fix(lint): nixfmt the whole tree

boot.nix

@@ -1,4 +1,11 @@
-{ config, pkgs, lib, myLib, options, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  myLib,
+  options,
+  ...
+}:
 with lib;
 let
   customKernelPatches = {
@@ -41,43 +48,81 @@ let
       patch = ./remove-kernel-drm.patch;
     };
 
-    
     backports = {
     };
 
-    optimizeForCPUArch = arch: let
+    optimizeForCPUArch =
+      arch:
+      let
         archConfigMap = {
-        "k8" = "K8"; "opteron" = "K8"; "athlon64" = "K8"; "athlon-fx" = "K8";
+          "k8" = "K8";
-        "k8-sse3" = "K8SSE3"; "opteron-sse3" = "K8SSE3"; "athlon64-sse3" = "K8SSE3";
+          "opteron" = "K8";
-        "znver1" = "ZEN"; "znver2" = "ZEN2"; "znver3" = "ZEN3"; "znver4" = "ZEN3";
+          "athlon64" = "K8";
-        "bdver1" = "BULLDOZER"; "bdver2" = "PILEDRIVER"; "bdver3" = "STEAMROLLER"; "bdver4" = "EXCAVATOR";
+          "athlon-fx" = "K8";
-        "barcelona" = "BARCELONA"; "amdfam10" = "BARCELONA";
+          "k8-sse3" = "K8SSE3";
-        "btver1" = "BOBCAT"; "btver2" = "JAGUAR";
+          "opteron-sse3" = "K8SSE3";
+          "athlon64-sse3" = "K8SSE3";
+          "znver1" = "ZEN";
+          "znver2" = "ZEN2";
+          "znver3" = "ZEN3";
+          "znver4" = "ZEN3";
+          "bdver1" = "BULLDOZER";
+          "bdver2" = "PILEDRIVER";
+          "bdver3" = "STEAMROLLER";
+          "bdver4" = "EXCAVATOR";
+          "barcelona" = "BARCELONA";
+          "amdfam10" = "BARCELONA";
+          "btver1" = "BOBCAT";
+          "btver2" = "JAGUAR";
 
-        "rocketlake" = "ROCKETLAKE"; "alderlake" = "ALDERLAKE";
+          "rocketlake" = "ROCKETLAKE";
-        "sapphirerapids" = "SAPPHIRERAPIDS"; "tigerlake" = "TIGERLAKE"; "cooperlake" = "COOPERLAKE";
+          "alderlake" = "ALDERLAKE";
-        "cascadelake" = "CASCADELAKE"; "icelake-server" = "ICELAKE"; "icelake-client" = "ICELAKE";
+          "sapphirerapids" = "SAPPHIRERAPIDS";
-        "cannonlake" = "CANNONLAKE"; "skylake-avx512" = "SKYLAKEX";
+          "tigerlake" = "TIGERLAKE";
-        "tremont" = "GOLDMONTPLUS"; "goldmont-plus" = "GOLDMONTPLUS"; "goldmont" = "GOLDMONT";
+          "cooperlake" = "COOPERLAKE";
-        "silvermont" = "SILVERMONT"; "bonnel" = "GENERIC_CPU"; "skylake" = "SKYLAKE";
+          "cascadelake" = "CASCADELAKE";
-        "broadwell" = "BROADWELL"; "haswell" = "HASWELL";
+          "icelake-server" = "ICELAKE";
-        "ivybridge" = "IVYBRIDGE"; "sandybridge" = "SANDYBRIDGE";
+          "icelake-client" = "ICELAKE";
-        "westmere" = "WESTMERE"; "nehalem" = "NEHALEM";
+          "cannonlake" = "CANNONLAKE";
+          "skylake-avx512" = "SKYLAKEX";
+          "tremont" = "GOLDMONTPLUS";
+          "goldmont-plus" = "GOLDMONTPLUS";
+          "goldmont" = "GOLDMONT";
+          "silvermont" = "SILVERMONT";
+          "bonnel" = "GENERIC_CPU";
+          "skylake" = "SKYLAKE";
+          "broadwell" = "BROADWELL";
+          "haswell" = "HASWELL";
+          "ivybridge" = "IVYBRIDGE";
+          "sandybridge" = "SANDYBRIDGE";
+          "westmere" = "WESTMERE";
+          "nehalem" = "NEHALEM";
           "core2" = "CORE2";
-        "nocona" = "PSC"; "prescott" = "PSC"; "pentium4m" = "PSC"; "pentium4" = "PSC";
+          "nocona" = "PSC";
+          "prescott" = "PSC";
+          "pentium4m" = "PSC";
+          "pentium4" = "PSC";
 
-        "nano-3000" = "GENERIC_CPU2"; "nano-x2" = "GENERIC_CPU2"; "nano-x4" = "GENERIC_CPU2";
+          "nano-3000" = "GENERIC_CPU2";
+          "nano-x2" = "GENERIC_CPU2";
+          "nano-x4" = "GENERIC_CPU2";
 
           "lujiazui" = "GENERIC_CPU2";
 
-        "native" = "NATIVE_INTEL"; "x86-64-v2" = "GENERIC_CPU2"; "x86-64-v3" = "GENERIC_CPU3"; "x86-64-v4" = "GENERIC_CPU4";
+          "native" = "NATIVE_INTEL";
+          "x86-64-v2" = "GENERIC_CPU2";
+          "x86-64-v3" = "GENERIC_CPU3";
+          "x86-64-v4" = "GENERIC_CPU4";
         };
 
-      archToConfig = arch:
+        archToConfig =
-        if (hasAttr arch archConfigMap) then archConfigMap."${arch}"
+          arch:
-        else trace "Warning: '${arch}' not recognized, building for generic CPU" "GENERIC_CPU"
+          if (hasAttr arch archConfigMap) then
-      ;
+            archConfigMap."${arch}"
-    in {
+          else
+            trace "Warning: '${arch}' not recognized, building for generic CPU" "GENERIC_CPU";
+      in
+      {
         name = "optimize-for-${arch}";
         patch = null;
         extraConfig = ''
@@ -86,13 +131,21 @@ let
       };
   };
 
-  toCmdlineValue = v: if (isBool v) then (if v then "y" else "n")
+  toCmdlineValue =
-                        else if (isInt v || isString v) then (toString v)
+    v:
-                        else if (isList v) then (concatStringsSep "," v)
+    if (isBool v) then
-                        else throw "Invalid value for kernel cmdline parameter";
+      (if v then "y" else "n")
+    else if (isInt v || isString v) then
+      (toString v)
+    else if (isList v) then
+      (concatStringsSep "," v)
+    else
+      throw "Invalid value for kernel cmdline parameter";
 
-  toCmdlineList = set: mapAttrsToList
+  toCmdlineList =
-      (key: value:
+    set:
+    mapAttrsToList (
+      key: value:
       if (isNull value) then
         null
       else if (value == "") then
@@ -101,18 +154,20 @@ let
         "${key}=${toCmdlineValue value}"
     ) set;
 
-  isXanmod = kernel: ! isNull (strings.match ".*(xanmod).*" kernel.modDirVersion);
+  isXanmod = kernel: !isNull (strings.match ".*(xanmod).*" kernel.modDirVersion);
 
   kernelVersionOlder = ver: versionOlder cfg.kernel.package.version ver;
 
   cfg = config.aviallon.boot;
   generalCfg = config.aviallon.general;
-  allowUnfree = (types.isType types.attrs config.nixpkgs.config)
+  allowUnfree =
+    (types.isType types.attrs config.nixpkgs.config)
     && (hasAttr "allowUnfree" config.nixpkgs.config)
     && (getAttr "allowUnfree" config.nixpkgs.config);
 
   cpuConfig = config.aviallon.general.cpu;
-in {
+in
+{
 
   options.aviallon.boot = {
     enable = mkOption {
@@ -128,7 +183,6 @@ in {
       type = types.bool;
     };
 
-    
     x32abi.enable = mkEnableOption "X32 kernel ABI";
     kvdo.enable = mkEnableOption "dm-kvdo kernel module";
     rtGroupSched.enable = mkEnableOption "RT cgroups"; # Breaks standard way of setting RT sched policy to processes
@@ -161,11 +215,18 @@ in {
     cmdline = mkOption {
       description = "Kernel params as attributes (instead of list). Set a parameter to `null` to remove it.";
       default = { };
-      example = { "i915.fastboot" = true; };
+      example = {
-      type = with types; lazyAttrsOf (
+        "i915.fastboot" = true;
-        nullOr (
+      };
-          oneOf [ bool int str (listOf str) ]
+      type =
-        )
+        with types;
+        lazyAttrsOf (
+          nullOr (oneOf [
+            bool
+            int
+            str
+            (listOf str)
+          ])
         );
     };
 
@@ -179,16 +240,20 @@ in {
 
       addAttributes = mkOption {
         description = "Merge specified attributes to kernel derivation (via special overideAttrs)";
-        default = {};
+        default = { };
         type = with types; attrs;
-        example = { KCFLAGS = "-Wall"; };
+        example = {
+          KCFLAGS = "-Wall";
+        };
       };
 
       addOptimizationAttributes = mkOption {
         description = "Merge specified attributes to kernel derivation IF aviallon.optimizations.enabled is true";
-        default = {};
+        default = { };
         type = with types; attrs;
-        example = { KCFLAGS = "-O3 -fipa-pta"; };
+        example = {
+          KCFLAGS = "-O3 -fipa-pta";
+        };
       };
     };
 
@@ -196,22 +261,28 @@ in {
   };
 
   imports = [
-    ( mkRemovedOptionModule  [ "aviallon" "boot" "extraKCflags" ] "Replaced by aviallon.boot.kernel.addOptimizationAttributes attrset" )
+    (mkRemovedOptionModule [
-    ( mkRemovedOptionModule  [ "aviallon" "boot" "loops_per_jiffies" ] "Actually unused by the kernel" )
+      "aviallon"
+      "boot"
+      "extraKCflags"
+    ] "Replaced by aviallon.boot.kernel.addOptimizationAttributes attrset")
+    (mkRemovedOptionModule [ "aviallon" "boot" "loops_per_jiffies" ] "Actually unused by the kernel")
   ];
 
   config = mkMerge [
     {
       assertions = [
-      { assertion = cfg.efi -> !cfg.legacy;
+        {
+          assertion = cfg.efi -> !cfg.legacy;
           message = "exactly one of aviallon.boot.efi and aviallon.boot.legacy must be set";
         }
-      { assertion = cfg.legacy -> cfg.useGrub;
+        {
+          assertion = cfg.legacy -> cfg.useGrub;
           message = "Using GRUB is mandatory for legacy BIOS";
         }
       ];
 
-    boot.kernelParams = filter (v: ! (isNull v)) (toCmdlineList cfg.cmdline);
+      boot.kernelParams = filter (v: !(isNull v)) (toCmdlineList cfg.cmdline);
     }
     (mkIf cfg.enable {
 
@@ -236,17 +307,18 @@ in {
           else if config.boot.consoleLogLevel == 4 then
             "auto"
           else
-          "yes"
+            "yes";
-        ;
 
         # 'quiet' is required to silence systemd-efi-stub messages
         "quiet" = mkIf (config.boot.consoleLogLevel <= 4) true;
       };
 
-    nixpkgs.overlays = [(final: prev: {
+      nixpkgs.overlays = [
+        (final: prev: {
           # Use bleeding-edge linux firmware
           linux-firmware = prev.unstable.linux-firmware;
-    })];
+        })
+      ];
 
       boot = {
         bootspec.enableValidation = true;
@@ -258,9 +330,14 @@ in {
         initrd.systemd.enable = true;
 
         initrd.compressor = "zstd";
-      initrd.compressorArgs = [ "-T0" "-9" ];
+        initrd.compressorArgs = [
+          "-T0"
+          "-9"
+        ];
 
-      kernelPackages = with myLib.debug; let
+        kernelPackages =
+          with myLib.debug;
+          let
             baseKernel = traceValWithPrefix "aviallon.boot.kernel.package" cfg.kernel.package;
 
             # Possible CFLAGS source : (myLib.optimizations.makeOptimizationFlags {}).CFLAGS
@@ -269,15 +346,15 @@ in {
                 "-march=${cpuConfig.arch}"
                 "-mtune=${cpuConfig.tune or cpuConfig.arch}"
               ]
-          ++ optional (! isNull cpuConfig.caches.lastLevel ) "--param l2-cache-size=${toString cpuConfig.caches.lastLevel}"
+              ++ optional (
-          ++ optional (! isNull cpuConfig.caches.l1d ) "--param l1-cache-size=${toString cpuConfig.caches.l1d}"
+                !isNull cpuConfig.caches.lastLevel
+              ) "--param l2-cache-size=${toString cpuConfig.caches.lastLevel}"
+              ++ optional (!isNull cpuConfig.caches.l1d) "--param l1-cache-size=${toString cpuConfig.caches.l1d}"
             );
-        kRustflags = traceValWithPrefix "kRustflags" (
+            kRustflags = traceValWithPrefix "kRustflags" ([
-          [
               "-Ctarget-cpu=${cpuConfig.arch}"
               "-Ctune-cpu=${cpuConfig.tune or cpuConfig.arch}"
-          ]
+            ]);
-        );
 
             optimizedKernelAttrs = traceValWithPrefix "optimizedKernelAttrs" (
               optionalAttrs config.aviallon.optimizations.enable (
@@ -288,7 +365,9 @@ in {
                       KRUSTFLAGS = kRustflags;
                     };
                   }
-              (traceValWithPrefix "aviallon.boot.kernel.addOptimizationAttributes" cfg.kernel.addOptimizationAttributes)
+                  (
+                    traceValWithPrefix "aviallon.boot.kernel.addOptimizationAttributes" cfg.kernel.addOptimizationAttributes
+                  )
               )
             );
             moddedKernelAttrs = traceValWithPrefix "moddedKernelAttrs" (
@@ -305,9 +384,7 @@ in {
                   '';
                 })
               else
-            baseKernel
+                baseKernel;
-          ;
-          
 
             moddedKernel = myLib.optimizations.addAttrs noDRMKernel moddedKernelAttrs;
 
@@ -320,15 +397,18 @@ in {
             #    moddedKernel
             #  ;
 
-      in mkOverride 2 (pkgs.linuxPackagesFor noDRMKernel);
+          in
+          mkOverride 2 (pkgs.linuxPackagesFor noDRMKernel);
 
-      kernelPatches = []
+        kernelPatches =
+          [ ]
           ++ optional cfg.x32abi.enable customKernelPatches.enableX32ABI
           ++ optional cfg.rtGroupSched.enable customKernelPatches.enableRTGroupSched
           ++ optional cfg.energyModel.enable customKernelPatches.enableEnergyModel
-        ++ optional (isXanmod cfg.kernel.package && config.aviallon.optimizations.enable) (customKernelPatches.optimizeForCPUArch config.aviallon.general.cpu.arch)
+          ++ optional (isXanmod cfg.kernel.package && config.aviallon.optimizations.enable) (
-        ++ optional config.aviallon.optimizations.enable customKernelPatches.zstd
+            customKernelPatches.optimizeForCPUArch config.aviallon.general.cpu.arch
-      ;
+          )
+          ++ optional config.aviallon.optimizations.enable customKernelPatches.zstd;
 
         # Hide boot menu for systemd-boot by default
         loader.timeout = mkIf (!cfg.useGrub) 0;
@@ -345,9 +425,11 @@ in {
           enable = cfg.efi && (!cfg.useGrub);
           configurationLimit = cfg.configurationLimit;
           consoleMode = mkDefault "max";
-        extraInstallCommands = let
+          extraInstallCommands =
+            let
               efiDir = config.boot.loader.efi.efiSysMountPoint;
-        in ''
+            in
+            ''
               export PATH="$PATH:${getBin pkgs.coreutils-full}/bin:${getBin pkgs.gnused}/bin"
               rpath=
               generation=

default.nix

@@ -1,4 +1,4 @@
-{config, ...}:
+{ config, ... }:
 {
   imports = [
     ./general.nix

desktop/browser.nix

@@ -1,36 +1,54 @@
-{ config, pkgs, lib, myLib, options, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  myLib,
+  options,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.desktop;
   generalCfg = config.aviallon.general;
-in {
+in
+{
   options.aviallon.desktop.browser = {
     firefox.overrides = mkOption {
       internal = true;
       description = "Override firefox package settings";
       type = types.attrs;
-      default = {};
+      default = { };
-      example = { enablePlasmaIntegration = true; };
+      example = {
+        enablePlasmaIntegration = true;
+      };
     };
     chromium = {
       package = mkOption {
         internal = true;
         type = myLib.types.package';
         default = pkgs.chromium;
-        example = literalExpression '' pkgs.ungoogled-chromium '';
+        example = literalExpression ''pkgs.ungoogled-chromium '';
       };
       overrides = mkOption {
         internal = true;
         description = "Override chromium package settings";
         type = types.attrs;
-        default = {};
+        default = { };
-        example = { commandLineArgs = [ "--enable-features=UseOzonePlatform" "--ozone-platform=wayland" ]; };
+        example = {
+          commandLineArgs = [
+            "--enable-features=UseOzonePlatform"
+            "--ozone-platform=wayland"
+          ];
+        };
       };
       commandLineArgs = mkOption {
         description = "Override chromium flags";
         type = with types; listOf str;
         default = [ "--ozone-platform-hint=auto" ];
-        example = [ "--ozone-platform-hint=auto" "--ignore-gpu-blacklist" ];
+        example = [
+          "--ozone-platform-hint=auto"
+          "--ignore-gpu-blacklist"
+        ];
       };
     };
   };
@@ -41,16 +59,19 @@ in {
       # firefox is added by plasma or gnome
     ];
 
-
+    nixpkgs.overlays = [
-    nixpkgs.overlays = [(final: prev: {
+      (final: prev: {
         myFirefox = (final.callPackage ../packages/firefox.nix cfg.browser.firefox.overrides);
-    })];
+      })
+    ];
 
     aviallon.desktop.browser.chromium.overrides.enableWideVine = true;
 
     aviallon.programs.allowUnfreeList = [
-      "chromium-unwrapped" "chrome-widevine-cdm"
+      "chromium-unwrapped"
-      "ungoogled-chromium" "chromium" # because of widevine
+      "chrome-widevine-cdm"
+      "ungoogled-chromium"
+      "chromium" # because of widevine
     ];
 
     environment.variables = {
@@ -58,7 +79,9 @@ in {
     };
 
     aviallon.desktop.browser.chromium.overrides.commandLineArgs = cfg.browser.chromium.commandLineArgs;
-    aviallon.desktop.browser.chromium.commandLineArgs = mkIf generalCfg.unsafeOptimizations (options.aviallon.desktop.browser.chromium.commandLineArgs.default ++ [
+    aviallon.desktop.browser.chromium.commandLineArgs = mkIf generalCfg.unsafeOptimizations (
+      options.aviallon.desktop.browser.chromium.commandLineArgs.default
+      ++ [
         "--flag-switches-begin"
         "--ignore-gpu-blacklist"
         "--enable-gpu-rasterization"
@@ -69,7 +92,8 @@ in {
         "--enable-features=VaapiVideoDecoder,VaapiVideoEncoder,WebRTCPipeWireCapturer"
         "--disable-features=UseChromeOSDirectVideoDecoder"
         "--flag-switches-end"
-    ]);
+      ]
+    );
 
     programs.chromium = {
       enable = true;

desktop/console.nix

@@ -1,23 +1,25 @@
-{ config, pkgs, lib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   xcfg = config.services.xserver;
   generalCfg = config.aviallon.general;
-in {
+in
+{
   config = {
     services.kmscon = {
       hwRender = mkDefault xcfg.enable;
-      extraConfig = ""
+      extraConfig =
-        + optionalString ( ! isNull xcfg.layout )
+        ""
-          "xkb-layout=${xcfg.layout}"
+        + optionalString (!isNull xcfg.layout) "xkb-layout=${xcfg.layout}"
-        + optionalString ( ! isNull xcfg.xkbVariant )
+        + optionalString (!isNull xcfg.xkbVariant) "xkb-variant=${xcfg.xkbVariant}"
-          "xkb-variant=${xcfg.xkbVariant}"
+        + optionalString (!isNull xcfg.xkbOptions) "xkb-options=${xcfg.xkbOptions}"
-        + optionalString ( ! isNull xcfg.xkbOptions )
+        + "font-dpi=${toString (xcfg.dpi or 96)}";
-          "xkb-options=${xcfg.xkbOptions}"
+      enable = mkDefault (!generalCfg.minimal);
-        + "font-dpi=${toString (xcfg.dpi or 96)}"
-      ;
-      enable = mkDefault (! generalCfg.minimal );
     };
   };
 }
-

desktop/default.nix

@@ -1,4 +1,9 @@
-{ config, pkgs, lib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 {
   imports = [

desktop/developer.nix

@@ -1,12 +1,20 @@
-{ config, pkgs, lib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.developer;
   generalCfg = config.aviallon.general;
-in {
+in
+{
   options.aviallon.developer = {
     enable = mkEnableOption "enable developer mode on this machine";
-    virtualization.host.enable = (mkEnableOption "hypervisor virtualization services") // { default = true; };
+    virtualization.host.enable = (mkEnableOption "hypervisor virtualization services") // {
+      default = true;
+    };
     virtualbox.unstable = mkEnableOption "use unstable virtualbox";
   };
   config = mkIf cfg.enable {
@@ -66,7 +74,9 @@ in {
       gnumake
       cmake
 
-      linux-manual man-pages man-pages-posix
+      linux-manual
+      man-pages
+      man-pages-posix
 
       linuxHeaders
 
@@ -99,7 +109,6 @@ in {
       };
     };
 
-    
     virtualisation.spiceUSBRedirection.enable = true; # Quality of life
     security.virtualisation.flushL1DataCache = "never"; # We do not care, we are on a dev platform
 
@@ -109,19 +118,25 @@ in {
       host.enableHardening = false; # Causes kernel build failures
     };
 
-    nixpkgs.overlays = []
+    nixpkgs.overlays =
-      ++ optional cfg.virtualbox.unstable (final: prev: {
+      [ ]
+      ++ optional cfg.virtualbox.unstable (
+        final: prev: {
           virtualbox = final.unstable.virtualbox;
           virtualboxExtpack = final.unstable.virtualboxExtpack;
-      })
+        }
-    ;
+      );
 
     console.enable = true;
 
-    boot.initrd.systemd.emergencyAccess = mkIf (config.users.users.root.hashedPassword != null) config.users.users.root.hashedPassword;
+    boot.initrd.systemd.emergencyAccess = mkIf (
+      config.users.users.root.hashedPassword != null
+    ) config.users.users.root.hashedPassword;
 
     environment.extraOutputsToInstall = [
-      "doc" "info" "dev"
+      "doc"
+      "info"
+      "dev"
     ];
 
     services.ollama = {
@@ -130,12 +145,14 @@ in {
       group = "ollama";
       user = "ollama";
       package =
-        if config.aviallon.hardware.amd.enable
+        if config.aviallon.hardware.amd.enable then
-          then pkgs.unstable.ollama-rocm
+          pkgs.unstable.ollama-rocm
-        else if (config.aviallon.hardware.nvidia.enable && config.aviallon.hardware.nvidia.variant != "nouveau")
+        else if
-          then pkgs.unstable.ollama-cuda
+          (config.aviallon.hardware.nvidia.enable && config.aviallon.hardware.nvidia.variant != "nouveau")
-        else pkgs.unstable.ollama
+        then
-      ;
+          pkgs.unstable.ollama-cuda
+        else
+          pkgs.unstable.ollama;
     };
 
     aviallon.services.journald.extraConfig = {
@@ -145,8 +162,10 @@ in {
     aviallon.boot.configurationLimit = mkDefault 10;
 
     aviallon.programs.allowUnfreeList = [
-      "tabnine" "clion"
+      "tabnine"
-      "Oracle_VM_VirtualBox_Extension_Pack" "virtualbox"
+      "clion"
+      "Oracle_VM_VirtualBox_Extension_Pack"
+      "virtualbox"
       "intelephense"
     ];
   };

desktop/flatpak.nix

@@ -1,8 +1,14 @@
-{ config, pkgs, lib, ...}:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.desktop;
-in {
+in
+{
   config = mkIf cfg.enable {
     services.flatpak.enable = mkDefault true;
     systemd.services.flatpak-add-flathub = {
@@ -32,14 +38,19 @@ in {
     };
 
     fileSystems =
-        let mkRoSymBind = path: {
+      let
+        mkRoSymBind = path: {
           device = path;
           fsType = "none";
-          options = [ "rbind" "ro" "x-gvfs-hide" ];
+          options = [
+            "rbind"
+            "ro"
+            "x-gvfs-hide"
+          ];
         };
-      in {
+      in
+      {
         "/usr/share/icons" = mkRoSymBind "/run/current-system/sw/share/icons";
       };
-    }
+  };
-  ;
 }

desktop/games.nix

@@ -1,11 +1,19 @@
-{ config, pkgs, lib, myLib, suyu, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  myLib,
+  suyu,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.desktop;
   generalCfg = config.aviallon.general;
   optimizePkg = config.aviallon.optimizations.optimizePkg;
   mkTmpDir = dirpath: cleanup: "D ${dirpath} 777 root root ${cleanup}";
-in {
+in
+{
 
   options = {
     aviallon.desktop.gaming = {
@@ -27,24 +35,37 @@ in {
 
   config = mkIf cfg.gaming.enable {
     assertions = [
-      { assertion = cfg.gaming.enable -> cfg.enable; message = "Gaming features requires desktop to be enabled"; }
+      {
-      { assertion = cfg.gaming.enable -> !generalCfg.minimal; message = "Gaming features are incompatible with minimal mode"; }
+        assertion = cfg.gaming.enable -> cfg.enable;
+        message = "Gaming features requires desktop to be enabled";
+      }
+      {
+        assertion = cfg.gaming.enable -> !generalCfg.minimal;
+        message = "Gaming features are incompatible with minimal mode";
+      }
     ];
 
-    environment.systemPackages = let
+    environment.systemPackages =
+      let
         my_yuzu = cfg.gaming.yuzu.package.overrideAttrs (old: {
           cmakeFlags = old.cmakeFlags ++ [
             #"-DYUZU_USE_PRECOMPILED_HEADERS=OFF"
             #"-DDYNARMIC_USE_PRECOMPILED_HEADERS=OFF"
           ];
         });
-    in with pkgs; [
+      in
+      with pkgs;
+      [
         gamescope
         mangohud
         lutris
         bottles
-      ] ++ optionals cfg.gaming.emulation [
+      ]
-        (optimizePkg { recursive = 0; lto = false; } my_yuzu)
+      ++ optionals cfg.gaming.emulation [
+        (optimizePkg {
+          recursive = 0;
+          lto = false;
+        } my_yuzu)
         (optimizePkg { } cfg.gaming.ryujinx.package)
       ];
 
@@ -104,7 +125,10 @@ in {
     };
 
     aviallon.programs.allowUnfreeList = [
-      "steam" "steam-original" "steam-runtime" "steam-run"
+      "steam"
+      "steam-original"
+      "steam-runtime"
+      "steam-run"
     ];
 
   };

desktop/general.nix

@@ -1,9 +1,16 @@
-{ config, pkgs, lib, myLib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  myLib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.desktop;
   generalCfg = config.aviallon.general;
-in {
+in
+{
   options.aviallon.desktop = {
     enable = mkOption {
       default = true;
@@ -14,7 +21,13 @@ in {
     environment = mkOption {
       default = "plasma";
       example = "gnome";
-      type = with types; enum [ "plasma" "plasma6" "gnome" ];
+      type =
+        with types;
+        enum [
+          "plasma"
+          "plasma6"
+          "gnome"
+        ];
       description = "What Desktop Environment to use";
     };
     layout = mkOption {
@@ -51,7 +64,13 @@ in {
   };
 
   imports = [
-    (mkRemovedOptionModule [ "aviallon" "desktop" "graphics" "shaderCache" "path" ] "Now always relative to $XDG_CACHE_HOME" )
+    (mkRemovedOptionModule [
+      "aviallon"
+      "desktop"
+      "graphics"
+      "shaderCache"
+      "path"
+    ] "Now always relative to $XDG_CACHE_HOME")
   ];
 
   config = mkIf cfg.enable (mkMerge [
@@ -71,7 +90,6 @@ in {
       services.xserver.xkb.layout = cfg.layout;
       services.xserver.xkb.options = "eurosign:e";
 
-
       aviallon.boot.cmdline = {
         splash = mkIf (!generalCfg.debug) "";
         "udev.log_level" = mkIf (!generalCfg.debug) 3;
@@ -104,9 +122,7 @@ in {
         p7zip
       ];
 
-
+      security.sudo.extraConfig = ''
-      security.sudo.extraConfig =
-        ''
         # Keep X and Wayland related variables for better GUI integration
         Defaults:root,%wheel env_keep+=DISPLAY
         Defaults:root,%wheel env_keep+=XAUTHORITY
@@ -114,8 +130,7 @@ in {
         Defaults:root,%wheel env_keep+=WAYLAND_DISPLAY
         Defaults:root,%wheel env_keep+=WAYLAND_SOCKET
         Defaults:root,%wheel env_keep+=XDG_RUNTIME_DIR
-        ''
+      '';
-      ;
 
     }
     (mkIf (!generalCfg.minimal) {
@@ -174,12 +189,12 @@ in {
       };
 
       aviallon.programs.allowUnfreeList = [
-        "spotify" "spotify-unwrapped"
+        "spotify"
+        "spotify-unwrapped"
 
         "veracrypt"
       ];
 
-    
       aviallon.programs.libreoffice.enable = true;
 
       services.packagekit.enable = mkDefault true;

desktop/gnome.nix

@@ -1,8 +1,14 @@
-{config, pkgs, lib, ...}:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.desktop;
-in {
+in
+{
   config = mkIf (cfg.enable && (cfg.environment == "gnome")) {
     services.xserver.desktopManager.gnome = {
       enable = true;
@@ -43,7 +49,9 @@ in {
 
     aviallon.programs.libreoffice.enable = true;
 
-        environment.systemPackages = with pkgs; [ guake ]
+    environment.systemPackages =
+      with pkgs;
+      [ guake ]
       ++ (with gnome; [
         gnome-software
       ])
@@ -53,8 +61,7 @@ in {
         dash-to-dock-toggle
         dash-to-dock-animator
         tray-icons-reloaded
-          ])
+      ]);
-        ;
     systemd.packages = with pkgs; [
       gnomeExtensions.gamemode
       gnomeExtensions.dash-to-dock

desktop/multimedia.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.desktop;
@@ -8,25 +13,30 @@ let
     noiseFilterStrength = cfg.audio.noise-filter.strength;
   };
 
-  airplayConfig = pkgs.callPackage ./pipewire/pipewire-airplay.conf.nix {};
+  airplayConfig = pkgs.callPackage ./pipewire/pipewire-airplay.conf.nix { };
 
   # Multimedia Packages
 
-  ffmpeg-full-unfree = let
+  ffmpeg-full-unfree =
+    let
       withUnfree = pkgs.unstable.ffmpeg-full.override {
         withUnfree = true;
         withTensorflow = false;
       };
-  in withUnfree;
+    in
+    withUnfree;
 
-in {
+in
+{
   config = mkIf (cfg.enable && !generalCfg.minimal) {
     environment.systemPackages = with pkgs; [
       ffmpeg-full-unfree
       krita
-      (pkgs.wrapOBS { plugins = with obs-studio-plugins; [
+      (pkgs.wrapOBS {
+        plugins = with obs-studio-plugins; [
           obs-pipewire-audio-capture
-      ]; })
+        ];
+      })
 
       #scribus
       yt-dlp
@@ -36,10 +46,11 @@ in {
       #jamesdsp # Audio post-processing
     ];
 
-    nixpkgs.overlays = [(final: prev: {
+    nixpkgs.overlays = [
+      (final: prev: {
         inherit ffmpeg-full-unfree;
-    })];
+      })
-
+    ];
 
     # Enable sound.
     services.pulseaudio.enable = false;
@@ -76,9 +87,12 @@ in {
               "node.description" = "Sortie combinée";
               "combine.latency-compensate" = true;
               "combine.props" = {
-                "audio.position" = [ "FL" "FR" ];
+                "audio.position" = [
+                  "FL"
+                  "FR"
+                ];
               };
-              "stream.props" = {};
+              "stream.props" = { };
               "stream.rules" = [
                 {
                   matches = [
@@ -90,7 +104,7 @@ in {
                       "media.class" = "Audio/Sink";
                     }
                   ];
-                  actions.create-stream = {};
+                  actions.create-stream = { };
                 }
               ];
             };
@@ -105,21 +119,27 @@ in {
         "bluez5.enable-sbc-xq" = true; # Should be default now
         "bluez5.enable-msbc" = true; # Default
         "bluez5.enable-hw-volume" = true; # Default
-        "bluez5.headset-roles" = [ "hsp_hs" "hsp_ag" "hfp_hf" "hfp_ag" ];
+        "bluez5.headset-roles" = [
+          "hsp_hs"
+          "hsp_ag"
+          "hfp_hf"
+          "hfp_ag"
+        ];
       };
     };
 
-    
     security.rtkit.enable = true; # Real-time support for pipewire
 
     aviallon.programs.allowUnfreeList = [
       "ffmpeg-full" # Because of unfree codecs
     ];
 
-
     # Hardware-agnostic audio denoising
-    systemd.user.services = let
+    systemd.user.services =
-      mkPipewireModule = {conf, description}: {
+      let
+        mkPipewireModule =
+          { conf, description }:
+          {
             unitConfig = {
               Slice = "session.slice";
             };
@@ -138,16 +158,21 @@ in {
             wantedBy = [ "pipewire.service" ];
             inherit description;
           };
-    in {
+      in
-      pipewire-noise-filter = mkIf cfg.audio.noise-filter.enable (
-        (mkPipewireModule { conf = filterConfig; description = "Pipewire Noise Filter"; }) //
       {
+        pipewire-noise-filter = mkIf cfg.audio.noise-filter.enable (
+          (mkPipewireModule {
+            conf = filterConfig;
+            description = "Pipewire Noise Filter";
+          })
+          // {
             enable = cfg.audio.noise-filter.strength > 0.0;
           }
         );
-      pipewire-airplay-sink = mkIf cfg.audio.airplay.enable (
+        pipewire-airplay-sink = mkIf cfg.audio.airplay.enable (mkPipewireModule {
-        mkPipewireModule { conf = airplayConfig; description = "Pipewire Airplay Sink"; }
+          conf = airplayConfig;
-      );
+          description = "Pipewire Airplay Sink";
+        });
       };
 
   };

desktop/pipewire/pipewire-airplay.conf.nix

@@ -1,22 +1,23 @@
-{ lib
+{
-, writeText
+  lib,
+  writeText,
 }:
 
 writeText "pipewire-airplay.conf" ''
-# Noise canceling source
+  # Noise canceling source
-#
+  #
-# start with pipewire -c filter-chain/source-rnnoise.conf
+  # start with pipewire -c filter-chain/source-rnnoise.conf
-#
+  #
-context.properties = {
+  context.properties = {
       log.level        = 3
-}
+  }
 
-#context.spa-libs = {
+  #context.spa-libs = {
-#    audio.convert.* = audioconvert/libspa-audioconvert
+  #    audio.convert.* = audioconvert/libspa-audioconvert
-#    support.*       = support/libspa-support
+  #    support.*       = support/libspa-support
-#}
+  #}
 
-context.modules = [
+  context.modules = [
       {   name = libpipewire-module-rtkit
           args = {
               nice.level   = -11
@@ -60,4 +61,4 @@ context.modules = [
               ] # stream.rules
           } # args
       }
-}]''
+  }]''

desktop/pipewire/pipewire-noise-filter.conf.nix

@@ -1,24 +1,25 @@
-{ lib
+{
-, writeText
+  lib,
-, rnnoise-plugin
+  writeText,
-, noiseFilterStrength
+  rnnoise-plugin,
+  noiseFilterStrength,
 }:
 
 writeText "pipewire-noise-filter.conf" ''
-# Noise canceling source
+  # Noise canceling source
-#
+  #
-# start with pipewire -c filter-chain/source-rnnoise.conf
+  # start with pipewire -c filter-chain/source-rnnoise.conf
-#
+  #
-context.properties = {
+  context.properties = {
       log.level        = 3
-}
+  }
 
-context.spa-libs = {
+  context.spa-libs = {
       audio.convert.* = audioconvert/libspa-audioconvert
       support.*       = support/libspa-support
-}
+  }
 
-context.modules = [
+  context.modules = [
       {   name = libpipewire-module-rtkit
           args = {
               nice.level   = -11
@@ -62,4 +63,4 @@ context.modules = [
               }
           }
       }
-]''
+  ]''

desktop/plasma/default.nix

@@ -1,15 +1,22 @@
-{config, pkgs, nixpkgs-unstable, lib, ...}:
+{
+  config,
+  pkgs,
+  nixpkgs-unstable,
+  lib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.desktop;
   optimizeCfg = config.aviallon.optimizations;
-in {
+in
+{
 
   imports = [
     ./plasma6.nix
   ];
 
-  config = mkIf (cfg.enable && (cfg.environment == "plasma" || cfg.environment == "plasma6" )) {
+  config = mkIf (cfg.enable && (cfg.environment == "plasma" || cfg.environment == "plasma6")) {
     programs.firefox.enable = true;
     programs.firefox.policies.Extensions.Install = [ "plasma-browser-integration@kde.org" ];
 

desktop/plasma/plasma6.nix

@@ -1,11 +1,17 @@
-{ config, pkgs, lib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.desktop;
   generic = import ./generic.nix {
     kdePackages = pkgs.kdePackages;
   };
-in {
+in
+{
   config = mkIf (cfg.enable && (cfg.environment == "plasma6")) {
     # Enable the Plasma 6 Desktop Environment.
     services.desktopManager.plasma6 = {

desktop/printing.nix

@@ -1,16 +1,24 @@
-{ config, pkgs, lib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.desktop;
   generalCfg = config.aviallon.general;
-in {
+in
+{
   config = mkIf (cfg.enable && !generalCfg.minimal) {
     services.printing = {
       enable = true;
       defaultShared = mkDefault true;
       browsing = mkDefault true;
       listenAddresses = [ "0.0.0.0:631" ];
-      drivers = with pkgs; []
+      drivers =
+        with pkgs;
+        [ ]
         ++ (optionals (!generalCfg.minimal) [
           hplipWithPlugin
           gutenprint
@@ -46,10 +54,13 @@ in {
       brscan4.enable = true;
     };
 
-    networking.firewall.allowedTCPPorts = optionals config.services.printing.enable [ 631 139 445 ];
+    networking.firewall.allowedTCPPorts = optionals config.services.printing.enable [
+      631
+      139
+      445
+    ];
     networking.firewall.allowedUDPPorts = optionals config.services.printing.enable [ 137 ];
 
-
     aviallon.programs.allowUnfreeList = [
       "hplip"
       "hplipWithPlugin"

desktop/sddm.nix

@@ -1,9 +1,15 @@
-{ config, pkgs, lib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.desktop;
   sddmCfg = config.services.displayManager.sddm;
-in {
+in
+{
   options.aviallon.desktop.sddm.unstable = mkEnableOption "bleeding-edge SDDM";
   options.aviallon.desktop.sddm.enable = mkEnableOption "custom SDDM configuration";
 

filesystems.nix

@@ -1,14 +1,25 @@
-{ config, pkgs, lib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.filesystems;
 
-  ioSchedType = types.enum [ "bfq" "kyber" "mq-deadline" "none" null ];
+  ioSchedType = types.enum [
+    "bfq"
+    "kyber"
+    "mq-deadline"
+    "none"
+    null
+  ];
 in
 {
   imports = [
     ./filesystems
-    (mkRemovedOptionModule [ "aviallon" "filesystems" "resumeDevice"] "Use boot.resumeDevice instead")
+    (mkRemovedOptionModule [ "aviallon" "filesystems" "resumeDevice" ] "Use boot.resumeDevice instead")
   ];
 
   options.aviallon.filesystems = {
@@ -43,7 +54,7 @@ in
       type = types.bool;
     };
     udevRules = mkOption {
-      default = [];
+      default = [ ];
       example = [ ''ACTION!="remove", SUBSYSTEM=="block", KERNEL=="sda", ATTR{queue/scheduler}="none"'' ];
       description = "Additional udev rules";
       type = types.listOf types.str;
@@ -59,22 +70,39 @@ in
       boot.vdo.enable = config.aviallon.boot.kvdo.enable;
     };
     boot.initrd.kernelModules = ifEnable cfg.lvm [
-      "dm-cache" "dm-cache-smq" "dm-cache-mq" "dm-cache-cleaner"
+      "dm-cache"
+      "dm-cache-smq"
+      "dm-cache-mq"
+      "dm-cache-cleaner"
     ];
-    boot.kernelModules = []
+    boot.kernelModules =
-      ++ optionals cfg.lvm [ "dm-cache" "dm-cache-smq" "dm-persistent-data" "dm-bio-prison" "dm-clone" "dm-crypt" "dm-writecache" "dm-mirror" "dm-snapshot" ]
+      [ ]
-      ++ optionals config.aviallon.boot.kvdo.enable [ "kvdo" ]
+      ++ optionals cfg.lvm [
-    ;
+        "dm-cache"
+        "dm-cache-smq"
+        "dm-persistent-data"
+        "dm-bio-prison"
+        "dm-clone"
+        "dm-crypt"
+        "dm-writecache"
+        "dm-mirror"
+        "dm-snapshot"
+      ]
+      ++ optionals config.aviallon.boot.kvdo.enable [ "kvdo" ];
 
-    boot.supportedFilesystems = [ "ntfs" "ext4" "vfat" "exfat" ];
+    boot.supportedFilesystems = [
+      "ntfs"
+      "ext4"
+      "vfat"
+      "exfat"
+    ];
 
     hardware.block.defaultSchedulerRotational = mkDefault cfg.hddScheduler;
     aviallon.filesystems.udevRules = mkBefore (concatLists [
       (optional (!(builtins.isNull cfg.hddScheduler))
         ''ACTION!="remove", SUBSYSTEM=="block", KERNEL=="sd[a-z]", ATTR{queue/rotational}=="1", ATTR{queue/scheduler}="${cfg.hddScheduler}"''
       )
-      (optional (!(builtins.isNull cfg.slowFlashScheduler))
+      (optional (!(builtins.isNull cfg.slowFlashScheduler)) ''
-        ''
         SUBSYSTEM!="block", GOTO="aviallon_slowflash_end"
         KERNEL!="sd[a-z]|nvme[0-9]*n[0-9]|mmcblk[0-9]", GOTO="aviallon_slowflash_end"
         ATTR{queue/rotational}=="1", GOTO="aviallon_slowflash_end"
@@ -97,14 +125,11 @@ in
         # END: NCQ disabled
 
         LABEL="aviallon_slowflash_end"
-        ''
+      '')
-      )
       (optional (!(builtins.isNull cfg.nvmeScheduler))
         ''ACTION!="remove", SUBSYSTEM=="block", KERNEL=="nvme[0-9]*n[0-9]", ATTR{queue/scheduler}="${cfg.nvmeScheduler}"''
       )
-      (optional cfg.queuePriority
+      (optional cfg.queuePriority ''ACTION!="remove", SUBSYSTEM=="block", KERNEL=="sd[a-z]", ATTR{device/ncq_prio_supported}=="1", ATTR{device/ncq_prio_enable}="1"'')
-        ''ACTION!="remove", SUBSYSTEM=="block", KERNEL=="sd[a-z]", ATTR{device/ncq_prio_supported}=="1", ATTR{device/ncq_prio_enable}="1"''
-      )
     ]);
 
     boot.initrd.services.udev.rules = concatStringsSep "\n" cfg.udevRules;
@@ -118,8 +143,7 @@ in
       let
         hasSwap = length config.swapDevices > 0;
       in
-        if hasSwap then "150%" else "75%"
+      if hasSwap then "150%" else "75%";
-      ;
 
     services.smartd = {
       enable = mkDefault true;

filesystems/btrfs.nix

@@ -1,12 +1,19 @@
-{ config, pkgs, lib, myLib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  myLib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.filesystems.btrfs;
   #fsCfg = config.fileSystems;
   btrfsPaths = [ "/" ];
-#  btrfsPaths = filterAttrs (n: v: v.fsType == "btrfs") fsCfg;
+  #  btrfsPaths = filterAttrs (n: v: v.fsType == "btrfs") fsCfg;
   generalCfg = config.aviallon.general;
-in {
+in
+{
   options.aviallon.filesystems.btrfs = {
     enable = mkEnableOption "BTRFS support";
     autoScrub = {

filesystems/zfs.nix

@@ -1,14 +1,20 @@
-{config, lib, pkgs, ...}:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.filesystems.zfs;
-in {
+in
+{
   options.aviallon.filesystems.zfs = {
     enable = mkEnableOption "ZFS support";
   };
 
   config = mkIf cfg.enable {
-    boot.initrd.supportedFilesystems = ["zfs"]; # boot from zfs
+    boot.initrd.supportedFilesystems = [ "zfs" ]; # boot from zfs
     boot.supportedFilesystems = [ "zfs" ];
 
     aviallon.filesystems.udevRules = mkAfter [

flake.nix

@@ -19,33 +19,36 @@
   };
 
   outputs =
-    inputs@{ self
+    inputs@{
-    , nixpkgs
+      self,
-    , nur
+      nixpkgs,
-    , nixpkgs-unstable
+      nur,
-    , fps
+      nixpkgs-unstable,
-    , suyu
+      fps,
-    , ...
+      suyu,
-    }: let
+      ...
+    }:
+    let
       lib = nixpkgs.lib;
       myLib = import ./lib {
         inherit lib;
       };
-      mkPkgs = pkgs: { system ? system
+      mkPkgs =
-                     , config
+        pkgs:
-                     , overlays ? [ ]
+        {
-                     , ...
+          system ? system,
-                     }: import pkgs { inherit system config overlays; };
+          config,
-    in {
+          overlays ? [ ],
+          ...
+        }:
+        import pkgs { inherit system config overlays; };
+    in
+    {
       inherit self inputs myLib;
 
-      overlays.default = final: prev:
+      overlays.default = final: prev: self.overlay final (nur.overlay final prev);
-        self.overlay
-          final
-          (nur.overlay final prev)
-        ;
 
-      overlay = (final: prev: {});
+      overlay = (final: prev: { });
 
       nixosModules = rec {
         aviallon = import ./default.nix;
@@ -54,6 +57,8 @@
 
       nixpkgsConfig = self.nixosModules.aviallon.aviallon.programs.config;
 
-      specialArgs = inputs // { inherit myLib; };
+      specialArgs = inputs // {
+        inherit myLib;
+      };
     };
 }

general.nix

@@ -1,4 +1,10 @@
-{ config, pkgs, lib, myLib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  myLib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.general;
@@ -8,7 +14,12 @@ let
 in
 {
   imports = [
-    (mkRemovedOptionModule [ "aviallon" "general" "flakes" "enable" ] "Flakes are now enabled by default")
+    (mkRemovedOptionModule [
+      "aviallon"
+      "general"
+      "flakes"
+      "enable"
+    ] "Flakes are now enabled by default")
     (mkRenamedOptionModule [ "aviallon" "general" "cpuVendor" ] [ "aviallon" "general" "cpu" "vendor" ])
     (mkRenamedOptionModule [ "aviallon" "general" "cpuArch" ] [ "aviallon" "general" "cpu" "arch" ])
     (mkRenamedOptionModule [ "aviallon" "general" "cpuTune" ] [ "aviallon" "general" "cpu" "tune" ])
@@ -41,12 +52,7 @@ in
       };
 
       arch = mkOption {
-        default = 
+        default = if cfg.cpu.x86.level >= 2 then "x86-64-v${toString cfg.cpu.x86.level}" else "x86-64";
-          if cfg.cpu.x86.level >= 2 then
-            "x86-64-v${toString cfg.cpu.x86.level}"
-          else
-            "x86-64"
-          ;
         example = "x86-64-v2";
         description = "Set CPU arch used in overlays, ...";
         type = types.str;
@@ -113,7 +119,9 @@ in
       font = "Lat2-Terminus16";
     };
 
-    boot.initrd.systemd.contents = mkIf (config.boot.initrd.systemd.enable && !config.console.earlySetup) {
+    boot.initrd.systemd.contents =
+      mkIf (config.boot.initrd.systemd.enable && !config.console.earlySetup)
+        {
           "/etc/kbd/consolefonts".source = "${pkgs.kbd}/share/consolefonts";
         };
 

hardware/amd/amdgpu.nix

@@ -1,10 +1,16 @@
-{ config, pkgs, lib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.hardware.amd;
   devCfg = config.aviallon.developer;
   generalCfg = config.aviallon.general;
-in {
+in
+{
   config = mkIf (cfg.enable && cfg.kernelDriver == "amdgpu") {
     boot.initrd.kernelModules = [ "amdgpu" ];
 
@@ -22,9 +28,7 @@ in {
       SUBSYSTEM=="pci", DRIVER=="amdgpu", ATTR{power_dpm_force_performance_level}="auto"
     '';
 
-    services.xserver.videoDrivers = 
+    services.xserver.videoDrivers = optional cfg.useProprietary "amdgpu-pro" ++ [ "modesetting" ];
-      optional cfg.useProprietary "amdgpu-pro"
-      ++ [ "modesetting" ];
 
     hardware.amdgpu.opencl.enable = true;
 

hardware/amd/cpu.nix

@@ -1,16 +1,25 @@
-{config, pkgs, lib, ...}:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   generalCfg = config.aviallon.general;
-  enableZenpower = (! isNull (builtins.match "znver[1-3]" generalCfg.cpu.arch)) && (versionOlder kernelVersion "6.13");
+  enableZenpower =
+    (!isNull (builtins.match "znver[1-3]" generalCfg.cpu.arch)) && (versionOlder kernelVersion "6.13");
   kernelVersion = getVersion config.boot.kernelPackages.kernel;
-in {
+in
+{
   config = mkIf (generalCfg.cpu.vendor == "amd") {
     boot.kernel.sysctl = {
 
       # Why: https://www.phoronix.com/news/Ryzen-Segv-Response
       # Workaround: https://forums.gentoo.org/viewtopic-p-2605135.html#2605135
-      "kernel.randomize_va_space" = mkIf (generalCfg.cpu.arch == "znver1" ) (warn "Disable Adress Space Layout Randomization on Ryzen 1 CPU" 0);
+      "kernel.randomize_va_space" = mkIf (generalCfg.cpu.arch == "znver1") (
+        warn "Disable Adress Space Layout Randomization on Ryzen 1 CPU" 0
+      );
     };
 
     aviallon.boot.cmdline = {
@@ -20,26 +29,23 @@ in {
         else if versionAtLeast kernelVersion "6.3" then
           "active"
         else
-          "passive"
+          "passive";
-        ;
+    }
-    } // optionalAttrs (generalCfg.cpu.arch == "znver2") {
+    // optionalAttrs (generalCfg.cpu.arch == "znver2") {
       # Required for Zen 2
       "amd_pstate.shared_memory" = 1;
     };
 
-    aviallon.boot.patches = mkIf config.aviallon.optimizations.enable {};
+    aviallon.boot.patches = mkIf config.aviallon.optimizations.enable { };
 
-    boot.extraModulePackages = with config.boot.kernelPackages; [] 
+    boot.extraModulePackages =
-      ++ optional enableZenpower (info "enable zenpower for Ryzen [1-3] CPU" zenpower)
+      with config.boot.kernelPackages;
-    ;
+      [ ] ++ optional enableZenpower (info "enable zenpower for Ryzen [1-3] CPU" zenpower);
 
-    boot.kernelModules = []
+    boot.kernelModules = [ ] ++ optional enableZenpower "zenpower";
-      ++ optional enableZenpower "zenpower"
-    ;
 
-    boot.blacklistedKernelModules = []
+    boot.blacklistedKernelModules =
-      ++ optional enableZenpower "k10-temp" # Superseded by zenpower
+      [ ] ++ optional enableZenpower "k10-temp" # Superseded by zenpower
     ;
   };
 }
-

hardware/amd/default.nix

@@ -1,9 +1,15 @@
-{ config, pkgs, lib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.hardware.amd;
   generalCfg = config.aviallon.general;
-in {
+in
+{
   options.aviallon.hardware.amd = {
     enable = mkEnableOption "AMD gpus";
     useProprietary = mkEnableOption "Use proprietary AMDGPU Pro";
@@ -14,7 +20,12 @@ in {
     };
     kernelDriver = mkOption {
       description = "wether to use radeon or amdgpu kernel driver";
-      type = with types; enum [ "radeon" "amdgpu" ];
+      type =
+        with types;
+        enum [
+          "radeon"
+          "amdgpu"
+        ];
       default = "amdgpu";
     };
   };

hardware/amd/radeon.nix

@@ -1,10 +1,16 @@
-{ config, pkgs, lib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.hardware.amd;
   devCfg = config.aviallon.developer;
   generalCfg = config.aviallon.general;
-in {
+in
+{
   config = mkIf (cfg.enable && cfg.kernelDriver == "radeon") {
     boot.initrd.kernelModules = [ "radeon" ];
 
@@ -19,6 +25,6 @@ in {
       "modesetting"
     ];
 
-    environment.variables = {};
+    environment.variables = { };
   };
 }

hardware/amd/rocm.nix

@@ -1,4 +1,9 @@
-{ config, pkgs, lib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.hardware.amd;
@@ -22,7 +27,8 @@ let
     gxf1036 = "10.3.0";
   };
 
-  /*autoDetectGPU = pkgs: pkgs.callPackage (
+  /*
+    autoDetectGPU = pkgs: pkgs.callPackage (
       { runCommandLocal,
         gnugrep,
         rocmPackages,
@@ -34,13 +40,18 @@ let
           rocminfo &>/dev/stderr
           rocminfo | grep --only-matching --perl-regexp '^\s*Name:\s+\Kgfx[0-9a-f]+' | tee $out/output
          ''
-  ) { };*/
+    ) { };
+  */
 
-  gfxToCompatible = gfxISA: if (hasAttr gfxISA gfxToCompatibleMap) then (getAttr gfxISA gfxToCompatibleMap) else "";
+  gfxToCompatible =
-in {
+    gfxISA: if (hasAttr gfxISA gfxToCompatibleMap) then (getAttr gfxISA gfxToCompatibleMap) else "";
+in
+{
 
   options.aviallon.hardware.amd.rocm = {
-    enable = (mkEnableOption "ROCm configuration") // { default = true; };
+    enable = (mkEnableOption "ROCm configuration") // {
+      default = true;
+    };
     gfxISA = mkOption {
       description = "What is the GFX ISA of your system. Leave blank if you have several GPUs of incompatible ISAs";
       default = "";
@@ -49,11 +60,13 @@ in {
     };
     gpuTargets = mkOption {
       description = "Override supported GPU ISAs in some ROCm packages.";
-      default = [ "803"
+      default = [
+        "803"
         "900"
         "906:xnack-"
         "908:xnack-"
-                "90a:xnack+" "90a:xnack-"
+        "90a:xnack+"
+        "90a:xnack-"
         "940"
         "941"
         "942"
@@ -63,24 +76,29 @@ in {
         "1031"
         "1100"
         "1101"
-                "1102" ];
+        "1102"
-      example = [ "900" "1031" ];
+      ];
+      example = [
+        "900"
+        "1031"
+      ];
       type = with types; nullOr (listOf str);
     };
   };
 
   config = mkIf (cfg.enable && localCfg.enable) {
-    environment.systemPackages = with pkgs;
+    environment.systemPackages =
+      with pkgs;
       [
         rocmPackages.rocm-smi
         #rocmPackages.meta.rocm-ml-libraries
         #rocmPackages.meta.rocm-hip-runtime
 
         #pkgs.autoDetectGPU
-      ] ++ optionals devCfg.enable [
-        rocmPackages.rocminfo
       ]
-    ;
+      ++ optionals devCfg.enable [
+        rocmPackages.rocminfo
+      ];
 
     #systemd.tmpfiles.rules = [
     #  "L+    /opt/rocm/hip   -    -    -     -    ${pkgs.rocmPackages.meta.rocm-hip-runtime}"
@@ -89,7 +107,8 @@ in {
 
     environment.variables = {
       ROC_ENABLE_PRE_VEGA = "1"; # Enable OpenCL with Polaris GPUs
-    } // (mkIf (gfxToCompatible cfg.rocm.gfxISA != "") {
+    }
+    // (mkIf (gfxToCompatible cfg.rocm.gfxISA != "") {
       HSA_OVERRIDE_GFX_VERSION = gfxToCompatible cfg.rocm.gfxISA;
     });
 
@@ -101,14 +120,19 @@ in {
     ];
 
     nix.settings.substituters = [ "https://nixos-rocm.cachix.org" ];
-    nix.settings.trusted-public-keys = [ "nixos-rocm.cachix.org-1:VEpsf7pRIijjd8csKjFNBGzkBqOmw8H9PRmgAq14LnE=" ];
+    nix.settings.trusted-public-keys = [
+      "nixos-rocm.cachix.org-1:VEpsf7pRIijjd8csKjFNBGzkBqOmw8H9PRmgAq14LnE="
+    ];
 
     nixpkgs.config.rocmSupport = true;
 
-    nixpkgs.overlays = mkIf (! isNull localCfg.gpuTargets) (mkBefore [(final: prev: {
+    nixpkgs.overlays = mkIf (!isNull localCfg.gpuTargets) (mkBefore [
+      (final: prev: {
         #rocmPackages_5 = final.rocmPackages;
         rocmPackages = prev.rocmPackages // {
-          clr = prev.rocmPackages.clr.override { localGpuTargets = lib.forEach localCfg.gpuTargets (target: "gfx${target}"); };
+          clr = prev.rocmPackages.clr.override {
+            localGpuTargets = lib.forEach localCfg.gpuTargets (target: "gfx${target}");
+          };
           rocdbgapi = prev.rocmPackages.rocdbgapi.override { buildDocs = false; };
           # (oldAttrs: {
           #  passthru = oldAttrs.passthru // {
@@ -122,6 +146,7 @@ in {
           #  gpuTargets = lib.forEach localCfg.gpuTargets (target: "gfx${target}");
           #};
         };
-    })]);
+      })
+    ]);
   };
 }

hardware/default.nix

@@ -1,4 +1,9 @@
-{ config, pkgs, lib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.hardware;
@@ -15,6 +20,6 @@ in
     ./mesa.nix
   ];
 
-  config = {};
+  config = { };
 
 }

hardware/intel/cpu.nix

@@ -1,9 +1,15 @@
-{config, pkgs, lib, ...}:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   generalCfg = config.aviallon.general;
   throttledService = "throttled";
-in {
+in
+{
   config = mkIf (generalCfg.cpu.vendor == "intel") {
     aviallon.boot.cmdline = {
       "intel_pstate" = "passive";

hardware/intel/default.nix

@@ -1,4 +1,9 @@
-{ config, pkgs, lib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.hardware.intel;
@@ -25,7 +30,9 @@ in
     boot.initrd.kernelModules = [ "i915" ];
     hardware.graphics = {
       enable = true;
-      extraPackages = with pkgs; []
+      extraPackages =
+        with pkgs;
+        [ ]
         ++ [
           vaapiVdpau
           libvdpau-va-gl
@@ -38,7 +45,8 @@ in
       ;
     };
 
-    aviallon.boot.cmdline = {}
+    aviallon.boot.cmdline =
+      { }
       // optionalAttrs generalCfg.unsafeOptimizations {
         "i915.mitigations" = "off";
         "i915.enable_fbc" = 1;

hardware/mesa.nix

@@ -1,4 +1,10 @@
-{ config, pkgs, lib, options, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  options,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.hardware.mesa;
@@ -7,13 +13,18 @@ let
   optimizationsCfg = config.aviallon.optimizations;
   optimizePkg = optimizationsCfg.optimizePkg;
   packageWithDefaults = types.package // {
-    merge = loc: defs:
+    merge =
-      let res = mergeDefaultOption loc defs;
+      loc: defs:
-      in if builtins.isPath res || (builtins.isString res && ! builtins.hasContext res)
+      let
-        then toDerivation res
+        res = mergeDefaultOption loc defs;
-        else res;
+      in
+      if builtins.isPath res || (builtins.isString res && !builtins.hasContext res) then
+        toDerivation res
+      else
+        res;
   };
-in {
+in
+{
   options.aviallon.hardware.mesa = {
     enable = mkOption {
       default = false;
@@ -65,10 +76,8 @@ in {
     aviallon.hardware.mesa.package32 = mkIf cfg.unstable pkgs.unstable.driversi686Linux.mesa;
 
     aviallon.hardware.mesa.internal = mkIf cfg.optimized {
-      package = mkDefault (
+      package = mkDefault (optimizePkg { lto = false; } cfg.package);
-        optimizePkg { lto = false; } cfg.package);
+      package32 = mkDefault (optimizePkg { lto = false; } cfg.package32);
-      package32 = mkDefault (
-        optimizePkg { lto = false; } cfg.package32);
     };
 
     hardware.graphics = {

hardware/nvidia/default.nix

@@ -1,13 +1,22 @@
-{config, pkgs, lib, ...}:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.hardware.nvidia;
-in {
+in
+{
 
   imports = [
     ./proprietary.nix
     ./opensource.nix
-    ( mkRenamedOptionModule [ "aviallon" "hardware" "nvidia" "saveAllVram" ] [ "aviallon" "hardware" "nvidia" "proprietary" "saveAllVram" ] )
+    (mkRenamedOptionModule
+      [ "aviallon" "hardware" "nvidia" "saveAllVram" ]
+      [ "aviallon" "hardware" "nvidia" "proprietary" "saveAllVram" ]
+    )
   ];
 
   options.aviallon.hardware.nvidia = {
@@ -16,7 +25,13 @@ in {
       default = (cfg.variant == "proprietary");
     };
     variant = mkOption {
-      type = with types; enum [ "proprietary" "open" "nouveau" ];
+      type =
+        with types;
+        enum [
+          "proprietary"
+          "open"
+          "nouveau"
+        ];
       description = "What driver variant to use";
       default = "proprietary";
       example = "nouveau";
@@ -28,7 +43,7 @@ in {
       enable = true;
     };
 
-    aviallon.hardware.nvidia.useProprietary = mkForce ( cfg.variant == "proprietary" );
+    aviallon.hardware.nvidia.useProprietary = mkForce (cfg.variant == "proprietary");
   };
 
 }

hardware/nvidia/opensource.nix

@@ -1,14 +1,30 @@
-{ config, pkgs, lib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.hardware.nvidia;
-in {
+in
+{
   options.aviallon.hardware.nvidia.nouveau = {
     config = mkOption {
       description = "nouveau boot config";
-      type = with types; attrsOf (nullOr (oneOf [ int str bool ]));
+      type =
-      example = { NvBoost = 1; };
+        with types;
-      default = {};
+        attrsOf (
+          nullOr (oneOf [
+            int
+            str
+            bool
+          ])
+        );
+      example = {
+        NvBoost = 1;
+      };
+      default = { };
     };
   };
 
@@ -19,15 +35,14 @@ in {
       "nouveau.pstate" = 1;
       "nouveau.runpm" = 1;
       "nouveau.modeset" = 1;
-      "nouveau.config" = let
+      "nouveau.config" =
-        toValue = v:
+        let
-          if isBool v
+          toValue = v: if isBool v then toString (if v then 1 else 0) else toString v;
-            then toString (if v then 1 else 0)
+          filteredConfig = filterAttrs (n: v: !isNull v) cfg.nouveau.config;
-          else toString v;
-        filteredConfig = filterAttrs (n: v: ! isNull v) cfg.nouveau.config;
           configList = mapAttrsToList (n: v: "${n}=${toValue v}") filteredConfig;
           configString = concatStringsSep "," configList;
-      in trace "Nouveau config: ${configString}" configString;
+        in
+        trace "Nouveau config: ${configString}" configString;
     };
 
     aviallon.hardware.mesa.enable = mkDefault true;

hardware/nvidia/proprietary.nix

@@ -1,4 +1,11 @@
-{ config, pkgs, lib, options, nixpkgs-unstable, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  options,
+  nixpkgs-unstable,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.hardware.nvidia;
@@ -9,9 +16,14 @@ let
     exec ${options.programs.xwayland.package.default}/bin/xwayland -eglstream "$@"
   '';
 
-  nvidiaUnstable = config.boot.kernelPackages.callPackage (nixpkgs-unstable + /pkgs/os-specific/linux/nvidia-x11/default.nix) {};
+  nvidiaUnstable = config.boot.kernelPackages.callPackage (
-  cudaUnstable = pkgs: cudaVersion: pkgs.callPackages (nixpkgs-unstable + /pkgs/top-level/cuda-packages.nix) { inherit cudaVersion; };
+    nixpkgs-unstable + /pkgs/os-specific/linux/nvidia-x11/default.nix
-in {
+  ) { };
+  cudaUnstable =
+    pkgs: cudaVersion:
+    pkgs.callPackages (nixpkgs-unstable + /pkgs/top-level/cuda-packages.nix) { inherit cudaVersion; };
+in
+{
   options = {
     aviallon.hardware.nvidia.proprietary = {
       gsync = mkEnableOption "Screen is GSYNC monitor";
@@ -39,7 +51,12 @@ in {
       saveAllVram = mkEnableOption "back up all VRAM in /var/tmp before going to sleep. May reduce artifacts after resuming";
       version = mkOption {
         description = "What Nvidia version variant to use";
-        type = types.enum [ "production" "stable" "beta" "unstable_beta" ];
+        type = types.enum [
+          "production"
+          "stable"
+          "beta"
+          "unstable_beta"
+        ];
         default = if generalCfg.unsafeOptimizations then "beta" else "stable";
         example = "unstable_beta";
       };
@@ -49,7 +66,12 @@ in {
         # Very useful resource.
         # https://forums.developer.nvidia.com/t/power-mizer-difference-between-powermizerdefault-and-powermizerlevel/46884/3
         example = [ "PerfLevelSrc=0x2222" ];
-        default = [ "PowerMizerEnable=0x1" "OverrideMaxPerf=0x1" "PowerMizerDefault=0x3" "PowerMizerDefaultAC=0x3" ];
+        default = [
+          "PowerMizerEnable=0x1"
+          "OverrideMaxPerf=0x1"
+          "PowerMizerDefault=0x3"
+          "PowerMizerDefaultAC=0x3"
+        ];
         type = with types; listOf str;
       };
     };
@@ -57,7 +79,7 @@ in {
 
   config = mkIf (cfg.enable && cfg.variant == "proprietary") {
 
-    assertions = [];
+    assertions = [ ];
 
     boot.initrd.kernelModules = [
       "nvidia"
@@ -77,7 +99,9 @@ in {
 
     services.xserver.exportConfiguration = true;
 
-    services.xserver.displayManager.sddm.wayland.enable = mkIf (!config.aviallon.hardware.intel.enable) (mkDefault false); # Frequent issues with Nvidia GPUs
+    services.xserver.displayManager.sddm.wayland.enable = mkIf (
+      !config.aviallon.hardware.intel.enable
+    ) (mkDefault false); # Frequent issues with Nvidia GPUs
 
     # Fix hybrid sleep with Nvidia GPU
     systemd.services.nvidia-suspend = {
@@ -85,7 +109,9 @@ in {
       before = [ "systemd-hybrid-sleep.service" ];
     };
     hardware.nvidia = {
-      powerManagement = mkIf (config.hardware.nvidia.prime.offload.enable || cfg.proprietary.saveAllVram) {
+      powerManagement =
+        mkIf (config.hardware.nvidia.prime.offload.enable || cfg.proprietary.saveAllVram)
+          {
             enable = true;
             finegrained = mkIf config.hardware.nvidia.prime.offload.enable true;
           };
@@ -95,8 +121,7 @@ in {
         if cfg.proprietary.version == "unstable_beta" then
           nvidiaUnstable.beta # Use bleeding edge version
         else
-          config.boot.kernelPackages.nvidiaPackages.${cfg.proprietary.version}
+          config.boot.kernelPackages.nvidiaPackages.${cfg.proprietary.version};
-        ;
     };
 
     aviallon.hardware.nvidia.proprietary.EGLStream = mkDefault (
@@ -108,7 +133,8 @@ in {
     boot.extraModprobeConfig = ''
       options nvidia NVreg_RegistryDwords="${concatStringsSep ";" cfg.proprietary.registryDwords}"
     '';
-    aviallon.boot.cmdline = {}
+    aviallon.boot.cmdline =
+      { }
       // {
         "nvidia-drm.modeset" = 1;
         "nvidia-drm.fbdev" = 1;
@@ -120,8 +146,7 @@ in {
         "nvidia.NVreg_DynamicPowerManagement" = "0x02";
         "nvidia.NVreg_EnableS0ixPowerManagement" = 1;
         "nvidia.NVreg_TemporaryFilePath" = "/var/tmp";
-      }
+      };
-    ;
 
     programs.xwayland.package = mkIf cfg.proprietary.EGLStream xwaylandEGLStream;
     aviallon.programs.allowUnfreeList = [
@@ -164,7 +189,6 @@ in {
       # "__GL_THREADED_OPTIMIZATIONS" = toValue generalCfg.unsafeOptimizations;
       "KWIN_DRM_USE_EGL_STREAMS" = toValue cfg.proprietary.EGLStream; # Make KWin use EGL Streams if needed, because otherwise performance will be horrible.
 
-
       # Undocumented, fix for EGL not being found by Nvidia driver: https://github.com/NVIDIA/egl-wayland/issues/39#issuecomment-927288015
       __EGL_EXTERNAL_PLATFORM_CONFIG_DIRS = "/run/opengl-driver/share/egl/egl_external_platform.d";
 
@@ -176,15 +200,19 @@ in {
     };
 
     nix.settings.substituters = [ "https://cuda-maintainers.cachix.org" ];
-    nix.settings.trusted-public-keys = [ "cuda-maintainers.cachix.org-1:0dq3bujKpuEPMCX6U4WylrUDZ9JyUG0VpVZa7CNfq5E=" ];
+    nix.settings.trusted-public-keys = [
+      "cuda-maintainers.cachix.org-1:0dq3bujKpuEPMCX6U4WylrUDZ9JyUG0VpVZa7CNfq5E="
+    ];
 
-    nixpkgs.overlays = []
+    nixpkgs.overlays =
-      ++ optional (cfg.proprietary.version == "unstable_beta") (final: prev: {
+      [ ]
+      ++ optional (cfg.proprietary.version == "unstable_beta") (
+        final: prev: {
           cudaPackages_11 = final.unstable.cudaPackages_11;
           cudaPackages_12 = final.unstable.cudaPackages_12;
           cudaPackages = final.unstable.cudaPackages;
 
-      })
+        }
-    ;
+      );
   };
 }

laptop.nix

@@ -1,8 +1,14 @@
-{ config, pkgs, lib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.laptop;
-in {
+in
+{
   options.aviallon.laptop = {
     enable = mkOption {
       default = false;
@@ -14,7 +20,11 @@ in {
       default = "tlp";
       example = "power-profiles-daemon";
       description = "Change service used to manage power consumption on laptop";
-      type = types.enum [ "tlp" "power-profiles-daemon" false ];
+      type = types.enum [
+        "tlp"
+        "power-profiles-daemon"
+        false
+      ];
     };
     tweaks = {
       pcieAspmForce = mkEnableOption "hardcore tweaks to power consumption. Warning: Might be dangerous to use.";
@@ -55,10 +65,11 @@ in {
       };
     };
 
-
+    systemd.services.aspm-force-enable =
-    systemd.services.aspm-force-enable = let
+      let
         aspm_enable = pkgs.callPackage ./packages/aspm_enable { };
-    in {
+      in
+      {
         serviceConfig = {
           ExecStart = [
             "${aspm_enable}/bin/aspm_enable"
@@ -74,7 +85,8 @@ in {
     services.power-profiles-daemon.enable = (cfg.power-manager == "power-profiles-daemon");
     powerManagement.powertop.enable = mkDefault true;
     systemd.services.powertop = mkIf config.powerManagement.powertop.enable {
-      serviceConfig.ExecStart = let
+      serviceConfig.ExecStart =
+        let
           script = pkgs.writeShellScriptBin "powertop-auto-tune" ''
             ${pkgs.powertop}/bin/powertop --auto-tune
 
@@ -85,7 +97,8 @@ in {
               echo 'on' > /sys/bus/usb/devices/$i/power/control
             done
           '';
-      in mkOverride 10 "${script}/bin/powertop-auto-tune";
+        in
+        mkOverride 10 "${script}/bin/powertop-auto-tune";
     };
   };
 }

lib/attrsets.nix

@@ -1,17 +1,25 @@
-{lib, myLib, ...}:
+{ lib, myLib, ... }:
 with lib;
 rec {
-  mergeAttrsRecursive = a: b: foldAttrs (item: acc:
+  mergeAttrsRecursive =
+    a: b:
+    foldAttrs
+      (
+        item: acc:
         if (isNull acc) then
           item
         else if (isList item) then
-      if isList acc then
+          if isList acc then acc ++ item else [ acc ] ++ item
-        acc ++ item
-      else [ acc ] ++ item
         else if (isString item) then
           acc + item
         else if (isAttrs item) then
           mergeAttrsRecursive acc item
-    else item
+        else
-  ) null [ b a ];
+          item
+      )
+      null
+      [
+        b
+        a
+      ];
 }

lib/config.nix

@@ -1,18 +1,24 @@
-{lib, myLib}:
+{ lib, myLib }:
 with lib;
 let
-  mkListToString = { sep ? " " }: list: concatStringsSep sep (
+  mkListToString =
-    forEach list (v: toString v)
+    {
-  );
+      sep ? " ",
-in rec {
+    }:
+    list: concatStringsSep sep (forEach list (v: toString v));
+in
+rec {
   mkValueString =
     let
-      gen = generators.mkValueStringDefault {};
+      gen = generators.mkValueStringDefault { };
-      listToString = mkListToString {};
+      listToString = mkListToString { };
-    in v: if isList v then listToString v
+    in
-          else gen v;
+    v: if isList v then listToString v else gen v;
 
-  mkKeyValue = { sep }: with generators; toKeyValue {
+  mkKeyValue =
+    { sep }:
+    with generators;
+    toKeyValue {
       mkKeyValue = mkKeyValueDefault {
         mkValueString = mkValueString;
       } sep;

lib/debug.nix

@@ -1,22 +1,37 @@
 { lib, myLib }:
 with lib;
 rec {
-  toPretty = depth: x:
+  toPretty =
+    depth: x:
     # Stolen from: https://github.com/teto/nixpkgs/blob/6f098631f6f06b93c17f49abdf677790e017778d/lib/debug.nix#L109C5-L117C30
     let
-        snip = v: if      isList  v then noQuotes "[…]" v
+      snip =
-                  else if isAttrs v then noQuotes "{…}" v
+        v:
-                  else v;
+        if isList v then
-        noQuotes = str: v: { __pretty = const str; val = v; };
+          noQuotes "[…]" v
-        modify = n: fn: v: if (n == 0) then fn v
+        else if isAttrs v then
-                      else if isList  v then map (modify (n - 1) fn) v
+          noQuotes "{…}" v
-                      else if isAttrs v then mapAttrs
+        else
-                        (const (modify (n - 1) fn)) v
+          v;
-                      else v;
+      noQuotes = str: v: {
-    in lib.generators.toPretty { allowPrettyValues = true; } (modify depth snip x);
+        __pretty = const str;
+        val = v;
+      };
+      modify =
+        n: fn: v:
+        if (n == 0) then
+          fn v
+        else if isList v then
+          map (modify (n - 1) fn) v
+        else if isAttrs v then
+          mapAttrs (const (modify (n - 1) fn)) v
+        else
+          v;
+    in
+    lib.generators.toPretty { allowPrettyValues = true; } (modify depth snip x);
 
-  traceValWithPrefix = prefix: value:
+  traceValWithPrefix =
+    prefix: value:
     #trace "traceValWithPrefix 'prefix': ${prefix}" value
-    trace "${prefix}: ${toPretty 2 value}" value
+    trace "${prefix}: ${toPretty 2 value}" value;
-  ;
 }

lib/default.nix

@@ -1,11 +1,19 @@
-{ lib ? import <nixpkgs/lib, ... }:
+{
+  lib ? import < nixpkgs/lib,
+  ...
+}:
 let
-  myLib = lib.makeExtensible (self: let
+  myLib = lib.makeExtensible (
-    callLibs = file: import file {
+    self:
+    let
+      callLibs =
+        file:
+        import file {
           inherit lib;
           myLib = self;
         };
-  in {
+    in
+    {
       math = callLibs ./math.nix;
       config = callLibs ./config.nix;
       optimizations = callLibs ./optimizations.nix;
@@ -13,5 +21,7 @@ let
       types = callLibs ./types.nix;
       debug = callLibs ./debug.nix;
       derivations = callLibs ./derivations.nix;
-  });
+    }
-in myLib
+  );
+in
+myLib

lib/derivations.nix

@@ -1,15 +1,13 @@
-{lib, myLib, ...}:
+{ lib, myLib, ... }:
 with lib;
 rec {
-  isBroken = x:
+  isBroken =
+    x:
     let
       tryX = builtins.tryEval x;
     in
-      if
+    if tryX.success && (isDerivation tryX.value) then
-        tryX.success && (isDerivation tryX.value)
-      then
       tryX.value.meta.insecure || tryX.value.meta.broken
     else
-        true
+      true;
-    ;
 }

lib/math.nix

@@ -1,12 +1,16 @@
-{lib
+{
-, myLib
+  lib,
+  myLib,
 }:
 
 rec {
-  log2 = let
+  log2 =
+    let
       mylog = x: y: if (x >= 2) then mylog (x / 2) (y + 1) else y;
-  in x: mylog x 0;
+    in
+    x: mylog x 0;
 
-  clamp = min_x: max_x: x: lib.min ( lib.max x min_x ) max_x;
+  clamp =
+    min_x: max_x: x:
+    lib.min (lib.max x min_x) max_x;
 }
-

lib/optimizations.nix

@@ -33,7 +33,12 @@ let
     "-Wl,-sort-common"
     "-Wl,--gc-sections"
   ];
-  ltoFlags = { threads ? 1, thin ? false }: [
+  ltoFlags =
+    {
+      threads ? 1,
+      thin ? false,
+    }:
+    [
       # Fat LTO objects are object files that contain both the intermediate language and the object code. This makes them usable for both LTO linking and normal linking.
       "-flto=${toString threads}" # Use -flto=auto to use GNU make’s job server, if available, or otherwise fall back to autodetection of the number of CPU threads present in your system.
       (optionalString (!thin) "-ffat-lto-objects")
@@ -104,9 +109,11 @@ let
     "-floop-nest-optimize" # "Calculates a loop structure optimized for data-locality and parallelism."
   ];
 
-  archToX86Level = arch:
+  archToX86Level =
+    arch:
     let
-      _map = { }
+      _map =
+        { }
         // genAttrs [
           "nehalem"
           "westmere"
@@ -122,8 +129,7 @@ let
           "bdver2" # Piledriver
           "bdver3" # Steamroller
           "x86-64-v2"
-      ]
+        ] (name: 2)
-        (name: 2)
         // genAttrs [
           "haswell"
           "broadwell"
@@ -134,8 +140,7 @@ let
           "znver2"
           "znver3"
           "x86-64-v3"
-      ]
+        ] (name: 3)
-        (name: 3)
         // genAttrs [
           "knl"
           "knm"
@@ -150,20 +155,16 @@ let
           "rocketlake"
           "znver4"
           "x86-64-v4"
-      ]
+        ] (name: 4);
-        (name: 4)
-      ;
     in
-    if (hasAttr arch _map) then _map.${arch} else 1
+    if (hasAttr arch _map) then _map.${arch} else 1;
-  ;
 
-  getARMLevel = arch:
+  getARMLevel =
-    if (! isNull arch) then
+    arch: if (!isNull arch) then toInt (elemAt (builtins.match "armv([0-9]).+") 0) else null;
-      toInt (elemAt (builtins.match "armv([0-9]).+") 0)
-    else null;
 
   # https://go.dev/doc/install/source#environment
-  getGOARM = armLevel: if (isNull armLevel) || (armLevel < 5) || (armLevel > 7) then null else armLevel;
+  getGOARM =
+    armLevel: if (isNull armLevel) || (armLevel < 5) || (armLevel > 7) then null else armLevel;
 
   workarounds = {
     # https://www.intel.com/content/dam/support/us/en/documents/processors/mitigations-jump-conditional-code-erratum.pdf
@@ -177,7 +178,8 @@ let
     };
   };
 
-  addMarchSpecific = march:
+  addMarchSpecific =
+    march:
     let
       _map = {
         skylake = workarounds.intel-jump-conditional-code;
@@ -188,16 +190,22 @@ let
     in
     attrByPath [ march ] { } _map;
 
-
+  cacheTuning =
-  cacheTuning = { compiler, l1d ? null, l1i ? null, l1Line ? null, lastLevel ? null }:
+    {
-    if compiler == "gcc" then [ ]
+      compiler,
-      ++ optional (! isNull l1d) "--param l1-cache-size=${toString l1d}"
+      l1d ? null,
-      ++ optional (! isNull l1Line) "--param l1-cache-line-size=${toString l1Line}"
+      l1i ? null,
-      ++ optional (! isNull lastLevel) "--param l2-cache-size=${toString lastLevel}"
+      l1Line ? null,
+      lastLevel ? null,
+    }:
+    if compiler == "gcc" then
+      [ ]
+      ++ optional (!isNull l1d) "--param l1-cache-size=${toString l1d}"
+      ++ optional (!isNull l1Line) "--param l1-cache-line-size=${toString l1Line}"
+      ++ optional (!isNull lastLevel) "--param l2-cache-size=${toString lastLevel}"
     else
       [ ];
 
-
 in
 rec {
 
@@ -209,51 +217,63 @@ rec {
     "very-unsafe" = 5;
   };
 
-  addAttrs = pkg: attrs: pkg.overrideAttrs (old:
+  addAttrs =
-    (myLib.attrsets.mergeAttrsRecursive old attrs) // {
+    pkg: attrs:
-      passthru = (pkg.passthru or {}) // (attrs.passtru or {});
+    pkg.overrideAttrs (
+      old:
+      (myLib.attrsets.mergeAttrsRecursive old attrs)
+      // {
+        passthru = (pkg.passthru or { }) // (attrs.passtru or { });
       }
     );
 
-  optimizePkg = pkg: { level ? "normal"
+  optimizePkg =
-                     , recursive ? 0
+    pkg:
-                     , optimizeFlags ? (guessOptimizationFlags pkg)
+    {
-                     , blacklist ? [ ]
+      level ? "normal",
-                     , ltoBlacklist ? [ ]
+      recursive ? 0,
-                     , overrideMap ? { }
+      optimizeFlags ? (guessOptimizationFlags pkg),
-                     , stdenv ? null
+      blacklist ? [ ],
-                     , lto ? false
+      ltoBlacklist ? [ ],
-                     , attributes ? null
+      overrideMap ? { },
-                     , _depth ? 0
+      stdenv ? null,
-                     , ...
+      lto ? false,
+      attributes ? null,
+      _depth ? 0,
+      ...
     }@attrs:
     if _depth > recursive then
       pkg # Max depth reached, return un-modified pkg
     else if isNull pkg then
       pkg # Pkg is null, ignore
-    else if ! isDerivation pkg then
+    else if !isDerivation pkg then
       pkg # Pkg is not a derivation, nothing to override/optimize
     else if (hasAttr "overrideAttrs" pkg) then
       let
         _pkgStdenvCC = attrByPath [ "stdenv" "cc" ] null pkg;
         _ltoBlacklisted = any (p: p == getName pkg) ltoBlacklist;
-        _lto =
+        _lto = if (lto && _ltoBlacklisted) then warn "LTO-blacklisted '${getName pkg}'" false else lto;
-          if (lto && _ltoBlacklisted) then warn "LTO-blacklisted '${getName pkg}'" false
-          else lto;
         _stdenvCC = if isNull stdenv then _pkgStdenvCC else stdenv.cc;
-        optimizedAttrs = optimizeFlags (attrs // {
+        optimizedAttrs = optimizeFlags (
+          attrs
+          // {
             inherit level;
             compiler =
-            if isNull _pkgStdenvCC then null
+              if isNull _pkgStdenvCC then
-            else if pkg.stdenv.cc.isGNU then "gcc"
+                null
-            else if pkg.stdenv.cc.isClang then "clang"
+              else if pkg.stdenv.cc.isGNU then
-            else throw "Unknown compiler '${getName pkg.stdenv.cc}'" null
+                "gcc"
-          ;
+              else if pkg.stdenv.cc.isClang then
+                "clang"
+              else
+                throw "Unknown compiler '${getName pkg.stdenv.cc}'" null;
             lto = _lto;
             stdenvCC = _stdenvCC;
-        });
+          }
-        _nativeBuildInputs = filter (p: ! isNull p) (pkg.nativeBuildInputs or [ ]);
+        );
-        _nativeBuildInputsOverriden = forEach _nativeBuildInputs (_pkg:
+        _nativeBuildInputs = filter (p: !isNull p) (pkg.nativeBuildInputs or [ ]);
+        _nativeBuildInputsOverriden = forEach _nativeBuildInputs (
+          _pkg:
           let
             _pkgName = myGetName _pkg;
             hasOverride = any (n: n == _pkgName) (attrNames overrideMap);
@@ -265,107 +285,126 @@ rec {
             _pkg
         );
 
-        _buildInputs = filter (p: (! isNull p) && (isDerivation p)) (pkg.buildInputs or [ ]);
+        _buildInputs = filter (p: (!isNull p) && (isDerivation p)) (pkg.buildInputs or [ ]);
-        _buildInputsOverriden = forEach _buildInputs (_pkg:
+        _buildInputsOverriden = forEach _buildInputs (
+          _pkg:
           if (any (n: n == myGetName _pkg) blacklist) then
             warn "Skipping blacklisted '${myGetName _pkg}'" _pkg
           else
-            optimizePkg _pkg (attrs // {
+            optimizePkg _pkg (
-              inherit level recursive blacklist optimizeFlags stdenv;
+              attrs
+              // {
+                inherit
+                  level
+                  recursive
+                  blacklist
+                  optimizeFlags
+                  stdenv
+                  ;
                 parallelize = null;
                 _depth = _depth + 1;
-            })
+              }
+            )
         );
         _pkgStdenvOverridable = attrByPath [ "override" "__functionArgs" "stdenv" ] null pkg;
         _pkgWithStdenv =
-          if (isNull _pkgStdenvOverridable) || (isNull stdenv)
+          if (isNull _pkgStdenvOverridable) || (isNull stdenv) then
-          then pkg
+            pkg
-          else warn "Replacing stdenv for '${myGetName pkg}'" (pkg.override { inherit stdenv; });
+          else
+            warn "Replacing stdenv for '${myGetName pkg}'" (pkg.override { inherit stdenv; });
 
-        _pkg = _pkgWithStdenv.overrideAttrs (old:
+        _pkg = _pkgWithStdenv.overrideAttrs (
+          old:
           {
             buildInputs = _buildInputsOverriden;
             nativeBuildInputs = _nativeBuildInputsOverriden;
 
           }
-          // optionalAttrs (! isNull _stdenvCC && _stdenvCC.isGNU) ({
+          // optionalAttrs (!isNull _stdenvCC && _stdenvCC.isGNU) ({
             AR = "${_stdenvCC.cc}/bin/gcc-ar";
             RANLIB = "${_stdenvCC.cc}/bin/gcc-ranlib";
             NM = "${_stdenvCC.cc}/bin/gcc-nm";
           })
           # Fix issue when CFLAGS is a string
           // optionalAttrs (hasAttr "CFLAGS" old) {
-            CFLAGS = if (! isList old.CFLAGS) then [ old.CFLAGS ] else old.CFLAGS;
+            CFLAGS = if (!isList old.CFLAGS) then [ old.CFLAGS ] else old.CFLAGS;
           }
         );
         _pkgOptimized = addAttrs _pkg optimizedAttrs;
         _pkgFinal =
-          if isAttrs attributes then
+          if isAttrs attributes then addAttrs _pkgOptimized (traceVal attributes) else _pkgOptimized;
-            addAttrs _pkgOptimized (traceVal attributes)
-          else
-            _pkgOptimized
-          ;
       in
       trace "Optimized ${myGetName pkg} with overrideAttrs at level '${level}' (depth: ${toString _depth}, lto: ${if lto then "true" else "false"})" _pkgFinal
     else if (hasAttr "name" pkg) then
       warn "Can't optimize ${myGetName pkg} (depth: ${toString _depth})" pkg
     else
-      throw "Not a pkg: ${builtins.toJSON pkg} (depth: ${toString _depth})" pkg
+      throw "Not a pkg: ${builtins.toJSON pkg} (depth: ${toString _depth})" pkg;
-  ;
 
-  myGetName = pkg:
+  myGetName = pkg: if isDerivation pkg then getName pkg else null;
-    if isDerivation pkg
-    then getName pkg
-    else null;
   #else warn "getName input is not a derivation: '${toString pkg}'" null;
 
-  guessOptimizationFlags = pkg: { ... }@attrs: makeOptimizationFlags ({
+  guessOptimizationFlags =
+    pkg:
+    { ... }@attrs:
+    makeOptimizationFlags (
+      {
         rust = any (p: (myGetName p) == "rustc") pkg.nativeBuildInputs;
         cmake = any (p: (myGetName p) == "cmake") pkg.nativeBuildInputs;
         go = any (p: (myGetName p) == "go") pkg.nativeBuildInputs;
         ninja = any (p: (myGetName p) == "ninja") pkg.nativeBuildInputs;
         autotools = any (p: (myGetName p) == "autoreconf-hook") pkg.nativeBuildInputs;
-  } // attrs);
+      }
+      // attrs
+    );
 
   makeOptimizationFlags =
-    { level ? "normal"
+    {
-    , extraCFlags ? null
+      level ? "normal",
-    , lto ? false
+      extraCFlags ? null,
-    , parallelize ? null
+      lto ? false,
-    , cpuArch ? null
+      parallelize ? null,
-    , cpuTune ? null
+      cpuArch ? null,
-    , ISA ? "amd64"
+      cpuTune ? null,
-    , armLevel ? (getARMLevel cpuArch)
+      ISA ? "amd64",
-    , x86Level ? (archToX86Level cpuArch)
+      armLevel ? (getARMLevel cpuArch),
-    , check ? false
+      x86Level ? (archToX86Level cpuArch),
-    , compiler ? "gcc"
+      check ? false,
-    , stdenvCC ? null
+      compiler ? "gcc",
-    , cpuCores ? 4
+      stdenvCC ? null,
-    , go ? false
+      cpuCores ? 4,
-    , rust ? false
+      go ? false,
-    , cmake ? false
+      rust ? false,
-    , ninja ? false
+      cmake ? false,
-    , autotools ? false
+      ninja ? false,
-    , l1LineCache ? null
+      autotools ? false,
-    , l1iCache ? null
+      l1LineCache ? null,
-    , l1dCache ? null
+      l1iCache ? null,
-    , lastLevelCache ? null
+      l1dCache ? null,
-    , ...
+      lastLevelCache ? null,
+      ...
     }:
     let
       levelN = levelNames.${level};
       march =
-        if (! isNull cpuArch) then cpuArch
+        if (!isNull cpuArch) then
-        else if (! isNull cpuTune) then cpuTune
+          cpuArch
-        else "generic";
+        else if (!isNull cpuTune) then
+          cpuTune
+        else
+          "generic";
       uarchTune =
-        if (! isNull cpuTune) then cpuTune
+        if (!isNull cpuTune) then
-        else if (! isNull cpuArch) then cpuArch
+          cpuTune
-        else "generic";
+        else if (!isNull cpuArch) then
-    in myLib.debug.traceValWithPrefix "optimizations" (foldl' myLib.attrsets.mergeAttrsRecursive {} [
+          cpuArch
+        else
+          "generic";
+    in
+    myLib.debug.traceValWithPrefix "optimizations" (
+      foldl' myLib.attrsets.mergeAttrsRecursive { } [
         (rec {
-      CFLAGS = unique
+          CFLAGS = unique (
-        ([ ]
+            [ ]
             ++ requiredFlags
             ++ optionals (compiler == "clang") clangSpecificFlags
             ++ optionals (levelN >= 1) genericCompileFlags
@@ -373,23 +412,24 @@ rec {
             ++ optionals (levelN >= 3) moderatelyUnsafeOptimizationFlags
             ++ optionals (levelN >= 4) unsafeOptimizationFlags
             ++ optionals (levelN >= 5) veryUnsafeOptimizationFlags
-        ++ optionals lto (ltoFlags { threads = myLib.math.log2 cpuCores; })
+            ++ optionals lto (ltoFlags {
-        ++ optionals (! isNull parallelize) (automaticallyParallelizeFlags parallelize)
+              threads = myLib.math.log2 cpuCores;
-        ++ optionals (! isNull extraCFlags) extraCFlags
+            })
-        ++ optionals (! isNull cpuArch) [ "-march=${cpuArch}" ]
+            ++ optionals (!isNull parallelize) (automaticallyParallelizeFlags parallelize)
-        ++ optionals (! isNull cpuTune) [ "-mtune=${uarchTune}" ]
+            ++ optionals (!isNull extraCFlags) extraCFlags
+            ++ optionals (!isNull cpuArch) [ "-march=${cpuArch}" ]
+            ++ optionals (!isNull cpuTune) [ "-mtune=${uarchTune}" ]
             ++ cacheTuning {
               inherit compiler;
               l1Line = l1LineCache;
               l1i = l1iCache;
               l1d = l1dCache;
               lastLevel = lastLevelCache;
-        });
+            }
+          );
           CXXFLAGS = CFLAGS;
-      CPPFLAGS = []
+          CPPFLAGS = [ ] ++ optionals (levelN >= 1) genericPreprocessorFlags;
-        ++ optionals (levelN >= 1) genericPreprocessorFlags;
+          LDFLAGS = [ ] ++ optionals (levelN >= 3) genericLinkerFlags;
-      LDFLAGS = []
-        ++ optionals (levelN >= 3) genericLinkerFlags;
 
           preConfigure = ''
 
@@ -419,8 +459,7 @@ rec {
               ''}
             )
 
-      ''
+          '';
-      ;
         })
         (optionalAttrs ninja {
           preConfigure = ''
@@ -431,10 +470,14 @@ rec {
           '';
         })
         (optionalAttrs rust {
-      RUSTFLAGS = [ ]
+          RUSTFLAGS =
+            [ ]
             ++ optionals (levelN >= 2) [ "-C opt-level=3" ]
-      ++ optionals lto [ "-C lto=fat" "-C embed-bitcode=on" ]
+            ++ optionals lto [
-      ++ optionals (! isNull cpuArch) [ "-C target-cpu=${cpuArch}" ]
+              "-C lto=fat"
+              "-C embed-bitcode=on"
+            ]
+            ++ optionals (!isNull cpuArch) [ "-C target-cpu=${cpuArch}" ]
           #++ [ "-C embed-bitcode=off" "-C lto=off" ] # Not needed since rust 1.45
           #++ optionals lto [ "-Clinker-plugin-lto" "-Clto" ]
           ;
@@ -460,6 +503,6 @@ rec {
           CGO_LDFLAGS_ALLOW = "-Wl.*";
         })
         (addMarchSpecific march)
-  ])
+      ]
-  ;
+    );
 }

lib/types.nix

@@ -2,10 +2,14 @@
 with lib;
 {
   package' = types.package // {
-    merge = loc: defs:
+    merge =
-      let res = mergeDefaultOption loc defs;
+      loc: defs:
-      in if builtins.isPath res || (builtins.isString res && ! builtins.hasContext res)
+      let
-        then toDerivation res
+        res = mergeDefaultOption loc defs;
-        else res;
+      in
+      if builtins.isPath res || (builtins.isString res && !builtins.hasContext res) then
+        toDerivation res
+      else
+        res;
   };
 }

network.nix

@@ -1,4 +1,10 @@
-{ config, pkgs, lib, myLib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  myLib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.network;
@@ -16,15 +22,27 @@ in
       default = "systemd-networkd";
       example = "NetworkManager";
       description = "Set network backend";
-      type = types.enum [ "systemd-networkd" "NetworkManager" "dhcpcd" ];
+      type = types.enum [
+        "systemd-networkd"
+        "NetworkManager"
+        "dhcpcd"
+      ];
     };
     dns = mkOption {
       default = "systemd-resolved";
       example = "dnsmasq";
       description = "Set network DNS";
-      type = types.enum [ "systemd-resolved" "dnsmasq" "unbound" "none" "default" ];
+      type = types.enum [
+        "systemd-resolved"
+        "dnsmasq"
+        "unbound"
+        "none"
+        "default"
+      ];
+    };
+    vpnSupport = mkEnableOption "VPN support of many kinds in NetworkManager" // {
+      default = desktopCfg.enable;
     };
-    vpnSupport = mkEnableOption "VPN support of many kinds in NetworkManager" // { default = desktopCfg.enable; };
   };
 
   config = mkIf cfg.enable {
@@ -32,11 +50,10 @@ in
     networking.networkmanager.enable = (cfg.backend == "NetworkManager");
     networking.dhcpcd.enable = (cfg.backend == "dhcpcd");
 
-
     services.resolved = {
       enable = (cfg.dns == "systemd-resolved");
       settings.Resolve = {
-        LLMNR = mkForce false; # https://www.blackhillsinfosec.com/how-to-disable-llmnr-why-you-want-to/
+        LLMNR = mkForce false; # https://www.blackhillsinfosec.com/how-to-disable-llmnr-why-you-want-to/
         DNSSEC = false;
         DNS = [
           # cloudflare-dns.com
@@ -59,7 +76,9 @@ in
     networking.networkmanager = {
       wifi.backend = mkDefault "iwd";
       dns = mkDefault cfg.dns;
-      plugins = with pkgs; []
+      plugins =
+        with pkgs;
+        [ ]
         ++ optional (cfg.dns == "dnsmasq") dnsmasq
         ++ optionals cfg.vpnSupport [
           networkmanager_strongswan
@@ -67,8 +86,7 @@ in
           networkmanager-openconnect
           networkmanager-sstp
           networkmanager-l2tp
-        ]
+        ];
-      ;
     };
     networking.wireless.enable = (cfg.backend != "NetworkManager");
     networking.wireless.iwd.enable = true;
@@ -78,7 +96,9 @@ in
     # Must always be false
     networking.useDHCP = false;
 
-    networking.hostId = mkDefault (substring 0 8 (builtins.hashString "sha256" config.networking.hostName));
+    networking.hostId = mkDefault (
+      substring 0 8 (builtins.hashString "sha256" config.networking.hostName)
+    );
     networking.hostName = mkDefault (builtins.abort "Default hostname not changed" null);
 
     # Needed for proper WiFi support in some countries (like France, for instance)

nix/builder.nix

@@ -1,4 +1,10 @@
-{ config, pkgs, lib, myLib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  myLib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.nix;
@@ -10,35 +16,40 @@ let
 
   getSpeed = cores: threads: cores + (threads - cores) / 2;
 
-  mkBuildMachine = {
+  mkBuildMachine =
+    {
       hostName,
       cores,
-    systems ? [ "x86_64-linux" ] ,
+      systems ? [ "x86_64-linux" ],
       threads ? (cores * 2),
       features ? [ ],
-    x86ver ? 1 ,
+      x86ver ? 1,
       ...
-  }@attrs: let
+    }@attrs:
+    let
       speedFactor = getSpeed cores threads;
-  in {
+    in
+    {
       inherit hostName speedFactor;
-    systems = systems
+      systems = systems ++ optional (any (s: s == "x86_64-linux") systems) "i686-linux";
-      ++ optional (any (s: s == "x86_64-linux") systems) "i686-linux"
-    ;
       sshUser = "builder";
       sshKey = buildUserKeyFilePath;
       maxJobs = myLib.math.log2 cores;
-    supportedFeatures = [ "kvm" "benchmark" ]
+      supportedFeatures = [
+        "kvm"
+        "benchmark"
+      ]
       ++ optional (speedFactor > 8) "big-parallel"
       ++ optional (x86ver >= 2) "gccarch-x86-64-v2"
       ++ optional (x86ver >= 3) "gccarch-x86-64-v3"
       ++ optional (x86ver >= 4) "gccarch-x86-64-v4"
-      ++ features
+      ++ features;
-    ;
 
     };
 
-  machineList = filterAttrs (name: value: config.networking.hostName != name && value.enable) cfg.builder.buildMachines;
+  machineList = filterAttrs (
+    name: value: config.networking.hostName != name && value.enable
+  ) cfg.builder.buildMachines;
 in
 {
   imports = [
@@ -59,9 +70,16 @@ in
     };
 
     buildMachines = mkOption {
-      type = types.attrsOf (types.submoduleWith {
+      type = types.attrsOf (
+        types.submoduleWith {
           modules = [
-        ({ config, options, name, ...}:
+            (
+              {
+                config,
+                options,
+                name,
+                ...
+              }:
               {
                 options = {
                   enable = mkOption {
@@ -104,10 +122,13 @@ in
                   };
                 };
 
-        })]; });
+              }
-      default = {};
+            )
-      example = literalExpression
+          ];
-        ''
+        }
+      );
+      default = { };
+      example = literalExpression ''
         {
           luke-skywalker-nixos = {
             hostName = "2aXX:e0a:18e:8670::";
@@ -122,20 +143,29 @@ in
   };
 
   config = {
-    nix.buildMachines = traceValSeqN 3 (mapAttrsToList (name: value:
+    nix.buildMachines = traceValSeqN 3 (
+      mapAttrsToList (
+        name: value:
         mkBuildMachine {
-        inherit (value) hostName cores threads x86ver;
+          inherit (value)
+            hostName
+            cores
+            threads
+            x86ver
+            ;
         }
-    ) machineList);
+      ) machineList
+    );
 
-    programs.ssh.extraConfig = concatStringsSep "\n" (mapAttrsToList (name: value:
+    programs.ssh.extraConfig = concatStringsSep "\n" (
-      (optionalString (value.sshConfig != "")
+      mapAttrsToList (
-        ''
+        name: value:
+        (optionalString (value.sshConfig != "") ''
           Host ${value.hostName}
             ${value.sshConfig}
-        ''
+        '')
-      )
+      ) machineList
-    ) machineList);
+    );
 
     users.users.builder = {
       isSystemUser = true;
@@ -146,7 +176,7 @@ in
       ];
       shell = pkgs.bashInteractive;
     };
-    users.groups.builder = {};
+    users.groups.builder = { };
     nix.settings.trusted-users = [ "builder" ];
 
     boot.enableContainers = mkForce true;

nix/nix.nix

@@ -1,4 +1,12 @@
-{config, pkgs, lib, myLib, nixpkgs, nixpkgs-unstable, ...}:
+{
+  config,
+  pkgs,
+  lib,
+  myLib,
+  nixpkgs,
+  nixpkgs-unstable,
+  ...
+}:
 with lib;
 with myLib;
 let
@@ -26,7 +34,8 @@ in
       upper = "05:00";
     };
 
-    system.build.nixos-rebuild = let
+    system.build.nixos-rebuild =
+      let
         nixos-rebuild = pkgs.nixos-rebuild.override { nix = config.nix.package.out; };
         nixos-rebuild-inhibit = pkgs.writeShellScriptBin "nixos-rebuild" ''
           exec ${config.systemd.package}/bin/systemd-inhibit --what=idle:shutdown --mode=block \
@@ -35,7 +44,8 @@ in
             -- \
               ${pkgs.coreutils}/bin/nice -n 19 -- ${nixos-rebuild}/bin/nixos-rebuild "$@"
         '';
-    in mkOverride 20 nixos-rebuild-inhibit;
+      in
+      mkOverride 20 nixos-rebuild-inhibit;
 
     environment.systemPackages = [
       (hiPrio config.system.build.nixos-rebuild)
@@ -63,8 +73,6 @@ in
       };
     };
 
-
-
     nix.gc.automatic = mkDefault true;
     nix.gc.dates = mkDefault "Monday,Wednesday,Friday,Sunday 03:00:00";
     nix.gc.randomizedDelaySec = "3h";
@@ -84,31 +92,40 @@ in
       };
     };
 
+    nix.package = optimizePkg {
+      stdenv = pkgs.fastStdenv;
+      level = "slower";
+    } pkgs.nixVersions.latest;
 
-    nix.package = optimizePkg { stdenv = pkgs.fastStdenv; level = "slower"; } pkgs.nixVersions.latest;
+    nix.settings.system-features = [
-
+      "big-parallel"
-    nix.settings.system-features = [ "big-parallel" "kvm" "benchmark" ]
+      "kvm"
-      ++ optional ( ! isNull generalCfg.cpu.arch ) "gccarch-${generalCfg.cpu.arch}"
+      "benchmark"
-      ++ optional ( generalCfg.cpu.x86.level >= 2 ) "gccarch-x86-64-v2"
+    ]
-      ++ optional ( generalCfg.cpu.x86.level >= 3 ) "gccarch-x86-64-v3"
+    ++ optional (!isNull generalCfg.cpu.arch) "gccarch-${generalCfg.cpu.arch}"
-      ++ optional ( generalCfg.cpu.x86.level >= 4 ) "gccarch-x86-64-v4"
+    ++ optional (generalCfg.cpu.x86.level >= 2) "gccarch-x86-64-v2"
-    ;
+    ++ optional (generalCfg.cpu.x86.level >= 3) "gccarch-x86-64-v3"
+    ++ optional (generalCfg.cpu.x86.level >= 4) "gccarch-x86-64-v4";
 
     nix.settings.builders-use-substitutes = true;
     nix.settings.substitute = true;
-    nix.settings.experimental-features = [ "nix-command" "flakes" ]
+    nix.settings.experimental-features = [
+      "nix-command"
+      "flakes"
+    ]
     ++ optional (versionOlder config.nix.package.version "2.19") "repl-flake"
-      ++ optional cfg.contentAddressed "ca-derivations"
+    ++ optional cfg.contentAddressed "ca-derivations";
-    ;
 
     nix.settings.download-attempts = 5;
     nix.settings.stalled-download-timeout = 20;
 
-    nix.settings.substituters = mkBefore ([]
+    nix.settings.substituters = mkBefore (
+      [ ]
       ++ optional cfg.enableCustomSubstituter "https://nix-cache.lesviallon.fr"
       ++ optional cfg.contentAddressed "https://cache.ngi0.nixos.org/"
     );
-    nix.settings.trusted-public-keys = mkBefore ([]
+    nix.settings.trusted-public-keys = mkBefore (
+      [ ]
       ++ optional cfg.enableCustomSubstituter "nix-cache.lesviallon.fr-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY="
       ++ optional cfg.contentAddressed "cache.ngi0.nixos.org-1:KqH5CBLNSyX184S9BKZJo1LxrxJ9ltnY2uAs5c/f1MA="
     );
@@ -118,9 +135,15 @@ in
     nix.settings.cores = mkIf (generalCfg.cpu.threads != null) generalCfg.cpu.threads;
     nix.settings.max-jobs = mkIf (generalCfg.cpu.threads != null) (math.log2 generalCfg.cpu.threads);
 
-    nix.settings.trusted-users = [ "root" "@wheel" ];
+    nix.settings.trusted-users = [
+      "root"
+      "@wheel"
+    ];
 
-    nix.settings.hashed-mirrors = [ "https://tarballs.nixos.org" "https://nixpkgs-unfree.cachix.org" ];
+    nix.settings.hashed-mirrors = [
+      "https://tarballs.nixos.org"
+      "https://nixpkgs-unfree.cachix.org"
+    ];
 
     nix.registry = {
       nixpkgs.flake = nixpkgs;

optimizations/optimizations.nix

@@ -1,4 +1,11 @@
-{ config, pkgs, options, lib, myLib, ... }:
+{
+  config,
+  pkgs,
+  options,
+  lib,
+  myLib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.optimizations;
@@ -24,18 +31,18 @@ let
     lto = cfg.lto.enable;
   };
 
-  optimizePkg = {
+  optimizePkg =
-      attributes ? {},
+    {
+      attributes ? { },
       stdenv ? null,
       ...
-    }@attrs: pkg:
+    }@attrs:
+    pkg:
     myLib.optimizations.optimizePkg pkg (
-        defaultOptimizeAttrs
+      defaultOptimizeAttrs // cfg.defaultSettings // { inherit stdenv attributes; } // attrs
-        // cfg.defaultSettings
-        // { inherit stdenv attributes; }
-        // attrs
     );
-in {
+in
+{
   options.aviallon.optimizations = {
     enable = mkOption {
       default = true;
@@ -52,12 +59,22 @@ in {
       blacklist = mkOption {
         description = "Packages to blacklist from LTO";
         type = types.listOf types.str;
-        default = [ "x265" "cpio" "cups" "gtk+3" "which" "openssh" ];
+        default = [
+          "x265"
+          "cpio"
+          "cups"
+          "gtk+3"
+          "which"
+          "openssh"
+        ];
       };
     };
     extraCompileFlags = mkOption {
       default = [ ];
-      example = [ "-O2" "-mavx" ];
+      example = [
+        "-O2"
+        "-mavx"
+      ];
       description = "Add specific compile flags";
       type = types.listOf types.str;
     };
@@ -66,11 +83,14 @@ in {
         recursive = 0;
         level = "slower";
       };
-      example = { level = "unsafe"; recursive = 0; };
+      example = {
+        level = "unsafe";
+        recursive = 0;
+      };
       description = "Specify default options passed to optimizePkg";
     };
     optimizePkg = mkOption {
-      default = if cfg.enable then optimizePkg else ({...}: pkg: pkg);
+      default = if cfg.enable then optimizePkg else ({ ... }: pkg: pkg);
       example = "pkg: pkg.override { stdenv = pkgs.fastStdenv; }";
       description = "Function used for optimizing packages";
       type = with types; functionTo (functionTo package);
@@ -78,11 +98,22 @@ in {
     trace = mkEnableOption "trace attributes in overriden derivations";
     runtimeOverrides.enable = mkEnableOption "runtime overrides for performance sensitive libraries (glibc, ...)";
     blacklist = mkOption {
-      default = [ # Broken
+      default = [
-                  "alsa-lib" "glib" "lcms2" "gconf" "gnome-vfs"
+        # Broken
+        "alsa-lib"
+        "glib"
+        "lcms2"
+        "gconf"
+        "gnome-vfs"
 
         # Very slow
-                  "llvm" "clang" "clang-wrapper" "valgrind" "rustc" "tensorflow" "qtwebengine"
+        "llvm"
+        "clang"
+        "clang-wrapper"
+        "valgrind"
+        "rustc"
+        "tensorflow"
+        "qtwebengine"
 
         # Fixable with work, but slow for now
         "rapidjson"
@@ -95,8 +126,7 @@ in {
       type = with types; attrsOf package;
       default = {
       };
-      example = literalExpression
+      example = literalExpression ''
-        ''
         {
           ninja = pkgs.ninja-samurai;
           cmake = pkgs.my-cmake-override;
@@ -110,11 +140,14 @@ in {
 
     aviallon.optimizations.blacklist = mkDefault (
       options.aviallon.optimizations.blacklist.default
-        ++ (traceValSeq (forEach config.system.replaceRuntimeDependencies (x: lib.getName x.oldDependency )))
+      ++ (traceValSeq (forEach config.system.replaceRuntimeDependencies (x: lib.getName x.oldDependency)))
     );
-    system.replaceDependencies.replacements = mkIf (!lib.inPureEvalMode && cfg.runtimeOverrides.enable) [
+    system.replaceDependencies.replacements =
+      mkIf (!lib.inPureEvalMode && cfg.runtimeOverrides.enable)
+        [
           # glibc usually represents 20% of the userland CPU time. It is therefore very much worth optimizing.
-      /*{
+          /*
+            {
               original = pkgs.glibc;
               replacement = let
                 optimizedFlags = [ "-fipa-pta" ];
@@ -125,7 +158,8 @@ in {
                   NIX_CFLAGS_COMPILE = (attrs.env.NIX_CFLAGS_COMPILE or "") + (toString optimizedFlags.CFLAGS);
                 };
               });
-      }*/
+            }
+          */
           # zlib is in second place, given how often it is used
           #{
           #  original = pkgs.zlib;
@@ -135,22 +169,27 @@ in {
 
     nixpkgs.overlays = mkAfter [
       (self: super: {
-        veryFastStdenv = super.overrideCC super.gccStdenv (super.buildPackages.gcc_latest.overrideAttrs (old:
+        veryFastStdenv = super.overrideCC super.gccStdenv (
+          super.buildPackages.gcc_latest.overrideAttrs (
+            old:
             let
-            optimizedAttrs = {}
+              optimizedAttrs = { } // {
-              // {
                 configureFlags = [
-                  "--with-cpu-64=${generalCfg.cpu.arch}" "--with-arch-64=${generalCfg.cpu.arch}"
+                  "--with-cpu-64=${generalCfg.cpu.arch}"
+                  "--with-arch-64=${generalCfg.cpu.arch}"
                   "--with-tune-64=${generalCfg.cpu.tune}"
                   "--with-build-config=bootstrap-lto-lean"
                 ];
-              }
+              };
-            ;
+              ccWithProfiling = old.cc.overrideAttrs (_: {
-            ccWithProfiling = old.cc.overrideAttrs (_: { buildFlags = [ "profiledbootstrap" ]; } );
+                buildFlags = [ "profiledbootstrap" ];
-          in {
+              });
+            in
+            {
               cc = addAttrs ccWithProfiling optimizedAttrs;
             }
-        ));
+          )
+        );
       })
 
       (self: super: {

optimizations/services.nix

@@ -1,4 +1,10 @@
-{ config, options, pkgs, lib, ... }:
+{
+  config,
+  options,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.optimizations;
@@ -8,7 +14,8 @@ let
   };
   man-db = optimizePkg { level = "moderately-unsafe"; } pkgs.man-db;
   mandoc = optimizePkg { level = "moderately-unsafe"; } pkgs.mandoc;
-in {
+in
+{
   config = mkIf cfg.enable {
     documentation.man.man-db.package = man-db;
     documentation.man.mandoc.package = mandoc;

packages.nix

@@ -1,4 +1,10 @@
-{ config, pkgs, lib, myLib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  myLib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.programs;
@@ -6,12 +12,15 @@ let
   generalCfg = config.aviallon.general;
   optimizeCfg = config.aviallon.optimizations;
 
-  myOpenssh = if optimizeCfg.enable then (optimizeCfg.optimizePkg {} pkgs.openssh) else pkgs.openssh;
+  myOpenssh = if optimizeCfg.enable then (optimizeCfg.optimizePkg { } pkgs.openssh) else pkgs.openssh;
 in
 {
   imports = [
     ./programs
-    (mkRenamedOptionModule [ "aviallon" "programs" "compileFlags" ] [ "aviallon" "optimizations" "extraCompileFlags" ])
+    (mkRenamedOptionModule
+      [ "aviallon" "programs" "compileFlags" ]
+      [ "aviallon" "optimizations" "extraCompileFlags" ]
+    )
   ];
 
   options.aviallon.programs = {
@@ -23,14 +32,19 @@ in
     };
     allowUnfreeList = mkOption {
       default = [ ];
-      example = [ "nvidia-x11" "steam" ];
+      example = [
+        "nvidia-x11"
+        "steam"
+      ];
       description = "Allow specific unfree software to be installed";
       type = types.listOf types.str;
     };
     config = mkOption {
-      default = {};
+      default = { };
       type = types.attrs;
-      example = { cudaSupport = true; };
+      example = {
+        cudaSupport = true;
+      };
       description = "nixpkgs config settings to be applied to all nixpkgs instances";
     };
   };
@@ -39,9 +53,12 @@ in
 
     programs.java.enable = mkDefault (!generalCfg.minimal);
 
-    aviallon.programs.config.allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) cfg.allowUnfreeList;
+    aviallon.programs.config.allowUnfreePredicate =
+      pkg: builtins.elem (lib.getName pkg) cfg.allowUnfreeList;
 
-    environment.systemPackages = with pkgs; []
+    environment.systemPackages =
+      with pkgs;
+      [ ]
       ++ [
         vim
         wget

packages/aspm_enable/default.nix

@@ -1,12 +1,13 @@
-{lib
+{
-,bc
+  lib,
-,pciutils
+  bc,
-,gnugrep
+  pciutils,
-,coreutils
+  gnugrep,
-,bash
+  coreutils,
-,writeText
+  bash,
-,stdenv
+  writeText,
-,substituteAll
+  stdenv,
+  substituteAll,
 }:
 with lib;
 stdenv.mkDerivation rec {
@@ -26,13 +27,23 @@ stdenv.mkDerivation rec {
     substituteAllInPlace $out/bin/aspm_enable;
   '';
 
-  buildInputs = [ pciutils bc coreutils gnugrep ];
+  buildInputs = [
+    pciutils
+    bc
+    coreutils
+    gnugrep
+  ];
 
   meta = {
     description = "A program to forcibly enable PCIe ASPM for compatible devices";
     homepage = "https://wireless.wiki.kernel.org/en/users/Documentation/ASPM";
     license = licenses.gpl3Plus;
-    patforms = [ "x86_64-linux" "i686-linux" "aarch64-linux" "mipsel-linux" ];
+    patforms = [
+      "x86_64-linux"
+      "i686-linux"
+      "aarch64-linux"
+      "mipsel-linux"
+    ];
     maintainers = with maintainers; [ ];
   };
 }

packages/pinentry.nix

@@ -33,4 +33,3 @@ writeShellScriptBin "pinentry" ''
 
   exec ''${pinentryFlavors[$flavor]}/bin/pinentry
 ''
-

power.nix

@@ -1,10 +1,17 @@
-{ config, pkgs, lib, myLib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  myLib,
+  ...
+}:
 with lib;
 let
   generalCfg = config.aviallon.general;
   cfg = config.aviallon.power;
   undervoltType = with types; nullOr (addCheck int (x: (x < 0 && x > -200)));
-in {
+in
+{
   options.aviallon.power = {
     enable = mkOption {
       default = true;
@@ -16,7 +23,10 @@ in {
       default = "performance";
       example = "efficiency";
       description = "What to optimize towards";
-      type = types.enum [ "performance" "efficiency" ];
+      type = types.enum [
+        "performance"
+        "efficiency"
+      ];
     };
     powerLimit = {
       enable = mkEnableOption "power limiting";
@@ -120,15 +130,21 @@ in {
       ACTION!="remove", DEVPATH=="*intel-rapl:*", SUBSYSTEM=="powercap", RUN+="${pkgs.coreutils}/bin/chmod g+r '/sys%p/energy_uj'"
     '';
 
-    users.groups.power = {};
+    users.groups.power = { };
 
     systemd.services.undervolt-intel = {
-      script = ""
+      script =
+        ""
         + "${pkgs.undervolt}/bin/undervolt"
-        + (optionalString (! isNull cfg.undervolt.cpu.coreOffset ) " --core ${toString cfg.undervolt.cpu.coreOffset}")
+        + (optionalString (
-        + (optionalString (! isNull cfg.undervolt.cpu.cacheOffset ) " --cache ${toString cfg.undervolt.cpu.cacheOffset}")
+          !isNull cfg.undervolt.cpu.coreOffset
-        + (optionalString (! isNull cfg.undervolt.cpu.iGPUOffset ) " --gpu ${toString cfg.undervolt.cpu.iGPUOffset}")
+        ) " --core ${toString cfg.undervolt.cpu.coreOffset}")
-      ;
+        + (optionalString (
+          !isNull cfg.undervolt.cpu.cacheOffset
+        ) " --cache ${toString cfg.undervolt.cpu.cacheOffset}")
+        + (optionalString (
+          !isNull cfg.undervolt.cpu.iGPUOffset
+        ) " --gpu ${toString cfg.undervolt.cpu.iGPUOffset}");
       serviceConfig = {
         RemainAfterExit = true;
       };
@@ -138,11 +154,15 @@ in {
     };
 
     systemd.services.intel-powerlimit-ac = {
-      script = "${pkgs.undervolt}/bin/undervolt"
+      script =
-        + optionalString (! isNull cfg.powerLimit.ac.cpu ) " --power-limit-long ${toString cfg.powerLimit.ac.cpu} 28"
+        "${pkgs.undervolt}/bin/undervolt"
-        + optionalString (! isNull cfg.powerLimit.ac.cpuBoost ) " --power-limit-short ${toString cfg.powerLimit.ac.cpuBoost} 0.1"
+        + optionalString (
-        + optionalString (! isNull cfg.temperature.ac.cpu ) " --temp ${toString cfg.temperature.ac.cpu}"
+          !isNull cfg.powerLimit.ac.cpu
-      ;
+        ) " --power-limit-long ${toString cfg.powerLimit.ac.cpu} 28"
+        + optionalString (
+          !isNull cfg.powerLimit.ac.cpuBoost
+        ) " --power-limit-short ${toString cfg.powerLimit.ac.cpuBoost} 0.1"
+        + optionalString (!isNull cfg.temperature.ac.cpu) " --temp ${toString cfg.temperature.ac.cpu}";
       unitConfig = {
         ConditionACPower = true;
       };
@@ -156,11 +176,17 @@ in {
     };
 
     systemd.services.intel-powerlimit-battery = {
-      script = "${pkgs.undervolt}/bin/undervolt"
+      script =
-        + optionalString (! isNull cfg.powerLimit.battery.cpu ) " --power-limit-long ${toString cfg.powerLimit.battery.cpu} 28"
+        "${pkgs.undervolt}/bin/undervolt"
-        + optionalString (! isNull cfg.powerLimit.battery.cpuBoost ) " --power-limit-short ${toString cfg.powerLimit.battery.cpuBoost} 0.1"
+        + optionalString (
-        + optionalString (! isNull cfg.temperature.battery.cpu ) " --temp ${toString cfg.temperature.battery.cpu}"
+          !isNull cfg.powerLimit.battery.cpu
-      ;
+        ) " --power-limit-long ${toString cfg.powerLimit.battery.cpu} 28"
+        + optionalString (
+          !isNull cfg.powerLimit.battery.cpuBoost
+        ) " --power-limit-short ${toString cfg.powerLimit.battery.cpuBoost} 0.1"
+        + optionalString (
+          !isNull cfg.temperature.battery.cpu
+        ) " --temp ${toString cfg.temperature.battery.cpu}";
       unitConfig = {
         ConditionACPower = false;
       };

programs/bash.nix

@@ -1,4 +1,9 @@
-{ config, pkgs, lib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 {
   options.aviallon.programs.bash = {

programs/firefox.nix

@@ -1,17 +1,27 @@
-{config, pkgs, lib, ...}:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
-  genPrefList = {locked ? false}: prefs:
+  genPrefList =
+    {
+      locked ? false,
+    }:
+    prefs:
     let
       prefFuncName = if locked then "lockPref" else "defaultPref";
     in
     concatStringsSep "\n" (
-      mapAttrsToList
+      mapAttrsToList (
-        (key: value: ''${prefFuncName}(${builtins.toJSON key}, ${builtins.toJSON value});'' )
+        key: value: ''${prefFuncName}(${builtins.toJSON key}, ${builtins.toJSON value});''
-        prefs
+      ) prefs
     );
   cfg = config.programs.firefox;
-in {
+in
+{
   config = mkIf cfg.enable {
     programs.firefox.wrapperConfig = {
       smartcardSupport = true;
@@ -126,7 +136,8 @@ in {
 
       #"privacy.trackingprotection.origin_telemetry.enabled" = false;
 
-    } // {
+    }
+    // {
       "intl.accept_languages" = "fr-fr,en-us,en";
       "intl.locale.requested" = "fr,en-US";
       "media.eme.enabled" = true; # DRM

programs/git.nix

@@ -1,4 +1,10 @@
-{config, pkgs, lib, myLib, ...}:
+{
+  config,
+  pkgs,
+  lib,
+  myLib,
+  ...
+}:
 with lib;
 {
   programs.git = {

programs/htop.nix

@@ -1,12 +1,17 @@
-{config, pkgs, lib, ...}:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 {
   programs.htop.enable = true;
   programs.htop.settings = {
-#    fields=0 48 17 18 38 39 40 2 46 47 49 1
+    #    fields=0 48 17 18 38 39 40 2 46 47 49 1
-#    sort_key=46
+    #    sort_key=46
-#    sort_direction=-1
+    #    sort_direction=-1
-#    tree_sort_key=0
+    #    tree_sort_key=0
-#    tree_sort_direction=1
+    #    tree_sort_direction=1
     hide_kernel_threads = true;
     hide_userland_threads = true;
     shadow_other_users = 0;
@@ -38,9 +43,29 @@
     delay = 10;
     hide_function_bar = 0;
     header_layout = "two_50_50";
-    column_meters_0 = [ "AllCPUs" "Memory" "Swap" ];
+    column_meters_0 = [
-    column_meter_modes_0 = [ 1 1 1 ];
+      "AllCPUs"
-    column_meters_1 = [ "Tasks" "LoadAverage" "Uptime" "DiskIO" "NetworkIO" ];
+      "Memory"
-    column_meter_modes_1 = [ 2 2 2 2 2 ];
+      "Swap"
+    ];
+    column_meter_modes_0 = [
+      1
+      1
+      1
+    ];
+    column_meters_1 = [
+      "Tasks"
+      "LoadAverage"
+      "Uptime"
+      "DiskIO"
+      "NetworkIO"
+    ];
+    column_meter_modes_1 = [
+      2
+      2
+      2
+      2
+      2
+    ];
   };
 }

programs/libreoffice.nix

@@ -1,14 +1,26 @@
-{ config, pkgs, lib, myLib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  myLib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.programs.libreoffice;
 
   applyOverrides = overrides: pkg: pipe pkg overrides;
-in {
+in
+{
   options.aviallon.programs.libreoffice = {
     enable = mkEnableOption "LibreOffice";
     variant = mkOption {
-      type = with types; types.enum [ "still" "fresh" ];
+      type =
+        with types;
+        types.enum [
+          "still"
+          "fresh"
+        ];
       default = "fresh";
       description = "Which LibreOffice variant to use";
     };
@@ -35,19 +47,27 @@ in {
   config = mkIf cfg.enable {
     aviallon.programs.libreoffice.package =
       let
-        overridesList = []
+        overridesList =
-          ++ [(pkg: pkg.override {
+          [ ]
+          ++ [
+            (
+              pkg:
+              pkg.override {
                 variant = cfg.variant;
-            })]
+              }
-          ++ optional cfg.opencl (pkg: pkg.overrideAttrs (old: {
+            )
+          ]
+          ++ optional cfg.opencl (
+            pkg:
+            pkg.overrideAttrs (old: {
               buildInputs = old.buildInputs ++ [ pkgs.ocl-icd ];
-            }))
+            })
-        ;
+          );
-      in pkgs.libreoffice.override {
+      in
+      pkgs.libreoffice.override {
         unwrapped = applyOverrides overridesList cfg.package';
       };
 
-
     environment.systemPackages = [
       cfg.package
     ];

programs/nano.nix

@@ -1,4 +1,4 @@
-{config, pkgs, ...}:
+{ config, pkgs, ... }:
 {
   environment.systemPackages = [ pkgs.nanorc ];
   programs.nano.syntaxHighlight = false;

programs/nvtop.nix

@@ -1,13 +1,29 @@
-{ config, pkgs, lib, myLib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  myLib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.programs.nvtop;
-in {
+in
+{
   options.aviallon.programs.nvtop = {
     enable = mkEnableOption "nvtop";
     backend = mkOption {
       description = "Which backend to enable";
-      type = with types; listOf (enum [ "nvidia" "amd" "intel" "panthor" "panfrost" "msm" ]);
+      type =
+        with types;
+        listOf (enum [
+          "nvidia"
+          "amd"
+          "intel"
+          "panthor"
+          "panfrost"
+          "msm"
+        ]);
       default = [ "amd" ];
     };
 
@@ -25,7 +41,8 @@ in {
     aviallon.programs.nvtop.package = mkDefault (
       if (length cfg.backend > 1) then
         pkgs.nvtopPackages.full
-      else pkgs.nvtopPackages.${elemAt cfg.backend 0}
+      else
+        pkgs.nvtopPackages.${elemAt cfg.backend 0}
     );
 
     environment.systemPackages = [

security/default.nix

@@ -1,4 +1,4 @@
-{config, ...}:
+{ config, ... }:
 {
   imports = [
     ./hardening.nix

security/encryption.nix

@@ -1,8 +1,14 @@
-{ config, pkgs, lib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.security.encryption;
-in {
+in
+{
   options.aviallon.security.encryption = {
     enable = mkEnableOption "encryption-related tools and programs";
     cryptsetup.package = mkOption {

security/hardening.nix

@@ -1,4 +1,9 @@
-{ config, pkgs, lib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.hardening;
@@ -32,11 +37,18 @@ in
   };
 
   imports = [
-    (mkRemovedOptionModule [ "aviallon" "hardening" "services" "dbus" ] "dbus should use AppArmor hardening instead")
+    (mkRemovedOptionModule [
+      "aviallon"
+      "hardening"
+      "services"
+      "dbus"
+    ] "dbus should use AppArmor hardening instead")
   ];
 
   config = mkIf cfg.enable {
-    aviallon.boot.kernel.package = mkIf cfg.hardcore (mkDefault pkgs.linuxKernel.kernels.linux_hardened);
+    aviallon.boot.kernel.package = mkIf cfg.hardcore (
+      mkDefault pkgs.linuxKernel.kernels.linux_hardened
+    );
     security.lockKernelModules = mkIf cfg.hardcore (mkQuasiForce true);
     # security.protectKernelImage = mkIf cfg.hardcore (mkOverride 500 false); # needed for kexec
 
@@ -44,27 +56,26 @@ in
 
     security.sudo.execWheelOnly = true;
 
-    services.openssh.settings.PermitRootLogin =
+    services.openssh.settings.PermitRootLogin = if cfg.hardcore then "no" else "prohibit-password";
-      if cfg.hardcore then
-        "no"
-      else "prohibit-password";
 
     security.apparmor.enable = true;
     services.dbus.apparmor = "enabled";
 
     aviallon.boot.cmdline = {
-      "lsm" = [ "landlock" ]
+      "lsm" = [
+        "landlock"
+      ]
       ++ optional cfg.hardcore "lockdown"
       ++ [ "yama" ]
       # Apparmor https://wiki.archlinux.org/title/AppArmor#Installation
       ++ optionals config.security.apparmor.enable [ "apparmor" ]
-        ++ [ "bpf" ]
+      ++ [ "bpf" ];
-      ;
       "lockdown" = if cfg.hardcore then "confidentiality" else "integrity";
 
       # Vsyscall page not readable (default is "emulate". "none" might break statically-linked binaries.)
       vsyscall = mkIf cfg.hardcore "xonly";
-    } // (ifEnable cfg.expensive {
+    }
+    // (ifEnable cfg.expensive {
       # Slab/slub sanity checks, redzoning, and poisoning
       "init_on_alloc" = 1;
       "init_on_free" = 1;
@@ -93,7 +104,7 @@ in
 
     # Is used in podman containers, for instance
     security.allowUserNamespaces = mkDefault true;
-#    boot.blacklistedKernelModules = mkForce [ ];
+    #    boot.blacklistedKernelModules = mkForce [ ];
 
     # Only authorize admins to use nix in hardcore mode
     nix.allowedUsers = mkIf cfg.hardcore (mkQuasiForce [ "@wheel" ]);
@@ -102,9 +113,11 @@ in
     security.audit.enable = mkDefault true;
     security.auditd.enable = mkQuasiForce false;
 
-    systemd.services.systemd-journald = let
+    systemd.services.systemd-journald =
+      let
         rules = pkgs.writeText "audit.rules" (concatStringsSep "\n" config.security.audit.rules);
-    in mkIf config.security.audit.enable {
+      in
+      mkIf config.security.audit.enable {
         serviceConfig = {
           #ExecStartPre = "-${pkgs.audit}/bin/augenrules --load";
           ExecStartPre = ''-${pkgs.audit}/bin/auditctl -R ${rules} -e 1 -f 1 -r 1000 -b 64'';
@@ -114,7 +127,8 @@ in
         path = [ pkgs.audit ];
       };
 
-    security.audit.rules = []
+    security.audit.rules =
+      [ ]
       ++ [
         "-A exclude,always -F msgtype=SERVICE_START"
         "-A exclude,always -F msgtype=SERVICE_STOP"
@@ -127,8 +141,7 @@ in
         "-a exit,always -F arch=b64 -C auid!=euid -F auid!=unset -F euid=0 -S execve -k privesc_execve"
         "-a exit,always -F arch=b32 -C auid!=euid -F auid!=unset -F euid=0 -S execve -k privesc_execve"
       ]
-      ++ optional cfg.expensive "-a exit,always -F arch=b64 -S execve -k execve_calls"
+      ++ optional cfg.expensive "-a exit,always -F arch=b64 -S execve -k execve_calls";
-    ;
 
     environment.systemPackages = with pkgs; [
       sbctl # Secure Boot keys generation

security/tpm.nix

@@ -1,10 +1,18 @@
-{config, pkgs, lib, ...}:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.security.tpm;
-in {
+in
+{
   options.aviallon.security.tpm = {
-    enable = (mkEnableOption "TPM") // { default = true; };
+    enable = (mkEnableOption "TPM") // {
+      default = true;
+    };
     tpm1_2.enable = mkEnableOption "TPM 1.2 support";
   };
   config = mkIf cfg.enable {
@@ -16,14 +24,16 @@ in {
 
     environment.systemPackages = [
       pkgs.tpm2-tools
-    ] ++ optional cfg.tpm1_2.enable pkgs.tpm-tools;
+    ]
+    ++ optional cfg.tpm1_2.enable pkgs.tpm-tools;
 
     services.tcsd = mkIf cfg.tpm1_2.enable {
       enable = true;
     };
 
     boot.initrd.availableKernelModules = [
-      "tpm_tis" "tpm_crb"
+      "tpm_tis"
+      "tpm_crb"
     ];
   };
 }

services/default.nix

@@ -1,4 +1,4 @@
-{ config, pkgs, ...}:
+{ config, pkgs, ... }:
 {
   imports = [
     ./jupyterhub.nix

services/general.nix

@@ -1,4 +1,9 @@
-{ config, pkgs, lib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.services;
@@ -6,23 +11,28 @@ let
   laptopCfg = config.aviallon.laptop;
   generalCfg = config.aviallon.general;
 
-  journaldConfigValue = value:
+  journaldConfigValue =
-    if value == true then "true"
+    value:
-    else if value == false then "false"
+    if value == true then
-    else if isList value then toString value
+      "true"
-    else generators.mkValueStringDefault { } value;
+    else if value == false then
+      "false"
+    else if isList value then
+      toString value
+    else
+      generators.mkValueStringDefault { } value;
 
-  isNullOrEmpty = v: (v == null) ||
+  isNullOrEmpty = v: (v == null) || (isList v && (length v == 0));
-      (isList v && (length v == 0));
 
-  journaldConfig = settings: (generators.toKeyValue {
+  journaldConfig =
+    settings:
+    (generators.toKeyValue {
       mkKeyValue = generators.mkKeyValueDefault {
         mkValueString = journaldConfigValue;
       } "=";
-  } (filterAttrs (n: v: !(isNullOrEmpty v))
+    } (filterAttrs (n: v: !(isNullOrEmpty v)) settings));
-    settings)
+in
-  );
+{
-in {
 
   options.aviallon.services = {
     enable = mkOption {
@@ -33,9 +43,15 @@ in {
     };
 
     journald.extraConfig = mkOption {
-      default = {};
+      default = { };
-      example = {};
+      example = { };
-      type = with types; attrsOf (oneOf [ bool int str ]);
+      type =
+        with types;
+        attrsOf (oneOf [
+          bool
+          int
+          str
+        ]);
       description = "Add extra config to journald with Nix language";
     };
   };
@@ -71,21 +87,22 @@ in {
 
     environment.systemPackages = with pkgs; [ waypipe ];
 
-
     # Better reliability and performance
     services.dbus.implementation = "broker";
 
-    
-
-    
     networking.firewall.allowedTCPPorts = [ 22 ];
-    networking.firewall.allowedUDPPorts = [ 22 5353 ];
+    networking.firewall.allowedUDPPorts = [
+      22
+      5353
+    ];
 
     services.rsyncd.enable = !desktopCfg.enable;
 
     services.fstrim.enable = true;
 
-    services.haveged.enable = (builtins.compareVersions config.boot.kernelPackages.kernel.version "5.6" < 0);
+    services.haveged.enable = (
+      builtins.compareVersions config.boot.kernelPackages.kernel.version "5.6" < 0
+    );
 
     services.irqbalance.enable = true;
 
@@ -103,23 +120,38 @@ in {
       loglevel = "info";
       cgroup_realtime_workaround = false;
     };
-    services.ananicy.extraRules = concatStringsSep "\n" ( forEach [
+    services.ananicy.extraRules = concatStringsSep "\n" (
-      { name = "cp";
+      forEach [
-        type = "BG_CPUIO"; }
+        {
-      { name = "nix-build";
+          name = "cp";
-        type = "BG_CPUIO"; }
+          type = "BG_CPUIO";
-      { name = "nix-store";
+        }
-        type = "BG_CPUIO"; }
+        {
-      { name = "nix-collect-garbage";
+          name = "nix-build";
-        type = "BG_CPUIO"; }
+          type = "BG_CPUIO";
-      { name = "nix";
+        }
-        type = "BG_CPUIO"; }
+        {
-      { name = "X";
+          name = "nix-store";
-        type = "LowLatency_RT"; }
+          type = "BG_CPUIO";
-      { name = "htop";
+        }
-        type = "LowLatency_RT"; }
+        {
-    ] (x: builtins.toJSON x));
+          name = "nix-collect-garbage";
-
+          type = "BG_CPUIO";
+        }
+        {
+          name = "nix";
+          type = "BG_CPUIO";
+        }
+        {
+          name = "X";
+          type = "LowLatency_RT";
+        }
+        {
+          name = "htop";
+          type = "LowLatency_RT";
+        }
+      ] (x: builtins.toJSON x)
+    );
 
     # Enusre low-latency response for this time-critical service
     systemd.services."hdapsd@" = {
@@ -158,7 +190,6 @@ in {
       MulticastDNS = false;
     };
 
-
     services.nginx = {
       recommendedProxySettings = true;
       recommendedGzipSettings = true;

services/gnupg.nix

@@ -1,11 +1,17 @@
-{ config, pkgs, lib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   gpgNoTTY = pkgs.writeShellScriptBin "gpg-no-tty" ''
     exec ${pkgs.gnupg}/bin/gpg --batch --no-tty "$@"
   '';
-  pinentrySwitcher = pkgs.callPackage ../packages/pinentry.nix {};
+  pinentrySwitcher = pkgs.callPackage ../packages/pinentry.nix { };
-in {
+in
+{
   config = {
 
     programs.gnupg = {

services/jupyterhub.nix

@@ -1,4 +1,9 @@
-{config, pkgs, lib, ...}:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.services.jupyterhub;
@@ -11,8 +16,11 @@ in
   config = mkIf cfg.enable {
     services.jupyterhub = {
       enable = true;
-      kernels.python3 = let
+      kernels.python3 =
-        env = (pkgs.python3.withPackages (pythonPackages: with pythonPackages; [
+        let
+          env = (
+            pkgs.python3.withPackages (
+              pythonPackages: with pythonPackages; [
                 ipykernel
                 pandas
                 scikit-learn
@@ -20,8 +28,11 @@ in
                 matplotlib
                 numpy
                 pip
-              ]));
+              ]
-      in {
+            )
+          );
+        in
+        {
           displayName = "Python 3 for machine learning";
           argv = [
             "${env.interpreter}"
@@ -41,7 +52,12 @@ in
     };
     services.nginx.virtualHosts = {
       "jupyterhub.localhost" = {
-        listen = [ { addr = "0.0.0.0"; port = 80; } ];
+        listen = [
+          {
+            addr = "0.0.0.0";
+            port = 80;
+          }
+        ];
         locations."/" = {
           proxyPass = "http://localhost:${toString config.services.jupyterhub.port}";
           proxyWebsockets = true;

windows/default.nix

@@ -1,4 +1,4 @@
-{...}:
+{ ... }:
 {
   imports = [
     ./wine.nix

windows/wine.nix

@@ -1,8 +1,14 @@
-{ config, pkgs, lib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   cfg = config.aviallon.windows.wine;
-in {
+in
+{
   options.aviallon.windows.wine = {
     enable = mkEnableOption "windows executable support on Linux";
     package = mkOption {