- Import kitty.nix in wayland.nix
- Change sway terminal keybinding to open kitty

Allows kitty graphics protocol to work inside tmux sessions.

Uses forked yt-x with support for full path extensions (-x flag).
Passes our custom mpv (with quality-menu, sponsorblock, etc.) via
extension file in nix store.

PR upstream: https://github.com/Benexl/yt-x/pull/130

- Font configuration (IosevkaTerm Nerd Font)
- Remote control enabled for runtime theme switching
- Light and dark theme colors in /etc/themes/
- Integrates with switch-theme for dynamic color changes

This reverts commit 1f1a5b3b98c12b8f8b3cfa67f63d8d6be5cde9f1.

this broke nix shell and nix=shell --command zsh

Use folder-hooks to set alternates per-mailbox so identities don't overlap.
This prevents mutt from thinking you're replying to yourself when both
sender and recipient are in your various email domains.

Switch from pass to rbw for retrieving the c-base mail account password.

Allows HedgeDoc editors to maintain focus when clicked, fixing the issue where text input was interrupted after 1 second due to Tridactyl blocking autofocus attempts.

Using the stable system path instead of a hardcoded store path means
BROWSER automatically points to the current system's firefox after rebuild.

Ensures new shells get the latest environment variables even when spawned
from a long-running sway session that was started before nixos-rebuild.

The extraConfig option has been removed from NixOS.

The rule was masquerading ALL outgoing IPv4 traffic, which caused
TCP connections to fail while ICMP worked. Jool already does SNAT
with the pool4 address for NAT64 traffic, so no separate masquerade
is needed.

Converts embedded images to base64 data URIs so they display correctly.

- SSH fallback now uses msmtp to submit via localhost:25
- This goes through exim daemon which has DKIM credentials
- Add msmtp to exim-smarthost for local submission
- Expose msmtp wrapper via passthru

- --ascii now accepts optional SIZE parameter (1-20, default 6)
- shader generated from template with scale value
- fixed exclusive_caps for raw camera device

- DNS: mail.lassul.us now points to neoprism
- neoprism: use exim-smarthost.nix with internet-aliases
- mutt: send via neoprism.r instead of prism.r
- riot.nix: remove duplicate exim-smarthost import
- remove krebspage (git repo was lost)

- wiregrill.nix: filter out hosts with null wireguard pubkeys
- backup.nix: remove postgresqlBackup (no postgresql running)

- Remove ubik machine (DNS no longer points to us)
- Remove ubik-host.nix container config
- Remove sqlBackup.nix and mysql-backup module (no databases left)
- Remove usershadow module (was only used by removed exim auth)
- Clean up domsen.nix: remove dead domains, mail, users, backups
- Clean up util.nix: remove unused serveWordpress/serveOwncloud
- Clean up internet-gateway.nix: remove ubik domain routing
- Clean up exim-smarthost.nix: remove dead wordpress alias
- Clean up prism: remove mail.ubikmedia.eu proxy, usershadow

Domains removed (DNS pointed elsewhere):
- ubikmedia.de/eu, apanowicz.de, beesmooth.ch, jarugadesign.de
- jla-trading.com, alewis.de, freemonkey.art, aldonasiech.com
- karlaskop.de, youthtube.xyz, joemisch.com, weirdwednesday.de

Only illustra.de remains active on prism.

Uses services.upower for suspend on critical battery and a lightweight
systemd user service for espeak warnings. Removes krebs.power-action
dependency, special user, and sudo hacks.

Import moved from desktop configs to individual machine configs
(xerxes, ignavia) for explicit control.

- wrap firefox with native messaging hosts (tridactyl-native)
- add tridactylrc with superignore for my.sevdesk.de
- update browsers.nix to use the new firefox package

The libretro Dolphin core fails to initialize shader compiler worker
threads because CreateSharedContext() returns nullptr (libretro API
doesn't support creating additional GL contexts).

This patch disables background shader compilation in libretro builds,
forcing synchronous compilation which works correctly.

video-webcam: stream video/gif files to v4l2loopback with proper
aspect ratio handling (letterboxing instead of cropping)

android-webcam: remove lsmod check that failed in nix wrapper,
use device file checks instead

Uses scrcpy to stream phone camera via v4l2loopback.
Optional --ascii flag enables GPU-accelerated ASCII art filter
via ffmpeg libplacebo shader.

- Demo Disc 2020 (Feb 2020)
- Demo Disc 2021 (Mar 2021)
- Spectral Mall (Aug 2022)
- Flipside Frights (Jan 2025)

Refactored to use shared mk-haunted-ps1.nix builder.
All games run via umu-launcher with GE-Proton.

Add games/ folder with legacyPackages.games exposure.
Uses umu-launcher with GE-Proton for Windows game compatibility.

- Remove exec so cleanup trap runs and kills tor on exit
- Fix SSH wrapper heredoc to use env var instead of unexpanded $SOCKS_PORT
- Add missing else branch for non-Darwin torsocks execution

Allows choosing between faster small models (~40MB) and more accurate
medium (~128MB) or large (~1-2GB) models via -s/--size flag.

- Use Router Advertisements + SLAAC instead of pre-computed IPv6 addresses
- Add RDNSS to advertise DNS64 resolver to containers
- Add PREF64 option to advertise NAT64 prefix (RFC 8781)
- Fix MASQUERADE rule breaking localhost DNS (exclude 127.0.0.0/8)
- Add local-zone for NAT64 reverse DNS to prevent PTR lookup timeouts
- Remove nix-hashlib dependency (no longer needed with SLAAC)

- Add dns64-synthall to synthesize NAT64 addresses even for sites with AAAA
- Add jool-pool4-update service to configure pool4 with host's current IPv4
- Enable IPv4 forwarding for NAT64 translated packets
- Add IPv4 FORWARD and MASQUERADE rules for NAT64 traffic
- Fix krebs.iptables rules to use explicit v4/v6 flags
- Update virtulus container to use fd00:c700:: prefix and local DNS64