-specific flag configuration within the Waf build system. This highlights the complexity of translating Waf rules to Nix.

```python
# From waf_dynamo.py - 1500+ lines

def default_flags(self):
    # Platform-specific compiler flags
    # SDK detection and configuration
    # Framework linking (macOS)
    # Cross-compilation support
    # Address/UB/Thread sanitizer support
```

--------------------------------

### Defold Standard Build Flow

Source: https://github.com/wimpysworld/nix-config/blob/main/pkgs/defold/README.md

Sequence of commands for setting up the Defold environment and building various components.

```bash
./scripts/build.py shell           # Setup DYNAMO_HOME environment
```

```bash
./scripts/build.py install_ext      # Extract all packages/
```

```bash
./scripts/build.py check_sdk        # Verify SDK availability
```

```bash
./scripts/build.py build_engine     # Build engine + run tests
```

```bash
./scripts/build.py build_bob        # Build Bob command-line tool
```

```bash
./scripts/build.py build_builtins   # Build builtin resources
```

```bash
./scripts/build.py build_docs       # Generate API documentation
```

```bash
cd editor && lein init && lein run  # Build and run editor
```

--------------------------------

### Standalone Command Skills Example

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/agentic/codex/README.md

Examples of standalone skills derived from custom commands. These are invoked without an agent prefix.

```text
$ready
$onboard
$orientate
$collaborate
$botsnack
```

--------------------------------

### Codex Binary Relocation Example

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/agentic/codex/BLOG.md

Illustrates how to copy the Codex binary to stable user-owned paths outside the Nix store during Home Manager activation. This avoids issues with immutable Nix paths and sandbox re-execution.

```text
~/.local/share/codex/bin/codex
~/.codex/bin/codex
${XDG_CONFIG_HOME}/codex/bin/codex
```

--------------------------------

### Start Hermes Agent Dashboard Service

Source: https://github.com/wimpysworld/nix-config/blob/main/nixos/_mixins/server/hermes/README.md

Starts the Hermes dashboard as a separate systemd service. Binds to localhost on port 9119.

```nix
systemd.services.hermes-agent-dashboard.serviceConfig.ExecStart =
  "hermes dashboard --host 127.0.0.1 --port 9119 --no-open";
```

--------------------------------

### Enrolling a New GPG Key - Add Public Key to Nix Config

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/users/martin/README.md

Step 5 in enrolling a new GPG key: add the public key configuration to `home-manager/_mixins/users/martin/default.nix`. Ensure `SHORTID` matches the exported public key file.

```nix
{
  source = ./gpg-pubkey-SHORTID.asc;
  trust = "full";  # or "ultimate" for own primary key
}
```

--------------------------------

### Semgrep Rule Example: Too Broad Pattern

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/agentic/assistants/skills/semgrep/SKILL.md

Illustrates a 'BAD' example of a Semgrep pattern that is too broad. Avoid matching any function call; be more specific.

```yaml
# BAD: Matches any function call
pattern: $FUNC(...)
```

--------------------------------

### Nix Module Gating with lib.mkIf

Source: https://github.com/wimpysworld/nix-config/blob/main/AGENTS.md

Demonstrates the flat pattern for module gating, where `lib.mkIf` is used as the entire module body. This is suitable for approximately 95% of modules.

```nix
{ config, noughtyLib, lib, ... }:
let
  inherit (config.noughty) host;
in
lib.mkIf host.is.workstation {
  # host.name, host.desktop, host.is.laptop, host.gpu.hasNvidia, etc.
}
```

--------------------------------

### Bad Video Script Opening Example

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/agentic/assistants/agents/casper/commands/draft-video-script/prompt.md

An example of an ineffective video script opening that is too generic and focuses on meta-commentary rather than engaging the viewer.

```text
Hello and welcome to this video about NixOS. Today I'm going to talk about 
why I switched from Ubuntu to NixOS. Before we get started, make sure to 
like and subscribe...
```

--------------------------------

### Verify LSP Plugin Loading

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/agentic/claude-code/LSP.md

After running `home-manager switch`, verify that the LSP plugin has loaded correctly by checking the generated `.lsp.json` file. This command lists the keys (registered language servers) in the JSON output.

```bash
cat ~/.claude/plugins/nix-lsp/.lsp.json | jq 'keys'
```

--------------------------------

### Agent Command Skills Example

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/agentic/codex/README.md

Examples of generated skills for agent commands, prefixed with the agent name. These skills are used to invoke specific agent functionalities.

```text
$garfield-create-conventional-commit
$donatello-implement-code
$penfold-deep-research
```

--------------------------------

### Test Heynote build and run

Source: https://github.com/wimpysworld/nix-config/blob/main/pkgs/heynote/README.md

Command to build the Heynote package and then run the resulting binary.

```bash
just build-pkg heynote && ./result/bin/heynote
```

--------------------------------

### TypeScript Inline Comment Example

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/agentic/assistants/agents/velma/commands/update-docs/prompt.md

Example of an inline comment in TypeScript explaining the implementation detail of a rate limiting middleware. This is useful for documenting complex logic.

```typescript
// Sliding window, not fixed—prevents request bunching at boundaries
```

--------------------------------

### Example Bad README Opening

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/agentic/assistants/agents/velma/commands/create-readme/prompt.md

Illustrates a verbose and less effective opening for a README file. Avoid lengthy introductions and focus on immediate value.

```markdown
# ProjectX

Welcome to ProjectX! This project was created to help developers with their 
API validation needs. In this README you will find instructions...
```

--------------------------------

### Linux Install Phase Wrapper Script

Source: https://github.com/wimpysworld/nix-config/blob/main/pkgs/heynote/README.md

Creates a `makeWrapper` script for the Linux build. It points to the Electron binary, adds the application's asar path, and includes Wayland/Ozone flags for Wayland display environments.

```bash
makeWrapper ${lib.getExe electron} $out/bin/heynote \
  --add-flags $out/opt/heynote/resources/app.asar \
  --add-flags "'${NIXOS_OZONE_WL:+\'${WAYLAND_DISPLAY:+--ozone-platform-hint=auto ...}}"
```

--------------------------------

### Build Heynote Package

Source: https://github.com/wimpysworld/nix-config/blob/main/pkgs/heynote/README.md

Use the `justfile` for recommended package building or `nix build` for direct Nix builds. Specify a target host for cross-compilation.

```bash
# Via justfile (recommended)
just build-pkg heynote

# Via nix build
nix build .#heynote

# Build for a specific host
just build-pkg heynote skrye
```

--------------------------------

### Systemd Accounting Log Example

Source: https://github.com/wimpysworld/nix-config/blob/main/nixos/_mixins/desktop/apps/browsers/strix-halo-video-crash.md

Example of a systemd accounting log line showing CPU time and memory peak consumed by a scope. This is captured during system shutdown.

```log
May 04 13:59:25 skrye systemd[3794]: app-org.chromium.Chromium-25285.scope: Consumed 10min 33.356s CPU time, 65.7M memory peak.
```

--------------------------------

### Build and Switch NixOS Configuration

Source: https://github.com/wimpysworld/nix-config/blob/main/nixos/_mixins/policy/README.md

Use these commands to build and switch your NixOS configuration after setting up secrets and bootstrapping binaries.

```bash
sudo nixos-rebuild build --flake .

```

```bash
sudo nixos-rebuild switch --flake .

```

--------------------------------

### Example Anthropic Quota Status Line

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/agentic/pi/README.md

An example of the status line when Anthropic provides both 5h and weekly quota windows. It shows remaining quota percentages for each window.

```text
anthropic/claude-opus-4-7 · high · ~/path/project · 5h 93% · weekly 96% · 1.0M window · Context 3.1% used
```

--------------------------------

### Semgrep Rule Example: Missing Safe Cases

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/agentic/assistants/skills/semgrep/SKILL.md

Shows a 'BAD' Python example where only the vulnerable case is tested. Always include 'ok:' annotations for safe cases.

```python
# BAD: Only tests vulnerable case
# ruleid: my-rule
dangerous(user_input)
```

--------------------------------

### Home Manager Activation with Backup

Source: https://github.com/wimpysworld/nix-config/blob/main/AGENTS.md

Troubleshoot Home Manager activation failures by creating a backup before switching. This command helps resolve file conflicts.

```bash
home-manager switch -b backup --flake .
```

--------------------------------

### Semgrep Rule Example: Specific Dangerous Function

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/agentic/assistants/skills/semgrep/SKILL.md

Illustrates a 'GOOD' example of a Semgrep pattern that targets a specific dangerous function, avoiding overly broad matches.

```yaml
# GOOD: Specific dangerous function
pattern: eval(...)
```

--------------------------------

### Bad Description Example for SKILL.md

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/agentic/assistants/agents/rosey/commands/create-skill/prompt.md

Illustrates a less effective description for a skill's `SKILL.md` file. This example is too narrow and may lead to the skill being undertriggered by the language model.

```markdown
How to build a simple dashboard.

```

--------------------------------

### Build and Switch Nix Configuration

Source: https://github.com/wimpysworld/nix-config/blob/main/nixos/_mixins/network/tailscale/README.md

Use this command to build your NixOS configuration and apply the changes. Ensure Tailscale is correctly configured before running.

```bash
just switch
```

--------------------------------

### SKILL.md Structure Example

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/agentic/assistants/agents/rosey/commands/create-skill/prompt.md

This is the basic structure for a `SKILL.md` file, including frontmatter for metadata and the main instruction body. Ensure the `name` in the frontmatter matches the skill's directory name.

```markdown
---
name: <skill-name>
description: <when to use this skill>
---

<instructions>

```

--------------------------------

### Avoid C gets Buffer Overflow

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/agentic/assistants/skills/code-security/references/unsafe-functions.md

The gets function is highly dangerous as it does not perform any bounds checking and is prone to buffer overflows. Always use fgets or gets_s instead.

```c
int bad_code() {
    char str[DST_BUFFER_SIZE];
    // ruleid:insecure-use-gets-fn
    gets(str);
    printf("%s", str);
    return 0;
}
```

```c
int main() {
    char str[DST_BUFFER_SIZE];
    // ok:insecure-use-gets-fn
    fgets(str);
    printf("%s", str);
    return 0;
}
```

--------------------------------

### Example LSP Configuration JSON

Source: https://github.com/wimpysworld/nix-config/blob/main/home-manager/_mixins/agentic/claude-code/LSP.md

This JSON object defines the configuration for multiple language servers. It maps language identifiers to their respective commands, arguments, and file extension mappings. Nix store paths are omitted for brevity.

```json
{
  "bash": {
    "args": ["start"],
    "command": "bash-language-server",
    "extensionToLanguage": { ".bash": "shellscript", ".sh": "shellscript", ".zsh": "shellscript" }
  },
  "cpp": {
    "command": "clangd",
    "extensionToLanguage": { ".c": "c", ".cc": "cpp", ".cpp": "cpp", ".cxx": "cpp", ".h": "c", ".hpp": "cpp" }
  },
  "css": {
    "args": ["--stdio"],
    "command": "vscode-css-language-server",
    "extensionToLanguage": { ".css": "css", ".less": "less", ".scss": "scss" }
  },
  "dart": {
    "args": ["language-server"],
    "command": "dart",
    "extensionToLanguage": { ".dart": "dart" }
  },
  "go": {
    "command": "gopls",
    "extensionToLanguage": { ".go": "go" }
  },
  "html": {
    "args": ["--stdio"],
    "command": "vscode-html-language-server",
    "extensionToLanguage": { ".html": "html" }
  },
  "json": {
    "args": ["--stdio"],
    "command": "vscode-json-language-server",
    "extensionToLanguage": { ".json": "json", ".jsonc": "jsonc" }
  },
  "lua": {
    "command": "lua-language-server",
    "extensionToLanguage": { ".lua": "lua" }
  },
  "nix": {
    "command": "nixd",
    "extensionToLanguage": { ".nix": "nix" }
  },
  "python": {
    "args": ["--stdio"],
    "command": "basedpyright-langserver",
    "extensionToLanguage": { ".py": "python", ".pyi": "python", ".pyw": "python" }
  },
  "rust": {
    "command": "rust-analyzer",
    "extensionToLanguage": { ".rs": "rust" }
  },
  "svelte": {
    "args": ["--stdio"],
    "command": "svelteserver",
    "extensionToLanguage": { ".svelte": "svelte" }
  },
  "typescript": {
    "args": ["--stdio"],
    "command": "typescript-language-server",
    "extensionToLanguage": { ".cjs": "javascript", ".cts": "typescript", ".js": "javascript", ".jsx": "javascriptreact", ".mjs": "javascript", ".mts": "typescript", ".ts": "typescript", ".tsx": "typescriptreact" }
  },
  "yaml": {
    "args": ["--stdio"],
    "command": "yaml-language-server",
    "extensionToLanguage": { ".yaml": "yaml", ".yml": "yaml" }
  }
}
```

--------------------------------

### Install Specific CrowdStrike Falcon Sensor Version

Source: https://github.com/wimpysworld/nix-config/blob/main/nixos/_mixins/policy/NixOS-Falcon-Sensor.md

Installs a specific version of the CrowdStrike Falcon sensor by providing the version number. Requires `GH_TOKEN` or `GITHUB_TOKEN` for `gh` CLI authentication.

```bash
sudo --preserve-env=GH_TOKEN falcon-sensor-install --version 7.29.0-18202
```
Tokens:
Raw