imported system/home-manager config

49 files changed, 3013 insertions, 0 deletions

diff --git a/home-manager/browser/default.nix b/home-manager/browser/default.nix
new file mode 100644
index 0000000..ab8278a
--- /dev/null
+++ b/home-manager/browser/default.nix
@@ -0,0 +1,75 @@
+{ config, pkgs, inputs, ... }:
+{
+ imports = [
+    inputs.zen-browser.homeModules.beta
+  ];
+
+  programs.zen-browser = {
+    enable = true;
+
+    nativeMessagingHosts = [pkgs.firefoxpwa];
+    policies = {
+      # find more options here: https://mozilla.github.io/policy-templates/
+      AutofillAddressEnabled = false;
+      AutofillCreditCardEnabled = false;
+
+      Cookies = {
+        Locked = true;
+        Behavior = "reject-foreign";
+        BehaviorPrivateBrowsing = "reject";
+      };
+
+      DisablePocket = true;
+      DisableAppUpdate = true;
+      DisableFirefoxStudies = true;
+      DisableFirefoxAccounts = true;
+      DisableFeedbackCommands = true;
+      DisableTelemetry = true;
+
+      DontCheckDefaultBrowser = true;
+
+      DownloadDirectory = "${config.home.homeDirectory}/downloads";
+
+      EnableTrackingProtection = {
+        Value = true;
+        Locked = true;
+        Cryptomining = true;
+        Fingerprinting = true;
+      };
+
+      HardwareAcceleration = true;
+      
+      HttpsOnlyMode = "force_enabled";
+
+      NoDefaultBookmarks = true;
+
+      OfferToSaveLogins = false;
+
+      PasswordManagerEnabled = false;
+      
+      PopupBlocking = {
+        Default = false;
+        Locked = true;
+      };
+
+      PostQuantumKeyAgreementEnabled = false;
+
+      SanitizeOnShutdown = {
+        Cache = true;
+        Cookies = false;
+        FormData = true;
+        History = false;
+        Sessions = false;
+        SiteSettings = true;
+      };
+
+      SearchEngines = {
+        Default = "Startpage";
+        Remove = [
+          "Google"
+          "Bing"
+        ];
+      };
+    };
+  };
+}
diff --git a/home-manager/default.nix b/home-manager/default.nix
new file mode 100644
index 0000000..78d085f
--- /dev/null
+++ b/home-manager/default.nix
@@ -0,0 +1,61 @@
+{ pkgs, system, inputs, ...}:
+{
+  imports = [
+    ./browser
+    ./dotfiles
+    ./git
+    ./gnupg
+    ./gtk
+    ./kanshi
+    ./ssh-agent
+    # ./waybar
+    ./xdg
+    ./zsh
+  ];
+  
+  home = {
+    username = "aethrvmn";
+    homeDirectory = "/home/aethrvmn";
+
+    # DO NOT TOUCH THIS
+    stateVersion = "24.11";
+  
+    packages = with pkgs; [
+      bat
+      bemenu
+      btop
+      chayang
+      electrum
+      eza
+      faircamp
+      fastfetch
+      featherpad
+      feishin
+      ghostty
+      gitui
+      grim
+      hugo
+      imv
+      j4-dmenu-desktop
+      mako
+      marksman
+      monero-gui
+      mpv
+      pavucontrol
+      slurp
+      swappy
+      wbg
+      wlr-randr
+
+      inputs.waybar.packages."${system}".default
+    ];
+
+    pointerCursor = {
+      gtk.enable = true;
+      x11.enable = true;
+      name = "Qogir";
+      package = pkgs.qogir-icon-theme;
+      size = 24;
+    };
+  };
+}
diff --git a/home-manager/dotfiles/default.nix b/home-manager/dotfiles/default.nix
new file mode 100644
index 0000000..875c110
--- /dev/null
+++ b/home-manager/dotfiles/default.nix
@@ -0,0 +1,32 @@
+{ config, pkgs, ... }:
+	let
+		ghosttyPath = "${config.home.homeDirectory}/.nix/dotfiles/ghostty";
+		helixPath = "${config.home.homeDirectory}/.nix/dotfiles/helix";
+		labwcPath = "${config.home.homeDirectory}/.nix/dotfiles/labwc";
+		makoPath = "${config.home.homeDirectory}/.nix/dotfiles/mako";
+		swappyPath = "${config.home.homeDirectory}/.nix/dotfiles/swappy";
+		waybarPath = "${config.home.homeDirectory}/.nix/dotfiles/waybar";
+
+		# theming
+		themesPath = "${config.home.homeDirectory}/.nix/dotfiles/themes";
+		fontPath = "${config.home.homeDirectory}/.nix/dotfiles/fonts";
+	in {
+		xdg = {
+			configFile = {
+				# configFile points to ~/.config
+				"ghostty".source = config.lib.file.mkOutOfStoreSymlink ghosttyPath;
+				"helix".source = config.lib.file.mkOutOfStoreSymlink helixPath;
+				"labwc".source = config.lib.file.mkOutOfStoreSymlink labwcPath;
+				"mako".source = config.lib.file.mkOutOfStoreSymlink makoPath;
+				"swappy".source = config.lib.file.mkOutOfStoreSymlink swappyPath;
+				"waybar".source = config.lib.file.mkOutOfStoreSymlink waybarPath;
+			};
+
+			dataFile = {
+				# dataFile points to ~/.local/share
+				"themes".source = config.lib.file.mkOutOfStoreSymlink themesPath;
+				"fonts".source = config.lib.file.mkOutOfStoreSymlink fontPath;
+			};
+		};
+	}
+	
diff --git a/home-manager/git/default.nix b/home-manager/git/default.nix
new file mode 100644
index 0000000..dac2b35
--- /dev/null
+++ b/home-manager/git/default.nix
@@ -0,0 +1,15 @@
+{ config, pkgs, ... }:
+
+{
+  programs.git = {
+    enable = true;
+
+    userName = "aethrvmn";
+    userEmail = "me@aethrvmn.gr";
+
+    signing = {
+      key = "2DEC 190B 26C6 188E 5951  66AA 0F0C D756 AA91 0DB6";
+      signByDefault = true;
+    };
+  };
+}
diff --git a/home-manager/gnupg/default.nix b/home-manager/gnupg/default.nix
new file mode 100644
index 0000000..c415bca
--- /dev/null
+++ b/home-manager/gnupg/default.nix
@@ -0,0 +1,9 @@
+{
+  programs.gpg = {
+    enable = true;
+
+    settings = {
+      default-key = "2DEC 190B 26C6 188E 5951  66AA 0F0C D756 AA91 0DB6";
+    };
+  };
+}
diff --git a/home-manager/gtk/default.nix b/home-manager/gtk/default.nix
new file mode 100644
index 0000000..fceae3f
--- /dev/null
+++ b/home-manager/gtk/default.nix
@@ -0,0 +1,33 @@
+{ config, pkgs, ... }:
+{
+  dconf = {
+    enable = true;
+    settings = {
+      "org/gnome/desktop/interface" = {
+        color-scheme = "prefer-dark";
+      };
+    };
+  };
+
+  gtk = {
+    enable = true;
+
+    theme = {
+      name = "Qogir";
+      package = pkgs.qogir-theme;
+    };
+
+    iconTheme = {
+      name = "Qogir";
+      package = pkgs.qogir-icon-theme;
+    };
+
+    gtk3.extraConfig = {
+      gtk-application-prefer-dark-theme = 1;
+    };
+
+    gtk4.extraConfig = {
+      gtk-application-prefer-dark-theme = 1;
+    };
+  };
+}
diff --git a/home-manager/kanshi/default.nix b/home-manager/kanshi/default.nix
new file mode 100644
index 0000000..a6ffb0d
--- /dev/null
+++ b/home-manager/kanshi/default.nix
@@ -0,0 +1,6 @@
+{
+  services.kanshi = {
+    enable = true;
+  };
+}
+
diff --git a/home-manager/ssh-agent/default.nix b/home-manager/ssh-agent/default.nix
new file mode 100644
index 0000000..ae22c8f
--- /dev/null
+++ b/home-manager/ssh-agent/default.nix
@@ -0,0 +1,34 @@
+{
+	programs.ssh = {
+		enable = true;
+		addKeysToAgent = "yes";
+
+		extraConfig = ''
+			IdentitiesOnly yes
+		'';
+		
+		matchBlocks = {
+			"aethrvmn.gr" = {
+				hostname = "aethrvmn.gr";
+				identityFile = "~/.ssh/connections";
+			};
+
+			"apo.theke.ml" = {
+				hostname = "apo.theke.ml";
+				user = "git";
+				port = 222;
+				identityFile = "~/.ssh/theke";
+			};
+
+			"code.aethrvmn.gr" = {
+				hostname = "code.aethrvmn.gr";
+				identityFile = "~/.ssh/commits";
+			};
+
+			"velor.gr" = {
+				hostname = "velor.gr";
+				identityFile = "~/.ssh/velor";
+			};
+		};
+	};
+}
diff --git a/home-manager/waybar/default.nix b/home-manager/waybar/default.nix
new file mode 100644
index 0000000..9457d06
--- /dev/null
+++ b/home-manager/waybar/default.nix
@@ -0,0 +1,6 @@
+{ config, pkgs, ...}:
+# {
+#   programs.waybar = {
+#       enable = true;
+#   };
+# }
diff --git a/home-manager/xdg/default.nix b/home-manager/xdg/default.nix
new file mode 100644
index 0000000..55dde61
--- /dev/null
+++ b/home-manager/xdg/default.nix
@@ -0,0 +1,42 @@
+{
+  xdg = {
+    enable = true;
+    mimeApps = {
+      enable = true;  # manage ~/.config/mimeapps.list
+
+      defaultApplications = {
+        "application/pdf"         = [ "zen" ];
+        "x-scheme-handler/http"   = [ "zen" ];
+        "x-scheme-handler/https"  = [ "zen" ];
+        "x-scheme-handler/chrome" = [ "zen" ];
+
+        "text/html"               = [ "featherpad.desktop" ];
+
+        "x-scheme-handler/discord" = [ "io.github.equicord.equibop.desktop" ];
+
+        "x-scheme-handler/tg"      = [ "org.telegram.desktop.desktop" ];
+        "x-scheme-handler/tonsite" = [ "org.telegram.desktop.desktop" ];
+
+        "message/rfc822"           = [ "eu.betterbird.Betterbird.desktop" ];
+        "x-scheme-handler/mailto"  = [ "eu.betterbird.Betterbird.desktop" ];
+        "x-scheme-handler/mid"     = [ "eu.betterbird.Betterbird.desktop" ];
+        "x-scheme-handler/feed"    = [ "eu.betterbird.Betterbird.desktop" ];
+        "x-scheme-handler/webcal"  = [ "eu.betterbird.Betterbird.desktop" ];
+        "x-scheme-handler/webcals" = [ "eu.betterbird.Betterbird.desktop" ];
+
+        "image/png"  = [ "imv-dir.desktop" ];
+        "image/jpeg" = [ "imv-dir.desktop" ];
+        "image/svg+xml" = [ "featherpad.desktop" ];
+
+        "application/pgp-keys" = [ "com.bktus.gpgfrontend" ];
+        "application/octet-stream" = [ "org.gnome.FileRoller.desktop" ];
+      };
+
+      # Optional extra handlers that *don’t* become default
+      associations.added = {
+        "text/html" = [  "zen" ];
+        "application/pdf" = [ "zen" ];
+      };
+    };
+  };
+}
diff --git a/home-manager/zsh/default.nix b/home-manager/zsh/default.nix
new file mode 100644
index 0000000..d713873
--- /dev/null
+++ b/home-manager/zsh/default.nix
@@ -0,0 +1,125 @@
+{ config, pkgs, lib, ... }: let
+  nixosScript = ''
+   nixos() {
+    case $1 in
+      update | up)
+        if [ "$#" -gt 1 ]; then
+          echo "Error: 'nixos update' takes no additional arguments."
+          return 1
+        fi
+        nh os switch $HOME/.nix --ask
+        ;;
+      upgrade)
+        if [ "$#" -gt 1 ]; then
+          echo "Error: 'nixos upgrade' takes no additional arguments."
+          return 1
+        fi
+        nh os switch $HOME/.nix -u --ask
+        ;;
+      clean)
+        nh clean all --verbose
+        ;;
+      config)
+        hx ~/.nix/"$2"
+        ;;
+      *)
+        echo "Usage: nixos update | up || nixos upgrade || nixos config <path>"
+        ;;
+      esac
+    }
+
+    nix() {
+      if [[ $1 == "develop" ]]; then
+        shift
+        local flake
+        case $1 in
+          python)
+            flake="$HOME/.nix#python"
+            shift
+          ;;
+          nim)
+            flake="$HOME/.nix#nim"
+            shift
+          ;;
+          js)
+            flake="$HOME/.nix#js"
+            shift
+          ;;
+          *)
+            flake="$1"
+            shift
+          ;;
+        esac
+        command nix develop "$flake" -c zsh
+      else
+        command nix "$@"
+      fi
+    }
+
+    _nixos_autocomplete() {
+      _arguments \
+        '1: :->subcmd' \
+        '2: :->files'
+
+      case $state in
+        subcmd)
+          local -a commands
+          commands=("update" "config")
+          _describe 'command' commands
+          ;;
+        files)
+          # Check if the subcommand is config.
+          if [[ $words[2] == "config" ]]; then
+             _files -W "$HOME/.nix" -g '*'
+          fi
+          ;;
+      esac
+    }
+
+    compdef _nixos_autocomplete nixos
+  '';
+in {
+  programs.zsh = {
+    enable = true;
+
+    autosuggestion.enable = true;
+    enableCompletion = true;
+    syntaxHighlighting.enable = true;
+
+    shellAliases = {
+      ls = "eza --icons=always --color=always";
+      ll = "eza -a  --long --icons=always --color=always --no-time";
+      lt = "eza -a  --long --tree --icons=always --color=always --no-time";
+
+      cat = "bat";
+      mk = "(){ mkdir -p $1 && cd $1 }";
+
+      grep = "grep --color=auto";
+
+      mv = "mv -i";
+      cp = "cp -i";
+      rm = "rm -i";
+
+      fetch = "fastfetch -c examples/7";
+
+      nix-shell = "nix-shell --run $SHELL";
+    };
+
+    initContent = ''
+      ${nixosScript};
+      eval "$(atuin init zsh)"
+      eval "$(starship init zsh)"
+    '';
+  };
+
+  programs = {
+    starship = {
+      enable = true;
+    };
+
+    atuin = {
+      enable = true;
+      enableZshIntegration = true;
+    };
+  };
+}
diff --git a/hosts/pad/boot.nix b/hosts/pad/boot.nix
new file mode 100644
index 0000000..a6108d6
--- /dev/null
+++ b/hosts/pad/boot.nix
@@ -0,0 +1,16 @@
+{ config, pkgs, ...}:
+
+{
+  boot = {
+    loader = {
+      systemd-boot = {
+        enable = true;
+        # Only keep the last 10 configurations
+        configurationLimit = 10;
+      };
+      efi.canTouchEfiVariables = true;
+     }; 
+
+    initrd.luks.devices."luks-11563c8c-1bf7-471f-a173-918f47aa31ed".device = "/dev/disk/by-uuid/11563c8c-1bf7-471f-a173-918f47aa31ed";
+  };
+}
diff --git a/hosts/pad/default.nix b/hosts/pad/default.nix
new file mode 100644
index 0000000..738e407
--- /dev/null
+++ b/hosts/pad/default.nix
@@ -0,0 +1,34 @@
+# Edit this configuration file to define what should be installed on
+# your system.  Help is available in the configuration.nix(5) man page
+# and in the NixOS manual (accessible by running ‘nixos-help’).
+{ config, lib, pkgs, ... }:
+
+{
+  imports = [ 
+      # Include the results of the hardware scan.
+      ./hardware-configuration.nix
+
+      # Base modules
+      ./boot.nix
+      ./hardware.nix
+      ./network.nix      
+    ];
+
+  system = {
+    autoUpgrade = {
+      enable = true;
+      flake = "/home/aethrvmn/.nix#pad";
+    };
+
+    # This value determines the NixOS release from which the default
+    # settings for stateful data, like file locations and database versions
+    # on your system were taken. It‘s perfectly fine and recommended to leave
+    # this value at the release version of the first install of this system.
+    # Before changing this value read the documentation for this option
+    # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
+    stateVersion = "24.11"; # Did you read the comment?
+  };
+
+  # Set time zone.
+  time.timeZone = "Europe/Brussels";
+}
diff --git a/hosts/pad/hardware-configuration.nix b/hosts/pad/hardware-configuration.nix
new file mode 100644
index 0000000..4345851
--- /dev/null
+++ b/hosts/pad/hardware-configuration.nix
@@ -0,0 +1,43 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports =
+    [ (modulesPath + "/installer/scan/not-detected.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "xhci_pci" "ehci_pci" "ata_piix" "usb_storage" "sd_mod" "sr_mod" "sdhci_pci" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" =
+    { device = "/dev/disk/by-uuid/fe8e7c2d-ae75-4617-b26c-650377ce813e";
+      fsType = "ext4";
+    };
+
+  boot.initrd.luks.devices."luks-3462560d-86f8-4ddd-9f37-4d3f92846e1e".device = "/dev/disk/by-uuid/3462560d-86f8-4ddd-9f37-4d3f92846e1e";
+
+  fileSystems."/boot" =
+    { device = "/dev/disk/by-uuid/B370-4AFC";
+      fsType = "vfat";
+      options = [ "fmask=0077" "dmask=0077" ];
+    };
+
+  swapDevices =
+    [ { device = "/dev/disk/by-uuid/1d8ca4a9-b5aa-46d1-96f9-6be57c8a6fc6"; }
+    ];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp0s25.useDHCP = lib.mkDefault true;
+  # networking.interfaces.wlp3s0.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}
diff --git a/hosts/pad/hardware.nix b/hosts/pad/hardware.nix
new file mode 100644
index 0000000..4c63dba
--- /dev/null
+++ b/hosts/pad/hardware.nix
@@ -0,0 +1,5 @@
+{
+  hardware.graphics = {
+    enable = true;
+  };
+}
diff --git a/hosts/pad/network.nix b/hosts/pad/network.nix
new file mode 100644
index 0000000..6831f92
--- /dev/null
+++ b/hosts/pad/network.nix
@@ -0,0 +1,53 @@
+{ config, pkgs, ... }:
+
+{
+  networking = {
+    hostName = "pad"; # Define your hostname.
+    
+    # Enables wireless support via wpa_supplicant.
+    # wireless.enable = true;
+    
+    # Configure network proxy if necessary
+    # proxy.default = "http://user:password@proxy:port/";
+    # proxy.noProxy = "127.0.0.1,localhost,internal.domain";
+
+    # Enable networking
+    networkmanager.enable = true;
+
+    wireguard = {
+      enable = true;
+
+      interfaces = {
+        rousi = {
+          ips = [
+            "10.0.0.4/24"
+          ];
+          listenPort = 51820;
+          privateKeyFile = "/home/aethrvmn/.creds/rousikey";
+
+          peers = [
+            {
+              allowedIPs = [ 
+                "192.168.10.0/24" 
+                "172.16.0.0/24"
+              ];
+              publicKey = "LEeO3Qy6c3W0qoR1xFhl7Fx29Oppq8tKE72HPoA831I=";
+              endpoint = "vpn.valatsos.gr:51820";
+              persistentKeepalive = 25;
+            }
+          ];
+        };
+      };
+    };
+
+    # Open ports in the firewall.
+    firewall = {
+      ## 1313 is for HUGO
+      allowedTCPPorts = [ 1313 ];
+      ## 51820 is wg 53317 is localsend
+      allowedUDPPorts = [ 51820 53317 ];
+    };
+    # Or disable the firewall altogether.
+    # firewall.enable = false;
+  };
+}
diff --git a/hosts/station/boot.nix b/hosts/station/boot.nix
new file mode 100644
index 0000000..603ebf7
--- /dev/null
+++ b/hosts/station/boot.nix
@@ -0,0 +1,20 @@
+{ config, pkgs, ...}:
+
+{
+  boot = {
+    loader = {
+      systemd-boot = {
+        enable = true;
+        # Only keep the last 10 configurations
+        configurationLimit = 10;
+      };
+      efi.canTouchEfiVariables = true;
+     }; 
+
+    initrd = {
+      luks.devices."luks-4d8ffefc-fb74-4628-9779-abc535146374".device = "/dev/disk/by-uuid/4d8ffefc-fb74-4628-9779-abc535146374";
+
+      kernelModules = ["amdgpu"];
+    };
+  };
+}
diff --git a/hosts/station/default.nix b/hosts/station/default.nix
new file mode 100644
index 0000000..b57bcb1
--- /dev/null
+++ b/hosts/station/default.nix
@@ -0,0 +1,34 @@
+# Edit this configuration file to define what should be installed on
+# your system.  Help is available in the configuration.nix(5) man page
+# and in the NixOS manual (accessible by running ‘nixos-help’).
+{ config, lib, pkgs, ... }:
+
+{
+  imports = [ 
+      # Include the results of the hardware scan.
+      ./hardware-configuration.nix
+
+      # Base modules
+      ./boot.nix
+      ./hardware.nix
+      ./network.nix
+    ];
+
+  system = {
+    autoUpgrade = {
+      enable = true;
+      flake = "/home/aethrvmn/.nix#nixstation";
+    };
+
+    # This value determines the NixOS release from which the default
+    # settings for stateful data, like file locations and database versions
+    # on your system were taken. It‘s perfectly fine and recommended to leave
+    # this value at the release version of the first install of this system.
+    # Before changing this value read the documentation for this option
+    # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
+    stateVersion = "24.11"; # Did you read the comment?
+  };
+
+  # Set time zone.
+  time.timeZone = "Europe/Brussels";
+}
diff --git a/hosts/station/hardware-configuration.nix b/hosts/station/hardware-configuration.nix
new file mode 100644
index 0000000..8c60298
--- /dev/null
+++ b/hosts/station/hardware-configuration.nix
@@ -0,0 +1,43 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports =
+    [ (modulesPath + "/installer/scan/not-detected.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "ahci" "usbhid" "usb_storage" "sd_mod" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-amd" ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" =
+    { device = "/dev/disk/by-uuid/48ee999d-df45-49da-96dd-7bbb7682677d";
+      fsType = "ext4";
+    };
+
+  boot.initrd.luks.devices."luks-38168e30-5417-440d-b521-faaaf4ef9360".device = "/dev/disk/by-uuid/38168e30-5417-440d-b521-faaaf4ef9360";
+
+  fileSystems."/boot" =
+    { device = "/dev/disk/by-uuid/EDF1-9467";
+      fsType = "vfat";
+      options = [ "fmask=0077" "dmask=0077" ];
+    };
+
+  swapDevices =
+    [ { device = "/dev/disk/by-uuid/6b838eef-e44d-4aac-b29e-9c91e10b015b"; }
+    ];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp42s0.useDHCP = lib.mkDefault true;
+  # networking.interfaces.wlo1.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}
diff --git a/hosts/station/hardware.nix b/hosts/station/hardware.nix
new file mode 100644
index 0000000..8f84745
--- /dev/null
+++ b/hosts/station/hardware.nix
@@ -0,0 +1,11 @@
+{ config, pkgs, ... }:
+{
+  hardware = {
+    graphics = {
+      enable = true;
+      extraPackages = with pkgs; [
+        rocmPackages.clr
+      ];
+    };
+  };
+}
diff --git a/hosts/station/network.nix b/hosts/station/network.nix
new file mode 100644
index 0000000..c1b08ea
--- /dev/null
+++ b/hosts/station/network.nix
@@ -0,0 +1,55 @@
+{ config, pkgs, ... }:
+
+{
+  networking = {
+    hostName = "station"; # Define your hostname.
+    
+    # Enables wireless support via wpa_supplicant.
+    # wireless.enable = true;
+    
+    # Configure network proxy if necessary
+    # proxy.default = "http://user:password@proxy:port/";
+    # proxy.noProxy = "127.0.0.1,localhost,internal.domain";
+
+    # Enable networking
+    networkmanager.enable = true;
+
+    wireguard = {
+      enable = true;
+
+      interfaces = {
+        rousi = {
+          ips = [
+            "10.0.0.5/24"
+          ];
+          listenPort = 51820;
+          privateKeyFile = "/home/aethrvmn/.creds/rousikey";
+
+          peers = [
+            {
+              allowedIPs = [ 
+                "192.168.10.0/24" 
+                "172.16.0.0/24"
+              ];
+              publicKey = "LEeO3Qy6c3W0qoR1xFhl7Fx29Oppq8tKE72HPoA831I=";
+              endpoint = "vpn.valatsos.gr:51820";
+              persistentKeepalive = 25;
+            }
+          ];
+        };
+      };
+    };
+
+    # Open ports in the firewall.
+    firewall ={
+      ## 1313 is HUGO
+      ## 2234 is nicotine
+      allowedTCPPorts = [ 1313 2234 ];
+      ## 51820 is wg
+      ## 53317 is localsend
+      allowedUDPPorts = [ 51820 53317 ];
+    };
+    # Or disable the firewall altogether.
+    # firewall.enable = false;
+  };
+}
diff --git a/modules/client/1password/default.nix b/modules/client/1password/default.nix
new file mode 100644
index 0000000..1d137d1
--- /dev/null
+++ b/modules/client/1password/default.nix
@@ -0,0 +1,22 @@
+{ config, pkgs, ... }:
+
+{
+  programs = {
+    _1password.enable = true;
+    _1password-gui = {
+      enable = true;
+      polkitPolicyOwners = [ "aethrvmn" ];
+    };
+  };
+
+  environment.etc ={
+    "1password/custom_allowed_browsers" = {
+      text = ''
+        firefox
+        zen
+      '';
+      mode = "0755";
+    };
+  };
+}
+
diff --git a/modules/client/default.nix b/modules/client/default.nix
new file mode 100644
index 0000000..0f189b1
--- /dev/null
+++ b/modules/client/default.nix
@@ -0,0 +1,8 @@
+{
+  imports = [
+    ./1password
+    ./flatpak
+    ./labwc
+    ./thunar
+  ];
+}
diff --git a/modules/client/flatpak/default.nix b/modules/client/flatpak/default.nix
new file mode 100644
index 0000000..63d5669
--- /dev/null
+++ b/modules/client/flatpak/default.nix
@@ -0,0 +1,49 @@
+{ pkgs, lib, ...}:
+{
+  # imports = [
+  #   inputs.nix-flatpak.nixosModules.nix-flatpak
+  # ];
+
+  services.flatpak = {
+    enable = true;
+    
+    remotes = [
+      {
+        name = "flathub";
+        location = "https://flathub.org/repo/flathub.flatpakrepo";
+      }
+    ];
+
+    packages = [
+      "eu.betterbird.Betterbird"
+      "io.github.equicord.equibop"
+      "com.github.tchx84.Flatseal"
+      "app.grayjay.Grayjay"
+      "fi.skyjake.Lagrange"
+      "org.localsend.localsend_app"
+      "net.lutris.Lutris"
+      "org.nicotine_plus.Nicotine"
+      "org.musicbrainz.Picard"
+      "com.obsproject.Studio"
+      "org.telegram.desktop"
+      "com.rtosta.zapzap"
+    ];
+
+    update.auto = {
+      enable = true;
+      onCalendar = "weekly"; # Default value
+    };
+    
+  	overrides = {
+      global = {
+        # Force Wayland by default
+        Context.sockets = [ "wayland" "!x11" "!fallback-x11" ];
+
+        Environment = {
+          # Fix un-themed cursor in some Wayland apps
+          XCURSOR_PATH = "/run/host/user-share/icons:/run/host/share/icons";
+        };
+      };
+    };
+  };
+}
diff --git a/modules/client/labwc/default.nix b/modules/client/labwc/default.nix
new file mode 100644
index 0000000..e0350f4
--- /dev/null
+++ b/modules/client/labwc/default.nix
@@ -0,0 +1,40 @@
+{ config, pkgs, ... }:
+# Set up a complete labwc instance system-side
+{
+  # Enable labwc
+  programs.labwc.enable = true;
+
+  # Enable XDG portals for wl-roots
+  xdg.portal = {
+    wlr.enable = true;
+    extraPortals = with pkgs; [
+      xdg-desktop-portal-gtk
+    ];
+    enable = true;
+  };
+
+  # Enable tuigreet
+  services = {
+    greetd = {
+      enable = true;
+      settings = {
+        default_session = {
+          command = "${pkgs.tuigreet}/bin/tuigreet --user-menu -rti --asterisks --cmd labwc";
+          user = "greeter";
+        };
+      };
+    };
+  };
+
+  # Hide stderror and bootlogs from filling tuigreet
+  systemd.services.greetd.serviceConfig = {
+    Type = "idle";
+    StandardInput = "tty";
+    StandardOutput = "ttu";
+    StandardError = "journal"; # logs erros to journal, preventing spam on tuigreet
+
+    TTYReset = true;
+    TTYVHangup = true;
+    TTYVTDisallocate = true;
+  };
+}
diff --git a/modules/client/thunar/default.nix b/modules/client/thunar/default.nix
new file mode 100644
index 0000000..0caaabf
--- /dev/null
+++ b/modules/client/thunar/default.nix
@@ -0,0 +1,24 @@
+{ config, pkgs, ... }:
+{
+  services = {
+    gvfs.enable = true;
+    # TODO: Check if I need these
+    # udisks2.enable = true;
+    # devmon.enable = true;
+    tumbler.enable = true;
+  };
+
+  programs = {
+    thunar = {
+      enable = true;
+
+      plugins = with pkgs.xfce; [
+        thunar-archive-plugin
+        thunar-media-tags-plugin
+        thunar-volman
+      ];
+    };
+
+    file-roller.enable = true;
+  };
+}
diff --git a/modules/common/adguard/default.nix b/modules/common/adguard/default.nix
new file mode 100644
index 0000000..9929bc1
--- /dev/null
+++ b/modules/common/adguard/default.nix
@@ -0,0 +1,106 @@
+{ config, lib, ... }:
+{
+  services = {
+    adguardhome = {
+      enable = false;
+      openFirewall = false;
+      mutableSettings = false;
+
+      settings = {
+        http = {
+          address = "127.0.0.1:3000";
+        };
+
+        dns = {
+          bind_hosts = [ "10.0.0.5" "127.0.0.1" ];
+          port = 53;
+
+          upstream_dns = [
+            "9.9.9.9"
+            "149.112.112.112"
+          ];
+          fallback_dns = [
+            "1.1.1.1"
+            "1.0.0.1"
+          ];
+          bootstrap_dns = [
+            "9.9.9.9"
+            "149.112.112.112"
+          ];
+        };
+
+        filtering = {
+          rewrites = [
+            # jellyfin
+            {
+              domain = "media.internal";
+              answer = "10.0.0.5";
+            } 
+            # immich
+            {
+              domain = "photos.internal";
+              answer = "10.0.0.5";
+            } 
+            # calibre-web
+            {
+              domain = "library.internal";
+              answer = "10.0.0.5";
+            } 
+            # searxng
+            {
+              domain = "search.internal";
+              answer = "10.0.0.5";
+            } 
+            # ollama api
+            {
+              domain = "ollama.internal";
+              answer = "10.0.0.5";
+            } 
+            # open-webui
+            {
+              domain = "chat.internal";
+              answer = "10.0.0.5";
+            } 
+            # forgejo
+            {
+              domain = "forge.internal";
+              answer = "10.0.0.5";
+            } 
+            # cgit
+            {
+              domain = "code.internal";
+              answer = "10.0.0.5";
+            }
+            # adguard
+            {
+              domain = "dns.internal";
+              answer = "10.0.0.5";
+            } 
+            # grafana
+            {
+              domain = "monitor.internal";
+              answer = "10.0.0.5";
+            }
+          ];
+        };
+      };
+    };
+
+    nginx.virtualHosts = {
+      "dns.internal" = {
+        locations."/" = {
+          proxyPass = "http://127.0.0.1:3000";
+          proxyWebsockets = true;
+        };
+      };
+    };
+  };
+
+  # networking = {
+  #   nameservers = [
+  #     "9.9.9.9"
+  #     "127.0.0.1"
+  #     "10.0.0.5"
+  #   ];
+  # };
+}
diff --git a/modules/common/default.nix b/modules/common/default.nix
new file mode 100644
index 0000000..f34cd8f
--- /dev/null
+++ b/modules/common/default.nix
@@ -0,0 +1,45 @@
+{ config, pkgs, ... }:
+{
+  imports =[
+    # names are self explanatory
+    ./adguard
+    ./fonts
+    ./gnupg
+    ./i18n 
+    ./nh   
+    ./pipewire
+    ./searx
+    ./ssh
+    ./users
+    ./xserver
+  ];
+
+  nix = {
+    settings = {
+      # Enable flakes
+      experimental-features = [ "nix-command" "flakes" ];
+
+      # Optimize storage
+      auto-optimise-store = true;
+    };
+  };
+
+  # Allow unfree packages
+  nixpkgs = {
+    config.allowUnfree = true;
+  };
+
+  # List packages installed in system profile. 
+  # These should be tools in case user tools brake.
+  # To search, run:
+  # $ nix search <pkgname>
+  # or
+  # $ nh search <pkgname>
+  environment.systemPackages = with pkgs; [
+  	alacritty
+    git
+    helix
+    xdg-utils
+  ];
+}
+
diff --git a/modules/common/fonts/default.nix b/modules/common/fonts/default.nix
new file mode 100644
index 0000000..bf1c91d
--- /dev/null
+++ b/modules/common/fonts/default.nix
@@ -0,0 +1,12 @@
+{ config, pkgs, ... }:
+{
+  fonts.packages = with pkgs; [
+    corefonts
+    font-awesome
+    font-awesome_5
+    maple-mono.NF-CN
+    noto-fonts
+    noto-fonts-cjk-sans
+    noto-fonts-emoji
+  ];
+}
diff --git a/modules/common/gnupg/default.nix b/modules/common/gnupg/default.nix
new file mode 100644
index 0000000..fc6e537
--- /dev/null
+++ b/modules/common/gnupg/default.nix
@@ -0,0 +1,5 @@
+{
+  programs.gnupg.agent = {
+    enable = true;
+  };
+}
diff --git a/modules/common/i18n/default.nix b/modules/common/i18n/default.nix
new file mode 100644
index 0000000..786332c
--- /dev/null
+++ b/modules/common/i18n/default.nix
@@ -0,0 +1,20 @@
+{ config, ... }:
+
+# Locale generation
+{
+  i18n = {
+    defaultLocale = "en_US.UTF-8";
+
+    extraLocaleSettings = {
+      LC_ADDRESS = "el_GR.UTF-8";
+      LC_IDENTIFICATION = "el_GR.UTF-8";
+      LC_MEASUREMENT = "el_GR.UTF-8";
+      LC_MONETARY = "el_GR.UTF-8";
+      LC_NAME = "el_GR.UTF-8";
+      LC_NUMERIC = "el_GR.UTF-8";
+      LC_PAPER = "el_GR.UTF-8";
+      LC_TELEPHONE = "el_GR.UTF-8";
+      LC_TIME = "el_GR.UTF-8";
+    };
+  };
+}
diff --git a/modules/common/nh/default.nix b/modules/common/nh/default.nix
new file mode 100644
index 0000000..a5e09ac
--- /dev/null
+++ b/modules/common/nh/default.nix
@@ -0,0 +1,9 @@
+{ config, pkgs, ... }:
+{
+  programs.nh = {
+    enable = true;
+    clean.enable = true;
+
+    flake = "/home/aethrvmn/.nix/";
+  };
+}
diff --git a/modules/common/pipewire/default.nix b/modules/common/pipewire/default.nix
new file mode 100644
index 0000000..311cf94
--- /dev/null
+++ b/modules/common/pipewire/default.nix
@@ -0,0 +1,12 @@
+{
+  security.rtkit.enable = true;
+
+  services.pipewire = {
+    enable = true;
+
+    audio.enable = true;
+    pulse.enable = true;
+    alsa.enable = true;
+    jack.enable = true;
+  };
+}
diff --git a/modules/common/searx/default.nix b/modules/common/searx/default.nix
new file mode 100644
index 0000000..659c700
--- /dev/null
+++ b/modules/common/searx/default.nix
@@ -0,0 +1,115 @@
+{ config, pkgs, lib, ... }:
+{
+  services = {
+    searx = {
+      enable = true;
+      package = pkgs.searxng;
+
+      settings = {
+        server = {
+          port = 3040;
+          bind_address = "127.0.0.1";
+          secret_key = "secret_key";
+        };
+
+        general = {
+          debug = false;
+          instance_name = "SearXNG Instance";
+          donation_url = false;
+          contact_url = false;
+          privacypolicy_url = false;
+          enable_metrics = false;
+          autocomplete = "startpage";
+        };
+
+        # Search engines
+        engines = lib.mapAttrsToList (name: value: { inherit name; } // value) {
+          # main boys
+          "brave" = {
+            disabled = false;
+            weight = 0.8;
+          };
+          "duckduckgo" = {
+            disabled = false;
+            weight = 0.8;
+          };
+          "ecosia" = {
+            disabled = false;
+            weight = 0.7;
+          };
+          "mojeek" = {
+            disabled = true;
+            weight = 0.4;
+          };
+          "qwant" = {
+            disabled = false;
+            weight = 0.4;
+          };
+          "startpage" = {
+            disabled = false;
+            weight = 1;
+          };
+          "wiby" = {
+            disabled = false;
+            weight = 0.4;
+          };
+
+          # 
+          "openverse".disabled = false;
+
+          # repos
+          "bitbucket".disabled = false;
+        	"codeberg".disabled = false;
+        	"gitea.com".disabled = false;
+        	"github".disabled = false;
+        	"gitlab".disabled = false;
+        	"huggingface".disabled = false;
+        	"huggingface datasets".disabled = false;
+        	"huggingface spaces".disabled = false;
+        	"ollama".disabled = false;
+        	"sourcehut".disabled = false;
+
+        	# software wikis
+        	"gentoo".disabled = false;
+        	"nixos wiki".disabled = false;
+        	"arch linux wiki".disabled = false;
+        	"free software directory".disabled = false;
+
+        	# IT etc
+        	"mankier".disabled = false;
+          "searchcode code".disabled = false;
+
+          # wikimedia
+          "wikidata".disabled = false;
+          "wikibooks".disabled = false;
+          "wikiquote".disabled = false;
+          "wikisource".disabled = false;
+          "wikivoyage".disabled = false;
+          "wikispecies".disabled = false;
+          "wikiversity".disabled = false;
+          "wikicommons".disabled = false;
+
+          # translate
+          "mozhi".disabled = false;
+          "lingva".disabled = false;
+          "dictzone".disabled = false;
+          "libretranslate".disabled = false;
+
+          # # scams/don't trusts
+          "bing".disabled = true;
+          "yahoo".disabled = true;
+          "google".disabled = true;
+        };
+      };
+    };
+
+    nginx.virtualHosts = {
+      "search.internal" = {
+        locations."/" = {
+          proxyPass = "http://127.0.0.1:3040";
+          proxyWebsockets = true;
+        };
+      };
+    };
+  };
+}
diff --git a/modules/common/ssh/default.nix b/modules/common/ssh/default.nix
new file mode 100644
index 0000000..70b67e2
--- /dev/null
+++ b/modules/common/ssh/default.nix
@@ -0,0 +1,5 @@
+{
+  programs.ssh = {
+    startAgent = true;
+  };
+}
diff --git a/modules/common/users/default.nix b/modules/common/users/default.nix
new file mode 100644
index 0000000..6f086c7
--- /dev/null
+++ b/modules/common/users/default.nix
@@ -0,0 +1,20 @@
+{ config, pkgs, ... }:
+
+# User configuration
+{
+  users = {
+    defaultUserShell = pkgs.zsh;
+  
+    users.aethrvmn = {
+      isNormalUser = true;
+      extraGroups = [ "networkmanager" "video" "wheel" ];
+      password = "gg";
+
+      openssh.authorizedKeys.keys = [
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFTRmMBlTFJbOWQBLI9XS2HMdUSlsAcaQ6vWjLpfweEo aethrvmn@apotheke.earth"
+      ];
+    };
+  };
+
+  programs.zsh.enable = true;
+}
diff --git a/modules/common/xserver/default.nix b/modules/common/xserver/default.nix
new file mode 100644
index 0000000..7249ae2
--- /dev/null
+++ b/modules/common/xserver/default.nix
@@ -0,0 +1,9 @@
+{ config, pkgs, ... }:
+
+# XServer
+{
+  services.xserver.xkb = {
+    layout = "us, gr";
+    options = "grp:alt_shift_toggle";
+  };
+}
diff --git a/modules/server/calibre/default.nix b/modules/server/calibre/default.nix
new file mode 100644
index 0000000..d177ac1
--- /dev/null
+++ b/modules/server/calibre/default.nix
@@ -0,0 +1,39 @@
+{ config, pkgs, ... }:
+let
+  libDir = "/var/lib/calibre-web/library";
+in {
+  services = {
+    calibre-web = {
+      enable = true;
+
+      listen = {
+        ip = "127.0.0.1";
+        port = 3020;
+      };
+
+      options = {
+        calibreLibrary = libDir;
+        enableBookUploading = true;
+      };
+    };
+
+    nginx = {
+      virtualHosts."library.internal" = {
+        locations."/" = {
+          proxyPass = "http://127.0.0.1:3020";
+          proxyWebsockets = true;
+        };
+      };
+    };
+  };
+
+  systemd.services.calibre-web = {
+    preStart = ''
+      if [ ! -f "${libDir}/metadata.db" ]; then
+        mkdir -p "${libDir}"
+        ${pkgs.calibre}/bin/calibredb add --empty \
+          --with-library "${libDir}"
+      fi
+    '';
+  };
+}
diff --git a/modules/server/cgit/default.nix b/modules/server/cgit/default.nix
new file mode 100644
index 0000000..08784fe
--- /dev/null
+++ b/modules/server/cgit/default.nix
@@ -0,0 +1,76 @@
+{ config, pkgs, lib, ... }:
+let
+  cgitWithAssets = pkgs.cgit.overrideAttrs (old: {
+    pname   = "cgit-with-assets";
+
+    postInstall = (old.postInstall or "") + ''
+      # overwrite the stock files that the module aliases
+      install -Dm444 ${./static/cgit.css}     $out/cgit/cgit.css
+      install -Dm444 ${./static/logo.png}     $out/cgit/cgit.png   # keep the name!
+      install -Dm444 ${./static/favicon.png}  $out/cgit/favicon.ico
+    '';
+  });
+in {
+  services = {
+    cgit."code" = {
+      enable = true;
+      scanPath = "/srv/git";
+      package = cgitWithAssets;
+      
+      settings = {
+        cache-size = 0;
+        cache-scanrc-ttl = 0;
+        enable-log-filecount = 1;
+        enable-log-linecount = 1;
+        enable-git-config = 1;
+
+        localtime = 1;
+
+        noplainemail = 1;
+
+        root-title = "code.aethrvmn.gr";
+        root-desc = "αpothēke of aethrvmn";
+        clone-url = "https://code.aethrvmn.gr/$CGIT_REPO_URL";
+
+        logo-link = "https://aethrvmn.gr/";
+
+        about-filter  = "${pkgs.cgit}/lib/cgit/filters/about-formatting.sh";
+        source-filter = "${pkgs.cgit}/lib/cgit/filters/syntax-highlighting.py";
+      };
+
+      nginx.virtualHost = "code.internal";
+    };
+  };
+
+  users = {
+    groups.git = { };
+
+    users = {
+      git = {
+        isSystemUser = true;
+        description = "aethrvmn";
+        group = "git";
+        home = "/srv/git";
+        homeMode = "0755";
+        createHome = true;
+        shell = "${pkgs.git}/bin/git-shell";
+
+        openssh.authorizedKeys.keys = [
+          "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFTRmMBlTFJbOWQBLI9XS2HMdUSlsAcaQ6vWjLpfweEo aethrvmn@apotheke.earth"
+        ];
+      };
+
+      cgit = {
+        isSystemUser = true;
+        extraGroups = [ "git" ];
+      };
+    };
+  };
+
+  systemd = {
+    tmpfiles.rules = [
+      # type path     mode uid gid age target
+      "L /srv/git/static - git git - /home/aethrvmn/.nix/modules/server/cgit/static"
+    ];
+  };
+}
diff --git a/modules/server/cgit/static/cgit.css b/modules/server/cgit/static/cgit.css
new file mode 100644
index 0000000..d2ee006
--- /dev/null
+++ b/modules/server/cgit/static/cgit.css
@@ -0,0 +1,1346 @@
+@import url(source-code-pro/source-code-pro.css);
+
+div#cgit {
+  padding: 0em;
+  margin: 0em;
+  font-family: sans-serif;
+  font-size: 10pt;
+  color: #333;
+  background: white;
+  padding: 4px;
+}
+
+div#cgit a {
+  color: blue;
+  text-decoration: none;
+}
+
+div#cgit a:hover {
+  text-decoration: underline;
+}
+
+div#cgit table {
+  border-collapse: collapse;
+}
+
+div#cgit table#header {
+  width: 100%;
+  margin-bottom: 1em;
+}
+
+div#cgit table#header td.logo {
+  width: 96px;
+  vertical-align: top;
+
+  img {
+    width: 96px;
+  }
+}
+
+div#cgit table#header td.main {
+  font-size: 250%;
+  padding-left: 10px;
+  white-space: nowrap;
+}
+
+div#cgit table#header td.main a {
+  color: #000;
+}
+
+div#cgit table#header td.form {
+  text-align: right;
+  vertical-align: bottom;
+  padding-right: 1em;
+  padding-bottom: 2px;
+  white-space: nowrap;
+}
+
+div#cgit table#header td.form form,
+div#cgit table#header td.form input,
+div#cgit table#header td.form select {
+  font-size: 90%;
+}
+
+div#cgit table#header td.sub {
+  color: #777;
+  border-top: solid 1px #ccc;
+  padding-left: 10px;
+}
+
+div#cgit table.tabs {
+  border-bottom: solid 3px #ccc;
+  border-collapse: collapse;
+  margin-top: 2em;
+  margin-bottom: 0px;
+  width: 100%;
+}
+
+div#cgit table.tabs td {
+  padding: 0px 1em;
+  vertical-align: bottom;
+}
+
+div#cgit table.tabs td a {
+  padding: 2px 0.75em;
+  color: #777;
+  font-size: 110%;
+}
+
+div#cgit table.tabs td a.active {
+  color: #000;
+  background-color: #ccc;
+}
+
+div#cgit table.tabs a[href^="http://"]:after, div#cgit table.tabs a[href^="https://"]:after
+{
+  content: url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAoAAAAKCAQAAAAnOwc2AAAAAmJLR0QA/4ePzL8AAAAJcEhZcwAACxMAAAsTAQCanBgAAAAHdElNRQfgAhcJDQY+gm2TAAAAHWlUWHRDb21tZW50AAAAAABDcmVhdGVkIHdpdGggR0lNUGQuZQcAAABbSURBVAhbY2BABs4MU4CwhYHBh2Erww4wrGFQZHjI8B8IgUIscJWyDHcggltQhI4zGDCcRwhChPggHIggP1QoAVmQkSETrGoHsiAEsACtBYN0oDAMbgU6EBcAAL2eHUt4XUU4AAAAAElFTkSuQmCC);
+  opacity: 0.5;
+  margin: 0 0 0 5px;
+}
+
+div#cgit table.tabs td.form {
+  text-align: right;
+}
+
+div#cgit table.tabs td.form form {
+  padding-bottom: 2px;
+  font-size: 90%;
+  white-space: nowrap;
+}
+
+div#cgit table.tabs td.form input,
+div#cgit table.tabs td.form select {
+  font-size: 90%;
+}
+
+div#cgit div.path {
+  margin: 0px;
+  padding: 5px 2em 2px 2em;
+  color: #000;
+  background-color: #eee;
+}
+
+div#cgit div.content {
+  margin: 0px;
+  padding: 2em;
+  border-bottom: solid 3px #ccc;
+}
+
+div#cgit table.list {
+  width: 100%;
+  border: none;
+  border-collapse: collapse;
+}
+
+div#cgit table.list tr {
+  background: white;
+}
+
+div#cgit table.list tr.logheader {
+  background: #eee;
+}
+
+div#cgit table.list tr:nth-child(even) {
+  background: #f7f7f7;
+}
+
+div#cgit table.list tr:nth-child(odd) {
+  background: white;
+}
+
+div#cgit table.list tr:hover {
+  background: #eee;
+}
+
+div#cgit table.list tr.nohover {
+  background: white;
+}
+
+div#cgit table.list tr.nohover:hover {
+  background: white;
+}
+
+div#cgit table.list tr.nohover-highlight:hover:nth-child(even) {
+  background: #f7f7f7;
+}
+
+div#cgit table.list tr.nohover-highlight:hover:nth-child(odd) {
+  background: white;
+}
+
+div#cgit table.list th {
+  font-weight: bold;
+  /* color: #888;
+	border-top: dashed 1px #888;
+	border-bottom: dashed 1px #888;
+	*/
+  padding: 0.1em 0.5em 0.05em 0.5em;
+  vertical-align: baseline;
+}
+
+div#cgit table.list td {
+  border: none;
+  padding: 0.1em 0.5em 0.1em 0.5em;
+}
+
+div#cgit table.list td.commitgraph {
+  font-family: "Source Code Pro", "Courier New", monospace;
+  white-space: pre;
+}
+div#cgit pre {
+  font-family: "Source Code Pro", "Courier New", monospace;
+}
+
+div#cgit table.list td.commitgraph .column1 {
+  color: #a00;
+}
+
+div#cgit table.list td.commitgraph .column2 {
+  color: #0a0;
+}
+
+div#cgit table.list td.commitgraph .column3 {
+  color: #aa0;
+}
+
+div#cgit table.list td.commitgraph .column4 {
+  color: #00a;
+}
+
+div#cgit table.list td.commitgraph .column5 {
+  color: #a0a;
+}
+
+div#cgit table.list td.commitgraph .column6 {
+  color: #0aa;
+}
+
+div#cgit table.list td.logsubject {
+  font-family: "Source Code Pro", "Courier New", monospace;
+  font-weight: bold;
+}
+
+div#cgit table.list td.logmsg {
+  font-family: "Source Code Pro", "Courier New", monospace;
+  white-space: pre;
+  padding: 0 0.5em;
+}
+
+div#cgit table.list td a {
+  color: black;
+}
+
+div#cgit table.list td a.ls-dir {
+  font-weight: bold;
+  color: #00f;
+}
+
+div#cgit table.list td a:hover {
+  color: #00f;
+}
+
+div#cgit img {
+  border: none;
+}
+
+div#cgit input#switch-btn {
+  margin: 2px 0px 0px 0px;
+}
+
+div#cgit td#sidebar input.txt {
+  width: 100%;
+  margin: 2px 0px 0px 0px;
+}
+
+div#cgit table#grid {
+  margin: 0px;
+}
+
+div#cgit td#content {
+  vertical-align: top;
+  padding: 1em 2em 1em 1em;
+  border: none;
+}
+
+div#cgit div#summary {
+  vertical-align: top;
+  margin-bottom: 1em;
+}
+
+div#cgit table#downloads {
+  float: right;
+  border-collapse: collapse;
+  border: solid 1px #777;
+  margin-left: 0.5em;
+  margin-bottom: 0.5em;
+}
+
+div#cgit table#downloads th {
+  background-color: #ccc;
+}
+
+div#cgit div#blob {
+  border: solid 1px black;
+}
+
+div#cgit div.error {
+  color: red;
+  font-weight: bold;
+  margin: 1em 2em;
+}
+
+div#cgit a.ls-blob,
+div#cgit a.ls-dir,
+div#cgit .ls-mod {
+  font-family: "Source Code Pro", "Courier New", monospace;
+}
+
+div#cgit td.ls-size {
+  text-align: right;
+  font-family: "Source Code Pro", "Courier New", monospace;
+  width: 10em;
+}
+
+div#cgit td.ls-mode {
+  font-family: "Source Code Pro", "Courier New", monospace;
+  width: 10em;
+}
+
+div#cgit table.blob {
+  margin-top: 0.5em;
+  border-top: solid 1px black;
+}
+
+div#cgit table.blob td.hashes,
+div#cgit table.blob td.lines {
+  margin: 0;
+  padding: 0 0 0 0.5em;
+  vertical-align: top;
+  color: black;
+}
+
+div#cgit table.blob td.linenumbers {
+  margin: 0;
+  padding: 0 0.5em 0 0.5em;
+  vertical-align: top;
+  text-align: right;
+  border-right: 1px solid gray;
+}
+
+div#cgit table.blob pre {
+  padding: 0;
+  margin: 0;
+}
+
+div#cgit table.blob td.linenumbers a,
+div#cgit table.ssdiff td.lineno a {
+  color: gray;
+  text-align: right;
+  text-decoration: none;
+}
+
+div#cgit table.blob td.linenumbers a:hover,
+div#cgit table.ssdiff td.lineno a:hover {
+  color: black;
+}
+
+div#cgit table.blame td.hashes,
+div#cgit table.blame td.lines,
+div#cgit table.blame td.linenumbers {
+  padding: 0;
+}
+
+div#cgit table.blame td.hashes div.alt,
+div#cgit table.blame td.lines div.alt {
+  padding: 0 0.5em 0 0.5em;
+}
+
+div#cgit table.blame td.linenumbers div.alt {
+  padding: 0 0.5em 0 0;
+}
+
+div#cgit table.blame div.alt:nth-child(even) {
+  background: #eee;
+}
+
+div#cgit table.blame div.alt:nth-child(odd) {
+  background: white;
+}
+
+div#cgit table.blame td.lines > div {
+  position: relative;
+}
+
+div#cgit table.blame td.lines > div > pre {
+  padding: 0 0 0 0.5em;
+  position: absolute;
+  top: 0;
+}
+
+div#cgit table.blame .oid {
+  font-size: 100%;
+}
+
+div#cgit table.bin-blob {
+  margin-top: 0.5em;
+  border: solid 1px black;
+}
+
+div#cgit table.bin-blob th {
+  font-family: "Source Code Pro", "Courier New", monospace;
+  white-space: pre;
+  border: solid 1px #777;
+  padding: 0.5em 1em;
+}
+
+div#cgit table.bin-blob td {
+  font-family: "Source Code Pro", "Courier New", monospace;
+  white-space: pre;
+  border-left: solid 1px #777;
+  padding: 0em 1em;
+}
+
+div#cgit table.nowrap td {
+  white-space: nowrap;
+}
+
+div#cgit table.commit-info {
+  border-collapse: collapse;
+  margin-top: 1.5em;
+}
+
+div#cgit div.cgit-panel {
+  float: right;
+  margin-top: 1.5em;
+}
+
+div#cgit div.cgit-panel table {
+  border-collapse: collapse;
+  border: solid 1px #aaa;
+  background-color: #eee;
+}
+
+div#cgit div.cgit-panel th {
+  text-align: center;
+}
+
+div#cgit div.cgit-panel td {
+  padding: 0.25em 0.5em;
+}
+
+div#cgit div.cgit-panel td.label {
+  padding-right: 0.5em;
+}
+
+div#cgit div.cgit-panel td.ctrl {
+  padding-left: 0.5em;
+}
+
+div#cgit table.commit-info th {
+  text-align: left;
+  font-weight: normal;
+  padding: 0.1em 1em 0.1em 0.1em;
+  vertical-align: top;
+}
+
+div#cgit table.commit-info td {
+  font-weight: normal;
+  padding: 0.1em 1em 0.1em 0.1em;
+}
+
+div#cgit div.commit-subject {
+  font-weight: bold;
+  font-size: 125%;
+  margin: 1.5em 0em 0.5em 0em;
+  padding: 0em;
+}
+
+div#cgit div.commit-msg {
+  white-space: pre;
+  font-family: "Source Code Pro", "Courier New", monospace;
+}
+
+div#cgit div.notes-header {
+  font-weight: bold;
+  padding-top: 1.5em;
+}
+
+div#cgit div.notes {
+  white-space: pre;
+  font-family: "Source Code Pro", "Courier New", monospace;
+  border: solid 1px #ee9;
+  background-color: #ffd;
+  padding: 0.3em 2em 0.3em 1em;
+  float: left;
+}
+
+div#cgit div.notes-footer {
+  clear: left;
+}
+
+div#cgit div.diffstat-header {
+  font-weight: bold;
+  padding-top: 1.5em;
+}
+
+div#cgit table.diffstat {
+  border-collapse: collapse;
+  border: solid 1px #aaa;
+  background-color: #eee;
+}
+
+div#cgit table.diffstat th {
+  font-weight: normal;
+  text-align: left;
+  text-decoration: underline;
+  padding: 0.1em 1em 0.1em 0.1em;
+  font-size: 100%;
+}
+
+div#cgit table.diffstat td {
+  padding: 0.2em 0.2em 0.1em 0.1em;
+  font-size: 100%;
+  border: none;
+}
+
+div#cgit table.diffstat td.mode {
+  white-space: nowrap;
+}
+
+div#cgit table.diffstat td span.modechange {
+  padding-left: 1em;
+  color: red;
+}
+
+div#cgit table.diffstat td.add a {
+  color: green;
+}
+
+div#cgit table.diffstat td.del a {
+  color: red;
+}
+
+div#cgit table.diffstat td.upd a {
+  color: blue;
+}
+
+div#cgit table.diffstat td.graph {
+  width: 500px;
+  vertical-align: middle;
+}
+
+div#cgit table.diffstat td.graph table {
+  border: none;
+}
+
+div#cgit table.diffstat td.graph td {
+  padding: 0px;
+  border: 0px;
+  height: 7pt;
+}
+
+div#cgit table.diffstat td.graph td.add {
+  background-color: #5c5;
+}
+
+div#cgit table.diffstat td.graph td.rem {
+  background-color: #c55;
+}
+
+div#cgit div.diffstat-summary {
+  color: #888;
+  padding-top: 0.5em;
+}
+
+div#cgit table.diff {
+  width: 100%;
+}
+
+div#cgit table.diff td {
+  font-family: "Source Code Pro", "Courier New", monospace;
+  white-space: pre;
+}
+
+div#cgit table.diff td div.head {
+  font-weight: bold;
+  margin-top: 1em;
+  color: black;
+}
+
+div#cgit table.diff td div.hunk {
+  color: #009;
+}
+
+div#cgit table.diff td div.add {
+  color: green;
+}
+
+div#cgit table.diff td div.del {
+  color: red;
+}
+
+div#cgit .oid {
+  font-family: "Source Code Pro", "Courier New", monospace;
+  font-size: 90%;
+}
+
+div#cgit .left {
+  text-align: left;
+}
+
+div#cgit .right {
+  text-align: right;
+}
+
+div#cgit table.list td.reposection {
+  font-style: italic;
+  color: #888;
+}
+
+div#cgit a.button {
+  font-size: 80%;
+  padding: 0em 0.5em;
+}
+
+div#cgit a.primary {
+  font-size: 100%;
+}
+
+div#cgit a.secondary {
+  font-size: 90%;
+}
+
+div#cgit td.toplevel-repo {
+}
+
+div#cgit table.list td.sublevel-repo {
+  padding-left: 1.5em;
+}
+
+div#cgit ul.pager {
+  list-style-type: none;
+  text-align: center;
+  margin: 1em 0em 0em 0em;
+  padding: 0;
+}
+
+div#cgit ul.pager li {
+  display: inline-block;
+  margin: 0.25em 0.5em;
+}
+
+div#cgit ul.pager a {
+  color: #777;
+}
+
+div#cgit ul.pager .current {
+  font-weight: bold;
+}
+
+div#cgit span.age-mins {
+  font-weight: bold;
+  color: #080;
+}
+
+div#cgit span.age-hours {
+  color: #080;
+}
+
+div#cgit span.age-days {
+  color: #040;
+}
+
+div#cgit span.age-weeks {
+  color: #444;
+}
+
+div#cgit span.age-months {
+  color: #888;
+}
+
+div#cgit span.age-years {
+  color: #bbb;
+}
+
+div#cgit span.insertions {
+  color: #080;
+}
+
+div#cgit span.deletions {
+  color: #800;
+}
+
+div#cgit div.footer {
+  margin-top: 0.5em;
+  text-align: center;
+  font-size: 80%;
+  color: #ccc;
+}
+
+div#cgit div.footer a {
+  color: #ccc;
+  text-decoration: none;
+}
+
+div#cgit div.footer a:hover {
+  text-decoration: underline;
+}
+
+div#cgit a.branch-deco {
+  color: #000;
+  margin: 0px 0.5em;
+  padding: 0px 0.25em;
+  background-color: #88ff88;
+  border: solid 1px #007700;
+}
+
+div#cgit a.tag-deco {
+  color: #000;
+  margin: 0px 0.5em;
+  padding: 0px 0.25em;
+  background-color: #ffff88;
+  border: solid 1px #777700;
+}
+
+div#cgit a.tag-annotated-deco {
+  color: #000;
+  margin: 0px 0.5em;
+  padding: 0px 0.25em;
+  background-color: #ffcc88;
+  border: solid 1px #777700;
+}
+
+div#cgit a.remote-deco {
+  color: #000;
+  margin: 0px 0.5em;
+  padding: 0px 0.25em;
+  background-color: #ccccff;
+  border: solid 1px #000077;
+}
+
+div#cgit a.deco {
+  color: #000;
+  margin: 0px 0.5em;
+  padding: 0px 0.25em;
+  background-color: #ff8888;
+  border: solid 1px #770000;
+}
+
+div#cgit div.commit-subject a.branch-deco,
+div#cgit div.commit-subject a.tag-deco,
+div#cgit div.commit-subject a.tag-annotated-deco,
+div#cgit div.commit-subject a.remote-deco,
+div#cgit div.commit-subject a.deco {
+  margin-left: 1em;
+  font-size: 75%;
+}
+
+div#cgit table.stats {
+  border: solid 1px black;
+  border-collapse: collapse;
+}
+
+div#cgit table.stats th {
+  text-align: left;
+  padding: 1px 0.5em;
+  background-color: #eee;
+  border: solid 1px black;
+}
+
+div#cgit table.stats td {
+  text-align: right;
+  padding: 1px 0.5em;
+  border: solid 1px black;
+}
+
+div#cgit table.stats td.total {
+  font-weight: bold;
+  text-align: left;
+}
+
+div#cgit table.stats td.sum {
+  color: #c00;
+  font-weight: bold;
+  /*	background-color: #eee; */
+}
+
+div#cgit table.stats td.left {
+  text-align: left;
+}
+
+div#cgit table.vgraph {
+  border-collapse: separate;
+  border: solid 1px black;
+  height: 200px;
+}
+
+div#cgit table.vgraph th {
+  background-color: #eee;
+  font-weight: bold;
+  border: solid 1px white;
+  padding: 1px 0.5em;
+}
+
+div#cgit table.vgraph td {
+  vertical-align: bottom;
+  padding: 0px 10px;
+}
+
+div#cgit table.vgraph div.bar {
+  background-color: #eee;
+}
+
+div#cgit table.hgraph {
+  border: solid 1px black;
+  width: 800px;
+}
+
+div#cgit table.hgraph th {
+  background-color: #eee;
+  font-weight: bold;
+  border: solid 1px black;
+  padding: 1px 0.5em;
+}
+
+div#cgit table.hgraph td {
+  vertical-align: middle;
+  padding: 2px 2px;
+}
+
+div#cgit table.hgraph div.bar {
+  background-color: #eee;
+  height: 1em;
+}
+
+div#cgit table.ssdiff {
+  width: 100%;
+}
+
+div#cgit table.ssdiff td {
+  font-size: 75%;
+  font-family: "Source Code Pro", "Courier New", monospace;
+  white-space: pre;
+  padding: 1px 4px 1px 4px;
+  border-left: solid 1px #aaa;
+  border-right: solid 1px #aaa;
+}
+
+div#cgit table.ssdiff td.add {
+  color: black;
+  background: #cfc;
+  min-width: 50%;
+}
+
+div#cgit table.ssdiff td.add_dark {
+  color: black;
+  background: #aca;
+  min-width: 50%;
+}
+
+div#cgit table.ssdiff span.add {
+  background: #cfc;
+  font-weight: bold;
+}
+
+div#cgit table.ssdiff td.del {
+  color: black;
+  background: #fcc;
+  min-width: 50%;
+}
+
+div#cgit table.ssdiff td.del_dark {
+  color: black;
+  background: #caa;
+  min-width: 50%;
+}
+
+div#cgit table.ssdiff span.del {
+  background: #fcc;
+  font-weight: bold;
+}
+
+div#cgit table.ssdiff td.changed {
+  color: black;
+  background: #ffc;
+  min-width: 50%;
+}
+
+div#cgit table.ssdiff td.changed_dark {
+  color: black;
+  background: #cca;
+  min-width: 50%;
+}
+
+div#cgit table.ssdiff td.lineno {
+  color: black;
+  background: #eee;
+  text-align: right;
+  width: 3em;
+  min-width: 3em;
+}
+
+div#cgit table.ssdiff td.hunk {
+  color: black;
+  background: #ccf;
+  border-top: solid 1px #aaa;
+  border-bottom: solid 1px #aaa;
+}
+
+div#cgit table.ssdiff td.head {
+  border-top: solid 1px #aaa;
+  border-bottom: solid 1px #aaa;
+}
+
+div#cgit table.ssdiff td.head div.head {
+  font-weight: bold;
+  color: black;
+}
+
+div#cgit table.ssdiff td.foot {
+  border-top: solid 1px #aaa;
+  border-left: none;
+  border-right: none;
+  border-bottom: none;
+}
+
+div#cgit table.ssdiff td.space {
+  border: none;
+}
+
+div#cgit table.ssdiff td.space div {
+  min-height: 3em;
+}
+div#cgit span.libravatar img.onhover {
+  display: none;
+  border: 1px solid gray;
+  padding: 0px;
+  -webkit-border-radius: 4px;
+  -moz-border-radius: 4px;
+  border-radius: 4px;
+  width: 128px;
+  height: 128px;
+}
+
+div#cgit span.libravatar img.inline {
+  -webkit-border-radius: 3px;
+  -moz-border-radius: 3px;
+  border-radius: 3px;
+  width: 13px;
+  height: 13px;
+  margin-right: 0.2em;
+  opacity: 0.6;
+}
+
+div#cgit span.libravatar:hover > img.onhover {
+  display: block;
+  position: absolute;
+  margin-left: 1.5em;
+  background-color: #eeeeee;
+  box-shadow: 2px 2px 7px rgba(100, 100, 100, 0.75);
+}
+
+/*
+   Color overrides for browsers running in dark mode.
+   "only all and ..." forces very old browsers to ignore the media query:
+   https://developer.mozilla.org/en-US/docs/Web/CSS/Media_Queries/Using_media_queries#improving_compatibility_with_older_browsers
+*/
+:root {
+  color-scheme: light dark;
+}
+@media only all and (prefers-color-scheme: dark) {
+  html,
+  div#cgit {
+    color: #eee;
+    background: #171717;
+  }
+  div#cgit a {
+    color: #3af;
+  }
+  div#cgit .diffstat-header a {
+    color: #28d;
+  }
+  div#cgit table#header td.main a {
+    color: #eee;
+  }
+  div#cgit table#header td.sub {
+    color: #999;
+  }
+  div#cgit table.tabs {
+    border-bottom-color: #444;
+  }
+  div#cgit table.tabs td a {
+    color: #888;
+  }
+  div#cgit table.tabs td a.active {
+    color: #fff;
+    background-color: #444;
+  }
+  div#cgit div.path {
+    color: #eee;
+    background-color: #333;
+  }
+  div#cgit div.content {
+    border-bottom-color: #bbb;
+  }
+  div#cgit table.list tr {
+    background: #171717;
+  }
+  div#cgit table.list tr.logheader {
+    background: #171717;
+  }
+  div#cgit table.list tr:nth-child(even) {
+    background: #171717;
+  }
+  div#cgit table.list tr:nth-child(odd) {
+    background: #1f1f1f;
+  }
+  div#cgit table.list tr:hover {
+    background: #333;
+  }
+  div#cgit table.list tr.nohover {
+    background: #171717;
+  }
+  div#cgit table.list tr.nohover:hover {
+    background: #171717;
+  }
+  div#cgit table.list tr.nohover-highlight:hover:nth-child(even) {
+    background: #171717;
+  }
+  div#cgit table.list tr.nohover-highlight:hover:nth-child(odd) {
+    background: #1f1f1f;
+  }
+  div#cgit table.list td.commitgraph .column1 {
+    color: #f55;
+  }
+  div#cgit table.list td.commitgraph .column2 {
+    color: #5f5;
+  }
+  div#cgit table.list td.commitgraph .column3 {
+    color: #ff5;
+  }
+  div#cgit table.list td.commitgraph .column4 {
+    color: #55f;
+  }
+  div#cgit table.list td.commitgraph .column5 {
+    color: #f5f;
+  }
+  div#cgit table.list td.commitgraph .column6 {
+    color: #5ff;
+  }
+  div#cgit table.list td a {
+    color: #eee;
+  }
+  div#cgit table.list td a.ls-dir {
+    color: #28d;
+  }
+  div#cgit table.list td a:hover {
+    color: #3af;
+  }
+  div#cgit table#downloads {
+    border-color: #888;
+  }
+  div#cgit table#downloads th {
+    background-color: #333;
+  }
+  div#cgit div#blob {
+    border-color: #eee;
+  }
+  div#cgit table.blob {
+    border-top-color: #eee;
+  }
+  div#cgit table.blob td.hashes,
+  div#cgit table.blob td.lines {
+    color: #eee;
+  }
+  div#cgit table.blob td.linenumbers {
+    border-right-color: gray;
+  }
+  div#cgit table.blob td.linenumbers a,
+  div#cgit table.ssdiff td.lineno a {
+    color: gray;
+  }
+  div#cgit table.blob td.linenumbers a:hover,
+  div#cgit table.ssdiff td.lineno a:hover {
+    color: #eee;
+  }
+  div#cgit table.blame div.alt:nth-child(even) {
+    background: #171717;
+  }
+  div#cgit table.blame div.alt:nth-child(odd) {
+    background: #1f1f1f;
+  }
+  div#cgit table.bin-blob {
+    border-color: #eee;
+  }
+  div#cgit table.bin-blob th {
+    border-color: #888;
+  }
+  div#cgit table.bin-blob td {
+    border-left-color: #888;
+  }
+  div#cgit div.cgit-panel table {
+    border-color: #555;
+    background-color: #282828;
+  }
+  div#cgit div.notes {
+    border-color: #661;
+    background-color: #220;
+  }
+  div#cgit table.diffstat {
+    border-color: #555;
+    background-color: #282828;
+  }
+  div#cgit table.diffstat td span.modechange {
+    color: #c66;
+  }
+  div#cgit table.diffstat td.add a {
+    color: #6c6;
+  }
+  div#cgit table.diffstat td.del a {
+    color: #c66;
+  }
+  div#cgit table.diffstat td.upd a {
+    color: #3af;
+  }
+  div#cgit table.diffstat td.graph td.add {
+    background-color: #3a3;
+  }
+  div#cgit table.diffstat td.graph td.rem {
+    background-color: #a33;
+  }
+  div#cgit div.diffstat-summary {
+    color: #777;
+  }
+  div#cgit table.diff td div.head {
+    color: #eee;
+  }
+  div#cgit table.diff td div.hunk {
+    color: #28d;
+  }
+  div#cgit table.diff td div.add {
+    color: #6c6;
+  }
+  div#cgit table.diff td div.del {
+    color: #c66;
+  }
+  div#cgit table.list td.reposection {
+    color: #777;
+  }
+  div#cgit ul.pager a {
+    color: #888;
+  }
+  div#cgit span.age-mins {
+    color: #7f7;
+  }
+  div#cgit span.age-hours {
+    color: #7f7;
+  }
+  div#cgit span.age-days {
+    color: #9d9;
+  }
+  div#cgit span.age-weeks {
+    color: #bbb;
+  }
+  div#cgit span.age-months {
+    color: #888;
+  }
+  div#cgit span.age-years {
+    color: #666;
+  }
+  div#cgit span.insertions {
+    color: #7f7;
+  }
+  div#cgit span.deletions {
+    color: #e33;
+  }
+  div#cgit div.footer {
+    color: #555;
+  }
+  div#cgit div.footer a {
+    color: #555;
+  }
+  div#cgit a.branch-deco {
+    color: #fff;
+    background-color: #361;
+    border-color: #3b2;
+  }
+  div#cgit a.tag-deco {
+    color: #fff;
+    background-color: #650;
+    border-color: #ba3;
+  }
+  div#cgit a.tag-annotated-deco {
+    color: #fff;
+    background-color: #840;
+    border-color: #b96;
+  }
+  div#cgit a.remote-deco {
+    color: #fff;
+    background-color: #348;
+    border-color: #67c;
+  }
+  div#cgit a.deco {
+    color: #fff;
+    background-color: #922;
+    border-color: #d55;
+  }
+  div#cgit a.branch-deco:hover,
+  div#cgit table.list td a.branch-deco:hover,
+  div#cgit a.tag-deco:hover,
+  div#cgit table.list td a.tag-deco:hover,
+  div#cgit a.tag-annotated-deco:hover,
+  div#cgit table.list td a.tag-annotated-deco:hover,
+  div#cgit a.remote-deco:hover,
+  div#cgit table.list td a.remote-deco:hover,
+  div#cgit a.deco:hover,
+  div#cgit table.list td a.deco:hover {
+    color: #fff;
+  }
+  div#cgit table.stats {
+    border-color: #555;
+  }
+  div#cgit table.stats th {
+    background-color: #333;
+    border-color: #555;
+  }
+  div#cgit table.stats td {
+    border-color: #555;
+  }
+  div#cgit table.stats td.sum {
+    color: #5c7e9b;
+  }
+  div#cgit table.vgraph {
+    border-color: #eee;
+  }
+  div#cgit table.vgraph th {
+    background-color: #1f1f1f;
+    border-color: black;
+  }
+  div#cgit table.vgraph div.bar {
+    background-color: #1f1f1f;
+  }
+  div#cgit table.hgraph {
+    border-color: #eee;
+  }
+  div#cgit table.hgraph th {
+    background-color: #1f1f1f;
+    border-color: #eee;
+  }
+  div#cgit table.hgraph div.bar {
+    background-color: #1f1f1f;
+  }
+  div#cgit table.ssdiff td {
+    border-left-color: #555;
+    border-right-color: #555;
+  }
+  div#cgit table.ssdiff td.add {
+    color: #eee;
+    background: #353;
+  }
+  div#cgit table.ssdiff td.add_dark {
+    color: #eee;
+    background: #030;
+  }
+  div#cgit table.ssdiff span.add {
+    background: #030;
+  }
+  div#cgit table.ssdiff td.del {
+    color: #eee;
+    background: #533;
+  }
+  div#cgit table.ssdiff td.del_dark {
+    color: #eee;
+    background: #411;
+  }
+  div#cgit table.ssdiff span.del {
+    background: #300;
+  }
+  div#cgit table.ssdiff td.changed {
+    color: #eee;
+    background: #553;
+  }
+  div#cgit table.ssdiff td.changed_dark {
+    color: #eee;
+    background: #330;
+  }
+  div#cgit table.ssdiff td.lineno {
+    color: #eee;
+    background: #1f1f1f;
+  }
+  div#cgit table.ssdiff td.hunk {
+    color: #eee;
+    background: #0d3d64;
+    border-top-color: #555;
+    border-bottom-color: #555;
+  }
+  div#cgit table.ssdiff td.head {
+    border-top-color: #555;
+    border-bottom-color: #555;
+  }
+  div#cgit table.ssdiff td.head div.head {
+    color: #eee;
+  }
+  div#cgit table.ssdiff td.foot {
+    border-top-color: #555;
+  }
+}
+/* Style definition file generated by highlight 3.13, http://www.andre-simon.de/ */
+
+/* Highlighting theme: Kwrite Editor */
+
+body.hl {
+  background-color: #e0eaee;
+}
+pre.hl {
+  color: #000000;
+  background-color: #e0eaee;
+  font-size: 10pt;
+  font-family: "Courier New", monospace;
+}
+.hl.num {
+  color: #b07e00;
+}
+.hl.esc {
+  color: #ff00ff;
+}
+.hl.str {
+  color: #bf0303;
+}
+.hl.pps {
+  color: #818100;
+}
+.hl.slc {
+  color: #838183;
+  font-style: italic;
+}
+.hl.com {
+  color: #838183;
+  font-style: italic;
+}
+.hl.ppc {
+  color: #008200;
+}
+.hl.opt {
+  color: #000000;
+}
+.hl.ipl {
+  color: #0057ae;
+}
+.hl.lin {
+  color: #555555;
+}
+.hl.kwa {
+  color: #000000;
+  font-weight: bold;
+}
+.hl.kwb {
+  color: #0057ae;
+}
+.hl.kwc {
+  color: #000000;
+  font-weight: bold;
+}
+.hl.kwd {
+  color: #010181;
+}
+
diff --git a/modules/server/cgit/static/favicon.png b/modules/server/cgit/static/favicon.png
new file mode 100755
index 0000000..a9c1396
--- /dev/null
+++ b/modules/server/cgit/static/favicon.png
diff --git a/modules/server/cgit/static/logo.png b/modules/server/cgit/static/logo.png
new file mode 100755
index 0000000..a9c1396
--- /dev/null
+++ b/modules/server/cgit/static/logo.png
diff --git a/modules/server/default.nix b/modules/server/default.nix
new file mode 100644
index 0000000..60b7681
--- /dev/null
+++ b/modules/server/default.nix
@@ -0,0 +1,53 @@
+{
+	imports = [
+		./adguard
+		./calibre
+		./cgit
+		./forgejo
+		./gemini
+		./grafana
+		./immich
+		./jellyfin
+		./ollama
+		./searx
+	];
+	
+	services = {
+		nginx = {
+			enable = true;
+	    recommendedGzipSettings = true;
+	    recommendedOptimisation = true;
+	    recommendedProxySettings = true;
+		};
+
+		sshguard.enable = true;
+
+		openssh = {
+		  enable  = false;
+		  settings = {
+		    PermitRootLogin = false;
+		    PasswordAuthentication = false;
+		    AllowTcpForwarding = false;
+		    X11Forwarding = false;
+		  };
+		};
+	};
+
+	networking = {
+		firewall.allowedTCPPorts = [ 80 ];
+
+		hosts = {
+		  "127.0.0.1" = [
+		  	"library.internal"
+		  	"media.internal"
+		  	"photos.internal"
+		  	"chat.internal"
+		  	"ollama.internal"
+		  	"code.internal"
+		  	"forge.internal"
+		  	"search.internal"
+		  	"monitor.internal"
+		  ];
+		};
+	};
+}
diff --git a/modules/server/forgejo/default.nix b/modules/server/forgejo/default.nix
new file mode 100644
index 0000000..cf611ce
--- /dev/null
+++ b/modules/server/forgejo/default.nix
@@ -0,0 +1,42 @@
+{
+  services = {
+    forgejo = {
+      enable = true;
+
+      dump.enable = true;
+      
+      settings = {
+        DEFAULT = {
+          APP_NAME = "apothēke";
+          RUN_MODE = "prod";
+          APP_SLOGAN = "a place for storing objects.";
+          RUN_USER = "forgejo";
+        };
+
+        server = {
+          HTTP_ADDR = "forge.internal";
+          HTTP_PORT = 3000;
+          DISABLE_SSH = true;
+        };
+
+        service = {
+          DISABLE_REGISTRATION = false;          
+          DEFAULT_KEEP_EMAIL_PRIVATE = true;
+        };
+
+        lfs = {
+          enable = true;
+        };
+      };
+    };
+
+    nginx = {
+      virtualHosts."forge.internal" = {
+        locations."/" = {
+          proxyPass = "http://127.0.0.1:3000";
+          proxyWebsockets = true;
+        };
+      };
+    };
+  };
+}
diff --git a/modules/server/gemini/default.nix b/modules/server/gemini/default.nix
new file mode 100644
index 0000000..d59f65f
--- /dev/null
+++ b/modules/server/gemini/default.nix
@@ -0,0 +1,57 @@
+{ config, pkgs, lib, ... }:
+{
+  services.agate = {
+    enable = true;
+
+    hostnames = [ "aethrvmn.gr" ];
+    addresses = [ "0.0.0.0:1965" ];
+    language = "en";
+    contentDir = "/srv/gemini";
+  };
+
+  networking.firewall.allowedTCPPorts = [ 1965 ];
+  
+  users = {
+    groups.agate = { };
+    users = {
+      agate = {
+        isSystemUser = true;
+        description = "gemini user";
+        group = "agate";
+        home = "/srv/gemini";
+        createHome = true;
+        shell = "${pkgs.git}/bin/git-shell";
+      };
+    };
+  };
+
+  systemd = {
+    # set service
+    services."gemini" = {
+      description = "Update Gemini site from repo";
+
+      script = ''
+        if [ -d /srv/gemini/.git ]; then
+          ${pkgs.git}/bin/git -C /srv/gemini pull
+        else
+          ${pkgs.git}/bin/git clone https://apo.theke.ml/aethrvmn/gemini.git /srv/gemini 
+        fi
+      '';
+
+      serviceConfig = {
+        Type = "oneshot";
+        User = "agate";
+      };
+    };
+
+    timers."gemini" = {
+      description = "Hourly Gemini-site update";
+      wantedBy = [ "timers.target" ];
+
+      timerConfig = {
+        OnCalendar = "hourly";
+        Persistent = true;
+      };  
+    };
+  };
+}
diff --git a/modules/server/grafana/default.nix b/modules/server/grafana/default.nix
new file mode 100644
index 0000000..056221a
--- /dev/null
+++ b/modules/server/grafana/default.nix
@@ -0,0 +1,23 @@
+{ config, pkgs, ... }:
+{
+  services = {
+    grafana = {
+      enable = false;
+      settings.server = {
+        domain = "monitor.internal";
+        http_port = 3050;
+        http_addr = "127.0.0.1";
+      };
+    };
+
+    nginx = {
+      virtualHosts."monitor.internal" = {
+        locations."/" = {
+          proxyPass = "http://127.0.0.1:3050";
+          proxyWebsockets = true;
+        };
+      };
+    };
+  };
+}
+
diff --git a/modules/server/immich/default.nix b/modules/server/immich/default.nix
new file mode 100644
index 0000000..fac75f9
--- /dev/null
+++ b/modules/server/immich/default.nix
@@ -0,0 +1,28 @@
+{ config, lib, ... }:
+{
+  services = {
+    # Immich setup
+    immich = {
+      enable = true;
+      openFirewall = false;
+
+      host = "127.0.0.1";
+      port = 3010;
+    };
+
+    nginx = {
+      virtualHosts."photos.internal" = {
+        locations."/" = {
+          proxyPass = "http://127.0.0.1:3010";
+          proxyWebsockets = true;
+        };
+      };
+    };
+  };
+
+  hardware.graphics.enable = lib.mkForce true;
+
+  users.users.immich = {
+    extraGroups = [ "video" "render" ];
+  };
+}
diff --git a/modules/server/jellyfin/default.nix b/modules/server/jellyfin/default.nix
new file mode 100644
index 0000000..424b4d8
--- /dev/null
+++ b/modules/server/jellyfin/default.nix
@@ -0,0 +1,27 @@
+{ config, pkgs, lib, ...}:
+{
+  environment.systemPackages = with pkgs; [
+    jellyfin
+    jellyfin-web
+    jellyfin-ffmpeg
+    logrotate
+  ];
+
+  services = {
+    jellyfin = {
+      enable = true;
+      openFirewall = false;
+    };
+
+    logrotate.enable = true;
+    
+    nginx = {
+      virtualHosts."media.internal" = {
+        locations."/" = {
+          proxyPass = "http://127.0.0.1:8096";
+          proxyWebsockets = true;
+        };
+      };
+    };
+  };
+}
diff --git a/modules/server/ollama/default.nix b/modules/server/ollama/default.nix
new file mode 100644
index 0000000..3b99daf
--- /dev/null
+++ b/modules/server/ollama/default.nix
@@ -0,0 +1,69 @@
+{ config, pkgs, lib, ... }:
+{
+  services = {
+    ollama = {
+      enable = true;
+      loadModels = [
+        "qwen3:14b"
+        "gemma3:12b"
+        "gpt-oss:20b"
+        "deepseek-r1:14b"
+        "phi4-reasoning:14b"
+      ];
+
+      acceleration = "rocm";
+      environmentVariables = {
+        HCC_AMDGPU_TARGET = "gfx1031";
+      };
+      rocmOverrideGfx = "10.3.0";
+    };
+
+    open-webui = {
+      enable = true;
+      port = 3030;
+      environment = {
+        ANONYMIZED_TELEMETRY = "False";
+        DO_NOT_TRACK = "True";
+        SCARF_NO_ANALYTICS = "True";
+        WEBUI_AUTH = "False";
+        OLLAMA_API_BASE_URL = "http://localhost:11434";
+
+        #dir stuff
+    		STATIC_DIR = "${config.services.open-webui.stateDir}/static";
+    		DATA_DIR = "${config.services.open-webui.stateDir}/data";
+    		HF_HOME = "${config.services.open-webui.stateDir}/hf_home";
+    		SENTENCE_TRANSFORMERS_HOME = "${config.services.open-webui.stateDir}/transformers_home";
+      };
+    };
+
+    xserver.videoDrivers = [ "amdgpu" ];
+
+    nginx.virtualHosts = {
+      "chat.internal" = {
+        locations."/" = {
+          proxyPass = "http://127.0.0.1:3030";
+          proxyWebsockets = true;
+        };
+      };
+
+      "ollama.internal" = {
+        locations."/" = {
+          proxyPass = "http://127.0.0.1:11434";
+          proxyWebsockets = true;
+        };
+      };
+    };
+  };
+
+  nixpkgs.config = {
+    allowUnfree = lib.mkForce true;
+    rocmSupport = lib.mkForce true;
+    rocmTargets = [ "gfx1031" ];
+  };
+
+  environment.systemPackages = with pkgs; [
+    rocmPackages.rocminfo
+    rocmPackages.rocm-smi
+    rocmPackages.hipcc
+  ];
+}