packages.firefox: switch to lepton

hardware.gpu: fix
system.nix: increase max-jobs and max-substitution-jobs
2026-01-12 04:39:23 +08:00 · 2024-02-16 15:32:26 +08:00 · 2024-02-16 15:01:24 +08:00 · 2024-02-16 12:37:01 +08:00 · 2024-02-16 12:36:23 +08:00 · 2024-02-16 11:39:37 +08:00
74 changed files with 1794 additions and 886 deletions
--- a/.gitattributes
+++ b/.gitattributes
@@ -1 +1,2 @@
 *.png filter=lfs diff=lfs merge=lfs -text
+*.icm filter=lfs diff=lfs merge=lfs -text
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -3,7 +3,7 @@ keys: # cat /etc/ssh/ssh_host_ed25519_key.pub | ssh-to-age
  - &pc age1ffvr5pqd2lfj24e3fh53s92z6h76fda3du4y4k6r3yjumdwvpfgqzj033a
  - &vps6 age164tyqklwhdm57tfm5u863mdt2xrzrrzac4py8a0j9y6kzqcjy9zsp073t6
  - &vps7 age137x7csalutwvfygvvzpemlsywvdxj3j4z93a50z2sjx03w6zau8q3r5902
-  - &yoga age1qrea4twxdhd7fnvlq5v45528c90qy6hp2wa55kghsxzgut6n6fxs7w6u42
+  - &surface age1ck5vzs0xqx0jplmuksrkh45xwmkm2t05m2wyq5k2w2mnkmn79fxs6tvl3l
  - &nas age19lhcwk37jmvn6z0v4dpdfh0k4u23f76twdjknc0p7atktf37rd7s4t4wj3
  - &xmupc1 age19ax6vm3pv8rph5tq3mmehd9sy9jk823tw8svsd790r0lkslycquqvlwz9m
 creation_rules:
@@ -27,15 +27,11 @@ creation_rules:
    - age:
      - *chn
      - *nas
-  - path_regex: secrets/xmupc1/.*$
+  - path_regex: secrets/surface/.*$
    key_groups:
    - age:
      - *chn
-  - path_regex: secrets/yoga/.*$
-    key_groups:
-    - age:
-      - *chn
-      - *yoga
+      - *surface
  - path_regex: secrets/xmupc1/.*$
    key_groups:
    - age:
--- a/devices/nas/default.nix
+++ b/devices/nas/default.nix
@@ -44,15 +44,14 @@ inputs:
        nixpkgs.march = "silvermont";
        nix.substituters = [ "https://cache.nixos.org/" "https://nix-store.chn.moe" ];
        kernel.patches = [ "cjktty" ];
-        impermanence.enable = true;
        networking.hostname = "nas";
        gui.preferred = false;
      };
-      hardware = { cpus = [ "intel" ]; gpus = [ "intel" ]; };
-      packages.packageSet = "desktop";
+      hardware = { cpus = [ "intel" ]; gpu.type = "intel"; };
+      packages.packageSet = "desktop-fat";
      services =
      {
-        snapper.enable = true;
+        snapper.enable = false;
        fontconfig.enable = true;
        samba =
        {
@@ -61,7 +60,7 @@ inputs:
          shares = { home.path = "/home"; root.path = "/"; };
        };
        sshd = { enable = true; passwordAuthentication = true; };
-        xrayClient =
+        xray.client =
        {
          enable = true;
          serverAddress = "74.211.99.69";
--- a/devices/pc/color/TPLCD_161B_Default.icm
+++ b/devices/pc/color/TPLCD_161B_Default.icm
--- a/devices/pc/color/TPLCD_161B_Native.icm
+++ b/devices/pc/color/TPLCD_161B_Native.icm
--- a/devices/pc/color/TPLCD_161B_Native_HDR.icm
+++ b/devices/pc/color/TPLCD_161B_Native_HDR.icm
--- a/devices/pc/color/TPLCD_161B_REC709.icm
+++ b/devices/pc/color/TPLCD_161B_REC709.icm
--- a/devices/pc/color/TPLCD_161B_sRGB.icm
+++ b/devices/pc/color/TPLCD_161B_sRGB.icm
--- a/devices/pc/default.nix
+++ b/devices/pc/default.nix
@@ -50,19 +50,18 @@ inputs:
            # SERIALIZE SGX WAITPKG WIDEKL XSAVE XSAVEOPT
            "alderlake"
          ];
-          keepOutputs = true;
        };
        nixpkgs =
          { march = "znver4"; cuda = { enable = true; capabilities = [ "8.9" ]; forwardCompat = false; }; };
        kernel.patches = [ "cjktty" "lantian" ];
-        impermanence.enable = true;
        networking.hostname = "pc";
        sysctl.laptop-mode = 5;
      };
      hardware =
      {
        cpus = [ "amd" ];
-        gpus = [ "nvidia" ];
+        gpu = { type = "amd+nvidia"; prime.busId = { amd = "8:0:0"; nvidia = "1:0:0"; }; };
+        # gpu.type = "amd";
        bluetooth.enable = true;
        joystick.enable = true;
        printer.enable = true;
@@ -95,7 +94,7 @@ inputs:
          };
        };
        sshd.enable = true;
-        xrayClient =
+        xray.client =
        {
          enable = true;
          serverAddress = "74.211.99.69";
@@ -127,7 +126,7 @@ inputs:
        nix-serve = { enable = true; hostname = "nix-store.chn.moe"; };
        smartd.enable = true;
        misskey.instances.misskey.hostname = "xn--qbtm095lrg0bfka60z.chn.moe";
-        beesd = { enable = true; instances.root = { device = "/"; hashTableSizeMB = 2048; }; };
+        beesd = { enable = true; instances.root = { device = "/"; hashTableSizeMB = 2048; threads = 4; }; };
        wireguard =
        {
          enable = true;
@@ -135,11 +134,24 @@ inputs:
          publicKey = "l1gFSDCeBxyf/BipXNvoEvVvLqPgdil84nmr5q6+EEw=";
          wireguardIp = "192.168.83.3";
        };
+        gamemode = { enable = true; drmDevice = 1; };
      };
      bugs = [ "xmunet" "backlight" "amdpstate" ];
    };
-    services.colord.enable = true;
    virtualisation.virtualbox.host = { enable = true; enableExtensionPack = true; };
-    hardware.nvidia.forceFullCompositionPipeline = true;
+    home-manager.users.chn.config.programs.plasma.startup.autoStartScript.xcalib.text =
+      "${inputs.pkgs.xcalib}/bin/xcalib -d :0 ${./color/TPLCD_161B_Default.icm}";
+    services.xserver.displayManager.defaultSession = inputs.lib.mkForce "plasma";
+    powerManagement.resumeCommands =
+    ''
+      ${inputs.pkgs.kmod}/bin/modprobe -r mt7921e
+      ${inputs.pkgs.kmod}/bin/modprobe mt7921e
+    '';
+    specialisation.nvidia.configuration =
+    {
+      system.nixos.tags = [ "discreate-graphic" ];
+      nixos.hardware.gpu.type = inputs.lib.mkForce "nvidia";
+      hardware.nvidia.forceFullCompositionPipeline = true;
+    };
  };
 }
--- a/devices/surface/default.nix
+++ b/devices/surface/default.nix
@@ -11,42 +11,46 @@ inputs:
        {
          mount =
          {
-            vfat."/dev/disk/by-uuid/86B8-CF80" = "/boot/efi";
+            vfat."/dev/disk/by-uuid/7179-9C69" = "/boot/efi";
            btrfs =
            {
-              "/dev/disk/by-uuid/e252f81d-b4b3-479f-8664-380a9b73cf83"."/boot" = "/boot";
+              "/dev/disk/by-uuid/c6d35075-85fe-4129-aaa8-f436ab85ce43"."/boot" = "/boot";
              "/dev/mapper/root" = { "/nix" = "/nix"; "/nix/rootfs/current" = "/"; };
            };
          };
-          decrypt.auto."/dev/disk/by-uuid/8186d34e-005c-4461-94c7-1003a5bd86c0" =
-            { mapper = "root"; ssd = true; };
-          swap = [ "/nix/swap/swap" ];
+          decrypt.auto =
+          {
+            "/dev/disk/by-uuid/4f7420f9-ea19-4713-b084-2ac8f0a963ac" = { mapper = "root"; ssd = true; };
+            "/dev/disk/by-uuid/88bd9d44-928b-40a2-8f3d-6dcd257c4601" =
+              { mapper = "swap"; ssd = true; before = [ "root" ]; };
+          };
+          swap = [ "/dev/mapper/swap" ];
+          resume = "/dev/mapper/swap";
          rollingRootfs = { device = "/dev/mapper/root"; path = "/nix/rootfs"; };
        };
        nixpkgs.march = "skylake";
        grub.installDevice = "efi";
        nix.substituters = [ "https://cache.nixos.org/" "https://nix-store.chn.moe" ];
-        kernel.patches = [ "cjktty" "lantian" ];
-        impermanence.enable = true;
+        kernel.patches = [ "cjktty" "lantian" "surface" ];
        networking.hostname = "surface";
      };
      hardware =
      {
        cpus = [ "intel" ];
-        gpus = [ "intel" ];
+        gpu.type = "intel";
        bluetooth.enable = true;
        joystick.enable = true;
        printer.enable = true;
        sound.enable = true;
      };
      packages.packageSet = "desktop-fat";
-      virtualization.docker.enable = true;
+      virtualization = { docker.enable = true; waydroid.enable = true; };
      services =
      {
        snapper.enable = true;
        fontconfig.enable = true;
        sshd.enable = true;
-        xrayClient =
+        xray.client =
        {
          enable = true;
          serverAddress = "74.211.99.69";
@@ -57,23 +61,6 @@ inputs:
      };
      bugs = [ "xmunet" ];
    };
-    # apply patches from nixos-hardware
-    boot.kernelPatches = builtins.map
-      (patch:
-        { inherit (patch) name patch; }
-        // (if patch ? structuredExtraConfig then { extraStructuredConfig = patch.structuredExtraConfig; } else {}))
-      (
-        let
-          version = inputs.config.boot.kernelPackages.kernel.version;
-          majorVersion =
-            let versionArray = builtins.splitVersion version;
-            in "${builtins.elemAt versionArray 0}.${builtins.elemAt versionArray 1}";
-          repoFile = "${inputs.topInputs.nixos-hardware}/microsoft/surface/common/kernel/linux-package.nix";
-          inherit (inputs.pkgs.callPackage repoFile {}) repos;
-          patchDir = repos.linux-surface + "/patches/${majorVersion}";
-          patchFile = "${inputs.topInputs.nixos-hardware}/microsoft/surface/common/kernel/linux-6.6.x/patches.nix";
-        in
-          inputs.pkgs.callPackage patchFile { inherit (inputs.lib) kernel; inherit version patchDir; }
-      );
+    environment.systemPackages = with inputs.pkgs; [ maliit-keyboard maliit-framework ];
  };
 }
--- a/devices/vps6/default.nix
+++ b/devices/vps6/default.nix
@@ -29,7 +29,6 @@ inputs:
        nixpkgs.march = "sandybridge";
        nix.substituters = [ "https://cache.nixos.org/" "https://nix-store.chn.moe" ];
        initrd.sshd.enable = true;
-        impermanence.enable = true;
        networking.hostname = "vps6";
      };
      packages.packageSet = "server";
@@ -37,7 +36,7 @@ inputs:
      {
        snapper.enable = true;
        sshd.enable = true;
-        xrayServer = { enable = true; serverName = "vps6.xserver.chn.moe"; };
+        xray.server = { enable = true; serverName = "vps6.xserver.chn.moe"; };
        frpServer = { enable = true; serverName = "frp.chn.moe"; };
        nginx =
        {
@@ -75,7 +74,7 @@ inputs:
          peers = [ "pc" "nas" "vps7" ];
          publicKey = "AVOsYUKQQCvo3ctst3vNi8XSVWo1Wh15066aHh+KpF4=";
          wireguardIp = "192.168.83.1";
-          externalIp = "74.211.99.69";
+          listenIp = "74.211.99.69";
          lighthouse = true;
        };
      };
--- a/devices/vps7/default.nix
+++ b/devices/vps7/default.nix
@@ -29,7 +29,6 @@ inputs:
        nixpkgs.march = "broadwell";
        nix.substituters = [ "https://cache.nixos.org/" "https://nix-store.chn.moe" ];
        initrd.sshd.enable = true;
-        impermanence.enable = true;
        networking.hostname = "vps7";
        gui.preferred = false;
      };
@@ -62,7 +61,6 @@ inputs:
        fz-new-order.enable = true;
        nginx.applications = { kkmeeting.enable = true; webdav.instances."webdav.chn.moe" = {}; };
        httpapi.enable = true;
-        mastodon.enable = true;
        gitea.enable = true;
        grafana.enable = true;
        fail2ban.enable = true;
@@ -72,7 +70,7 @@ inputs:
          peers = [ "vps6" ];
          publicKey = "n056ppNxC9oECcW7wEbALnw8GeW7nrMImtexKWYVUBk=";
          wireguardIp = "192.168.83.2";
-          externalIp = "95.111.228.40";
+          listenIp = "95.111.228.40";
        };
      };
    };
--- a/devices/xmupc1/default.nix
+++ b/devices/xmupc1/default.nix
@@ -42,18 +42,17 @@ inputs:
        };
        gui.preferred = false;
        kernel.patches = [ "cjktty" ];
-        impermanence.enable = true;
        networking.hostname = "xmupc1";
      };
      hardware =
      {
        cpus = [ "amd" ];
-        gpus = [ "nvidia" ];
+        # gpus = [ "nvidia" ];
        bluetooth.enable = true;
        joystick.enable = true;
        printer.enable = true;
        sound.enable = true;
-        gamemode.drmDevice = 1;
+        # gamemode.drmDevice = 1;
      };
      packages.packageSet = "workstation";
      virtualization = { docker.enable = true; kvmHost = { enable = true; gui = true; }; };
@@ -75,7 +74,7 @@ inputs:
          };
        };
        sshd.enable = true;
-        xrayClient =
+        xray.client =
        {
          enable = true;
          serverAddress = "74.211.99.69";
--- a/flake.lock
+++ b/flake.lock
--- a/flake.nix
+++ b/flake.nix
@@ -4,7 +4,7 @@
  inputs =
  {
    nixpkgs.url = "github:CHN-beta/nixpkgs/nixos-23.11";
-    nixpkgs-unstable.url = "github:CHN-beta/nixpkgs/nixos-unstable";
+    nixpkgs-unstable.url = "github:NixOS/nixpkgs/nixos-unstable";
    nixpkgs-2305.url = "github:CHN-beta/nixpkgs/nixos-23.05";
    home-manager = { url = "github:nix-community/home-manager/release-23.11"; inputs.nixpkgs.follows = "nixpkgs"; };
    sops-nix =
@@ -13,7 +13,7 @@
      inputs = { nixpkgs.follows = "nixpkgs"; nixpkgs-stable.follows = "nixpkgs"; };
    };
    aagl = { url = "github:ezKEa/aagl-gtk-on-nix"; inputs.nixpkgs.follows = "nixpkgs"; };
-    nix-index-database = { url = "github:Mic92/nix-index-database"; inputs.nixpkgs.follows = "nixpkgs"; };
+    nix-index-database = { url = "github:Mic92/nix-index-database"; inputs.nixpkgs.follows = "nixpkgs-unstable"; };
    nur.url = "github:nix-community/NUR";
    nixos-cn = { url = "github:nixos-cn/flakes"; inputs.nixpkgs.follows = "nixpkgs"; };
    nur-xddxdd = { url = "github:xddxdd/nur-packages"; inputs.nixpkgs.follows = "nixpkgs"; };
@@ -24,13 +24,15 @@
      inputs = { nixpkgs.follows = "nixpkgs"; nix-index-database.follows = "nix-index-database"; };
    };
    impermanence.url = "github:nix-community/impermanence";
-    qchem = { url = "github:Nix-QChem/NixOS-QChem"; inputs.nixpkgs.follows = "nixpkgs"; };
+    qchem = { url = "github:Nix-QChem/NixOS-QChem/release-23.11"; inputs.nixpkgs.follows = "nixpkgs"; };
    nixd = { url = "github:nix-community/nixd"; inputs.nixpkgs.follows = "nixpkgs"; };
    napalm = { url = "github:nix-community/napalm"; inputs.nixpkgs.follows = "nixpkgs"; };
    nixpak = { url = "github:nixpak/nixpak"; inputs.nixpkgs.follows = "nixpkgs"; };
    deploy-rs = { url = "github:serokell/deploy-rs"; inputs.nixpkgs.follows = "nixpkgs"; };
    pnpm2nix-nzbr = { url = "github:CHN-beta/pnpm2nix-nzbr"; inputs.nixpkgs.follows = "nixpkgs"; };
+    # oneapi
    lmix = { url = "github:CHN-beta/lmix"; inputs.nixpkgs.follows = "nixpkgs"; };
+    # nvhpc
    dguibert-nur-packages = { url = "github:CHN-beta/dguibert-nur-packages"; inputs.nixpkgs.follows = "nixpkgs"; };
    plasma-manager =
    {
@@ -40,6 +42,29 @@
    nix-doom-emacs = { url = "github:nix-community/nix-doom-emacs"; inputs.nixpkgs.follows = "nixpkgs"; };
    nur-linyinfeng = { url = "github:linyinfeng/nur-packages"; inputs.nixpkgs.follows = "nixpkgs"; };
    nixos-hardware.url = "github:CHN-beta/nixos-hardware";
+    envfs = { url = "github:Mic92/envfs"; inputs.nixpkgs.follows = "nixpkgs"; };
+
+    misskey = { url = "git+https://github.com/CHN-beta/misskey?submodules=1"; flake = false; };
+    rsshub = { url = "github:DIYgod/RSSHub"; flake = false; };
+    zpp-bits = { url = "github:eyalz800/zpp_bits"; flake = false; };
+    citation-style-language = { url = "git+https://github.com/zepinglee/citeproc-lua?submodules=1"; flake = false; };
+    concurrencpp = { url = "github:David-Haim/concurrencpp"; flake = false; };
+    cppcoro = { url = "github:Garcia6l20/cppcoro"; flake = false; };
+    date = { url = "github:HowardHinnant/date"; flake = false; };
+    eigen = { url = "gitlab:libeigen/eigen"; flake = false; };
+    matplotplusplus = { url = "github:alandefreitas/matplotplusplus"; flake = false; };
+    nameof = { url = "github:Neargye/nameof"; flake = false; };
+    nodesoup = { url = "github:olvb/nodesoup"; flake = false; };
+    tgbot-cpp = { url = "github:reo7sp/tgbot-cpp"; flake = false; };
+    v-sim = { url = "gitlab:l_sim/v_sim"; flake = false; };
+    win11os-kde = { url = "github:yeyushengfan258/Win11OS-kde"; flake = false; };
+    fluent-kde = { url = "github:vinceliuice/Fluent-kde"; flake = false; };
+    rycee = { url = "gitlab:rycee/nur-expressions"; flake = false; };
+    cascade = { url = "github:CHN-beta/cascade"; flake = false; };
+    blurred-wallpaper = { url = "github:bouteillerAlan/blurredwallpaper"; flake = false; };
+    slate = { url = "github:TheBigWazz/Slate"; flake = false; };
+    linux-surface = { url = "github:linux-surface/linux-surface"; flake = false; };
+    lepton = { url = "github:black7375/Firefox-UI-Fix"; flake = false; };
  };

  outputs = inputs:
@@ -76,8 +101,11 @@
            specialArgs = { topInputs = inputs; inherit localLib; };
            modules = localLib.mkModules
            [
-              (inputs: { config.nixpkgs.overlays = [(final: prev:
-                { localPackages = (import ./local/pkgs { inherit (inputs) lib; pkgs = final; }); })]; })
+              (moduleInputs:
+              {
+                config.nixpkgs.overlays = [(final: prev: { localPackages =
+                  import ./local/pkgs { inherit (moduleInputs) lib; pkgs = final; topInputs = inputs; };})];
+              })
              ./modules
              ./devices/${system}
            ];
@@ -119,10 +147,11 @@
                inputs.self.nixosConfigurations.${node};
            };
          })
-          [ "vps6" "vps7" "nas" "yoga" ]);
+          [ "vps6" "vps7" "nas" "surface" ]);
      };
      checks = builtins.mapAttrs (system: deployLib: deployLib.deployChecks inputs.self.deploy) inputs.deploy-rs.lib;
      overlays.default = final: prev:
        { localPackages = (import ./local/pkgs { inherit (inputs) lib; pkgs = final; }); };
+      config.archive = false;
    };
 }
--- a/local/lib/default.nix
+++ b/local/lib/default.nix
@@ -1,6 +1,6 @@
 lib:
 {
-  attrsToList = Attrs: builtins.map ( name: { inherit name; value = Attrs.${name}; } ) ( builtins.attrNames Attrs );
+  attrsToList = attrs: builtins.map (name: { inherit name; value = attrs.${name}; }) (builtins.attrNames attrs);
  mkConditional = condition: trueResult: falseResult: let inherit (lib) mkMerge mkIf; in
    mkMerge [ ( mkIf condition trueResult ) ( mkIf (!condition) falseResult ) ];

--- a/local/pkgs/blurred-wallpaper/default.nix
+++ b/local/pkgs/blurred-wallpaper/default.nix
@@ -0,0 +1,11 @@
+{ stdenv, src }: stdenv.mkDerivation
+{
+  name = "blurred-wallpaper";
+  inherit src;
+  phases = [ "installPhase" ];
+  installPhase =
+  ''
+    mkdir -p $out/share/plasma/wallpapers/a2n.blur
+    cp -r $src/* $out/share/plasma/wallpapers/a2n.blur
+  '';
+}
--- a/local/pkgs/citation-style-language/default.nix
+++ b/local/pkgs/citation-style-language/default.nix
@@ -1,22 +1,14 @@
-{ stdenvNoCC, texlive, fetchFromGitHub }: stdenvNoCC.mkDerivation (finalAttrs: rec
+{ stdenvNoCC, texlive, src }: stdenvNoCC.mkDerivation (finalAttrs:
 {
-  pname = "citation-style-language";
-  version = "0.4.5";
-  passthru = {
+  name = "citation-style-language";
+  inherit src;
+  passthru =
+  {
    pkgs = [ finalAttrs.finalPackage ];
    tlDeps = with texlive; [ latex ];
    tlType = "run";
  };

-  src = fetchFromGitHub
-  {
-    owner = "zepinglee";
-    repo = "citeproc-lua";
-    rev = "v${version}";
-    sha256 = "XH+GH+t/10hr4bfaod8F9JPxmBnAQlDmpSvQNDQsslM=";
-    fetchSubmodules = true;
-  };
-
  nativeBuildInputs = [ texlive.combined.scheme-full ];
  dontConfigure = true;
  dontBuild = true;
--- a/local/pkgs/concurrencpp/default.nix
+++ b/local/pkgs/concurrencpp/default.nix
@@ -1,13 +1,6 @@
-{ stdenv, fetchFromGitHub, cmake }: stdenv.mkDerivation rec
+{ stdenv, cmake, src }: stdenv.mkDerivation
 {
-  pname = "concurrencpp";
-  version = "0.1.7";
-  src = fetchFromGitHub
-  {
-    owner = "David-Haim";
-    repo = "concurrencpp";
-    rev = "v.${version}";
-    sha256 = "4qT29YVjKEWcMrI5R5Ps8aD4grAAgz5VOxANjpp1oTo=";
-  };
+  name = "concurrencpp";
+  inherit src;
  nativeBuildInputs = [ cmake ];
 }
--- a/local/pkgs/cppcoro/default.nix
+++ b/local/pkgs/cppcoro/default.nix
@@ -1,13 +1,7 @@
-{ stdenv, fetchFromGitHub, cmake }: stdenv.mkDerivation
+{ stdenv, cmake, src }: stdenv.mkDerivation
 {
  name = "cppcoro";
-  src = fetchFromGitHub
-  {
-    owner = "Garcia6l20";
-    repo = "cppcoro";
-    rev = "e1d53e620b0eee828915ada179cd7ca8e66ca855";
-    sha256 = "luBkf1x5kqXaVbQM01yWRmA5QvrQNZkFVCjRctJdnXc=";
-  };
+  inherit src;
  nativeBuildInputs = [ cmake ];
  patches = [ ./cppcoro-include-utility.patch ];
 }
--- a/local/pkgs/date/default.nix
+++ b/local/pkgs/date/default.nix
@@ -1,18 +1,13 @@
-{ stdenv, fetchFromGitHub }: stdenv.mkDerivation
+{ stdenv, src }: stdenv.mkDerivation
 {
  name = "date";
-  src = fetchFromGitHub
-  {
-    owner = "HowardHinnant";
-    repo = "date";
-    rev = "cc4685a21e4a4fdae707ad1233c61bbaff241f93";
-    sha256 = "KilhBEeLMvHtS76Gu0UhzE8lhS1+sCwQ1UL4pswKXTs=";
-  };
+  inherit src;
  phases = [ "installPhase" ];
  installPhase =
  ''
    runHook preInstall
    mkdir -p $out
    cp -r $src/{include,src} $out
+    runHook postInstall
  '';
 }
--- a/local/pkgs/default.nix
+++ b/local/pkgs/default.nix
@@ -1,10 +1,10 @@
-{ lib, pkgs }: with pkgs; rec
+{ lib, pkgs, topInputs }: with pkgs; rec
 {
  typora = callPackage ./typora {};
  vesta = callPackage ./vesta {};
  oneapi = callPackage ./oneapi {};
-  rsshub = callPackage ./rsshub {};
-  misskey = callPackage ./misskey { nodejs = nodejs_21; };
+  rsshub = callPackage ./rsshub { src = topInputs.rsshub; };
+  misskey = callPackage ./misskey { nodejs = nodejs_21; src = topInputs.misskey; };
  mk-meili-mgn = callPackage ./mk-meili-mgn {};
  # vasp = callPackage ./vasp
  # {
@@ -18,31 +18,35 @@
    openmpi = pkgs.openmpi.override { cudaSupport = false; };
  };
  vaspkit = callPackage ./vaspkit { attrsToList = (import ../lib lib).attrsToList; };
-  v_sim = callPackage ./v_sim {};
-  concurrencpp = callPackage ./concurrencpp { stdenv = gcc13Stdenv; };
+  v-sim = callPackage ./v-sim { src = topInputs.v-sim; };
+  concurrencpp = callPackage ./concurrencpp { stdenv = gcc13Stdenv; src = topInputs.concurrencpp; };
  eigengdb = python3Packages.callPackage ./eigengdb {};
-  nodesoup = callPackage ./nodesoup {};
-  matplotplusplus = callPackage ./matplotplusplus { inherit nodesoup glad; };
-  zpp-bits = callPackage ./zpp-bits {};
-  eigen = callPackage ./eigen {};
-  nameof = callPackage ./nameof {};
+  nodesoup = callPackage ./nodesoup { src = topInputs.nodesoup; };
+  matplotplusplus = callPackage ./matplotplusplus { inherit nodesoup glad; src = topInputs.matplotplusplus; };
+  zpp-bits = callPackage ./zpp-bits { src = topInputs.zpp-bits; };
+  eigen = callPackage ./eigen { src = topInputs.eigen; };
+  nameof = callPackage ./nameof { src = topInputs.nameof; };
  pslist = callPackage ./pslist {};
  glad = callPackage ./glad {};
  chromiumos-touch-keyboard = callPackage ./chromiumos-touch-keyboard {};
  yoga-support = callPackage ./yoga-support {};
-  tgbot-cpp = callPackage ./tgbot-cpp {};
+  tgbot-cpp = callPackage ./tgbot-cpp { src = topInputs.tgbot-cpp; };
  biu = callPackage ./biu { inherit concurrencpp tgbot-cpp nameof; stdenv = gcc13Stdenv; };
-  citation-style-language = callPackage ./citation-style-language {};
+  citation-style-language = callPackage ./citation-style-language { src = topInputs.citation-style-language; };
  mirism = callPackage ./mirism
  {
    inherit cppcoro nameof tgbot-cpp date;
    nghttp2 = nghttp2-2305.override { enableAsioLib = true; };
  };
-  cppcoro = callPackage ./cppcoro {};
-  date = callPackage ./date {};
+  cppcoro = callPackage ./cppcoro { src = topInputs.cppcoro; };
+  date = callPackage ./date { src = topInputs.date; };
  esbonio = python3Packages.callPackage ./esbonio {};
  pix2tex = python3Packages.callPackage ./pix2tex {};
  pyreadline3 = python3Packages.callPackage ./pyreadline3 {};
  torchdata = python3Packages.callPackage ./torchdata {};
  torchtext = python3Packages.callPackage ./torchtext { inherit torchdata; };
+  win11os-kde = callPackage ./win11os-kde { src = topInputs.win11os-kde; };
+  fluent-kde = callPackage ./fluent-kde { src = topInputs.fluent-kde; };
+  blurred-wallpaper = callPackage ./blurred-wallpaper { src = topInputs.blurred-wallpaper; };
+  slate = callPackage ./slate { src = topInputs.slate; };
 }
--- a/local/pkgs/eigen/default.nix
+++ b/local/pkgs/eigen/default.nix
@@ -1,12 +1,6 @@
-{ lib, stdenv, fetchFromGitLab, cmake }: stdenv.mkDerivation rec
+{ lib, stdenv, cmake, src }: stdenv.mkDerivation
 {
  name = "eigen";
-  src = fetchFromGitLab
-  {
-    owner = "libeigen";
-    repo = name;
-    rev = "6d829e766ff1b1ab867d93631163cbc63ed5798f";
-    sha256 = "BXUnizcRPrOyiPpoyYJ4VVOjlG49aj80mgzPKmEYPKU=";
-  };
+  inherit src;
  nativeBuildInputs = [ cmake ];
 }
--- a/local/pkgs/esbonio/default.nix
+++ b/local/pkgs/esbonio/default.nix
@@ -1,11 +1,11 @@
 { lib, fetchPypi, buildPythonPackage }: buildPythonPackage rec
 {
  pname = "esbonio";
-  version = "0.16.3";
+  version = "0.16.4";
  src = fetchPypi
  {
    inherit pname version;
-    sha256 = "1ggxdzl95fy0zxpyd1pcylhif1x604wk4wy7sv9322hc84b708zx";
+    sha256 = "1MBNBLCEBD6HtlxEASc4iZaXYyNdih2MIHoxK84jMdI=";
  };
  doCheck = false;
 }
--- a/local/pkgs/fluent-kde/default.nix
+++ b/local/pkgs/fluent-kde/default.nix
@@ -0,0 +1,22 @@
+{ lib, stdenv, src }: stdenv.mkDerivation
+{
+  name = "fluent-kde";
+  inherit src;
+  installPhase =
+  ''
+    mkdir -p $out/share/aurorae/themes
+    cp -r $src/aurorae/* $out/share/aurorae/themes
+    mkdir -p $out/share/color-schemes
+    cp -r $src/color-schemes/*.colors $out/share/color-schemes
+    mkdir -p $out/share/Kvantum
+    cp -r $src/Kvantum/Fluent* $out/share/Kvantum
+    mkdir -p $out/share/plasma/desktoptheme
+    cp -r $src/plasma/desktoptheme/* $out/share/plasma/desktoptheme
+    mkdir -p $out/share/plasma/layout-templates
+    cp -r $src/plasma/layout-templates/* $out/share/plasma/layout-templates
+    mkdir -p $out/share/plasma/look-and-feel
+    cp -r $src/plasma/look-and-feel/com.github.vinceliuice.Fluent* $out/share/plasma/look-and-feel
+    mkdir -p $out/share/wallpapers
+    cp -r $src/wallpaper/* $out/share/wallpapers
+  '';
+}
--- a/local/pkgs/matplotplusplus/default.nix
+++ b/local/pkgs/matplotplusplus/default.nix
@@ -1,17 +1,10 @@
 {
-  stdenv, fetchFromGitHub, cmake, pkg-config, substituteAll,
+  stdenv, src, cmake, pkg-config, substituteAll,
  gnuplot, libjpeg, libtiff, zlib, libpng, lapack, blas, fftw, opencv, nodesoup, cimg, glfw, libGL, python3, glad
 }: stdenv.mkDerivation
 {
-  pname = "matplotplusplus";
-  version = "1.2.0";
-  src = fetchFromGitHub
-  {
-    owner = "alandefreitas";
-    repo = "matplotplusplus";
-    rev = "a40344efa9dc5ea0c312e6e9ef4eb7238d98dc12";
-    sha256 = "6/dH/Rl2aAb8b+Ji5LwzkC+GWPOCBnYCrjy0qk8u/+I=";
-  };
+  name = "matplotplusplus";
+  inherit src;
  cmakeFlags =
  [
    "-DBUILD_SHARED_LIBS=ON" "-DMATPLOTPP_BUILD_SHARED_LIBS=ON" "-DMATPLOTPP_BUILD_EXAMPLES=OFF"
--- a/local/pkgs/mirism/default.nix
+++ b/local/pkgs/mirism/default.nix
@@ -8,7 +8,7 @@
  src = requireFile
  {
    inherit name;
-    sha256 = "1q3f4q4ln9dz68dfc35jybgv861f7acqiiykkm7jxviz8jdgn8c7";
+    sha256 = "0f50pvdafhlmrlbf341mkp9q50v4ld5pbx92d2w1633f18zghbzf";
    hashMode = "recursive";
    message = "Source file not found.";
  };
--- a/local/pkgs/misskey/default.nix
+++ b/local/pkgs/misskey/default.nix
@@ -1,21 +1,12 @@
 {
-  lib, stdenv, mkPnpmPackage, fetchFromGitHub, fetchurl, nodejs, writeShellScript, buildFHSEnv,
-  bash, cypress, vips, pkg-config
+  lib, stdenv, mkPnpmPackage, fetchurl, nodejs, writeShellScript, buildFHSEnv,
+  bash, cypress, vips, pkg-config, src
 }:
 let
-  pname = "misskey";
-  version = "2023.12.2";
-  src = fetchFromGitHub
-  {
-    owner = "CHN-beta";
-    repo = "misskey";
-    rev = "cd1d0ab06eb6b7e06afdfae9a12b2d2829564229";
-    hash = "sha256-sKEZ1ZpyA/02CNwiOMIOS5f/csx6ELDwCVJYc+oMChM=";
-    fetchSubmodules = true;
-  };
+  name = "misskey";
  originalPnpmPackage = mkPnpmPackage
  {
-    inherit pname version src nodejs;
+    inherit name src nodejs;
    copyPnpmStore = true;
  };
  startScript = writeShellScript "misskey"
@@ -28,7 +19,7 @@ let
 in
  stdenv.mkDerivation rec
  {
-    inherit version src pname;
+    inherit src name;
    buildInputs =
    [
      bash nodejs nodejs.pkgs.typescript nodejs.pkgs.pnpm nodejs.pkgs.gulp cypress vips pkg-config
--- a/local/pkgs/nameof/default.nix
+++ b/local/pkgs/nameof/default.nix
@@ -1,14 +1,7 @@
-{ lib, stdenv, fetchFromGitHub }: stdenv.mkDerivation rec
+{ lib, stdenv, src }: stdenv.mkDerivation
 {
-  pname = "nameof";
-  version = "0.10.3";
-  src = fetchFromGitHub
-  {
-    owner = "Neargye";
-    repo = pname;
-    rev = "v${version}";
-    sha256 = "eHG0Y/BQGbwTrBHjq9SeSiIXaVqWp7PxIq7vCIECYPk=";
-  };
+  name = "nameof";
+  inherit src;
  phases = [ "installPhase" ];
  installPhase =
  ''
--- a/local/pkgs/nodesoup/default.nix
+++ b/local/pkgs/nodesoup/default.nix
@@ -1,13 +1,7 @@
-{ stdenv, fetchFromGitHub, cmake, pkg-config, cairo, pcre2, xorg }: stdenv.mkDerivation rec
+{ stdenv, src, cmake, pkg-config, cairo, pcre2, xorg }: stdenv.mkDerivation
 {
  name = "nodesoup";
-  src = fetchFromGitHub
-  {
-    owner = "olvb";
-    repo = "nodesoup";
-    rev = "3158ad082bb0cd1abee75418b12b35522dbca74f";
-    sha256 = "tFLq6QC3U3uvcuWsdRy2wnwcmAfH2MkI2oMcAiUBHSo=";
-  };
+  inherit src;
  buildInputs = [ cairo pcre2.dev xorg.libXdmcp.dev ];
  nativeBuildInputs = [ cmake pkg-config ];
 }
--- a/local/pkgs/rsshub/default.nix
+++ b/local/pkgs/rsshub/default.nix
@@ -1,16 +1,9 @@
 {
-  lib, stdenv, mkPnpmPackage, fetchFromGitHub, nodejs, writeShellScript,
-  chromium, bash
+  lib, stdenv, mkPnpmPackage, nodejs, writeShellScript,
+  chromium, bash, src
 }:
 let
  name = "rsshub";
-  src = fetchFromGitHub
-  {
-    owner = "DIYgod";
-    repo = "RSSHub";
-    rev = "38a5b0c193bf77d71c4eea33db6e76bc8b565d0b";
-    hash = "sha256-gJsT9W2fFiy2IG89E5th49DpBHsPMfsdONyzAKDG48c=";
-  };
  originalPnpmPackage = mkPnpmPackage { inherit name src nodejs; };
  nodeModules = originalPnpmPackage.nodeModules.overrideAttrs { PUPPETEER_SKIP_DOWNLOAD = true; };
  rsshub-unwrapped = stdenv.mkDerivation
--- a/local/pkgs/slate/default.nix
+++ b/local/pkgs/slate/default.nix
@@ -0,0 +1,10 @@
+{ stdenv, src }: stdenv.mkDerivation
+{
+  name = "slate";
+  src = "${src}/Slate.tar.gz";
+  installPhase =
+  ''
+    mkdir -p $out/share/yakuake/skins/Slate
+    cp -r * $out/share/yakuake/skins/Slate
+  '';
+}
--- a/local/pkgs/tgbot-cpp/default.nix
+++ b/local/pkgs/tgbot-cpp/default.nix
@@ -1,14 +1,7 @@
-{ stdenv, fetchFromGitHub, cmake, pkg-config, boost, openssl, zlib, curl }: stdenv.mkDerivation rec
+{ stdenv, src, cmake, pkg-config, boost, openssl, zlib, curl }: stdenv.mkDerivation rec
 {
-  pname = "tgbot-cpp";
-  version = "1.7.2";
-  src = fetchFromGitHub
-  {
-    owner = "reo7sp";
-    repo = "tgbot-cpp";
-    rev = "v${version}";
-    sha256 = "TKirSxEUqFB1WtzNEfU4EJK3p7V5xcFIvA2+QVX7TlA=";
-  };
+  name = "tgbot-cpp";
+  inherit src;
  nativeBuildInputs = [ cmake pkg-config ];
  buildInputs = [ boost openssl zlib curl.dev ];
  propagatedBuildInputs = buildInputs;
--- a/local/pkgs/typora/default.nix
+++ b/local/pkgs/typora/default.nix
@@ -3,11 +3,11 @@ let
  typora-dist = stdenv.mkDerivation rec
  {
    pname = "typora-dist";
-    version = "1.7.6";
+    version = "1.8.2-dev";
    src = fetchurl
    {
      url = "https://download.typora.io/linux/typora_${version}_amd64.deb";
-      sha256 = "19xgv83zk3mhniswwrb341sr9j4sb9pqy47jamrmkc3w8famxpd3";
+      sha256 = "0abi9m8h8k0228ajag26lxk756a7aqqixg608k85gnkdmibnq6mv";
    };

    dontFixup = true;
--- a/local/pkgs/v-sim/default.nix
+++ b/local/pkgs/v-sim/default.nix
@@ -1,19 +1,12 @@
 {
-  stdenv, lib, fetchFromGitLab,
+  stdenv, lib, src,
  wrapGAppsHook, autoreconfHook, autoconf, libtool, intltool, gettext, automake, gtk-doc, pkg-config, gfortran, libxslt,
  glib, gtk3, epoxy, libyaml
 }:
 stdenv.mkDerivation
 {
-  pname = "v_sim";
-  version = "3.8.0_p20230824";
-  src = fetchFromGitLab
-  {
-    owner = "l_sim";
-    repo = "v_sim";
-    rev = "8abc67b56795c19a8e2357d442b556c71d2441cb";
-    sha256 = "KQNd3BGvkZVsfIPVLEEMBptiFQYeCbWGR28ds2Y+w2Y=";
-  };
+  name = "v-sim";
+  inherit src;
  buildInputs = [ glib gtk3 epoxy libyaml ];
  nativeBuildInputs =
  [
--- a/local/pkgs/win11os-kde/default.nix
+++ b/local/pkgs/win11os-kde/default.nix
@@ -0,0 +1,20 @@
+{ lib, stdenv, src }: stdenv.mkDerivation
+{
+  name = "win11os-kde";
+  inherit src;
+  installPhase =
+  ''
+    mkdir -p $out/share/aurorae/themes
+    cp -r $src/aurorae/* $out/share/aurorae/themes
+    mkdir -p $out/share/color-schemes
+    cp -r $src/color-schemes/*.colors $out/share/color-schemes
+    mkdir -p $out/share/Kvantum
+    cp -r $src/Kvantum/* $out/share/Kvantum
+    mkdir -p $out/share/plasma/desktoptheme
+    cp -r $src/plasma/desktoptheme/* $out/share/plasma/desktoptheme
+    mkdir -p $out/share/plasma/look-and-feel
+    cp -r $src/plasma/look-and-feel/* $out/share/plasma/look-and-feel
+    mkdir -p $out/share/wallpapers
+    cp -r $src/wallpaper/* $out/share/wallpapers
+  '';
+}
--- a/local/pkgs/zpp-bits/default.nix
+++ b/local/pkgs/zpp-bits/default.nix
@@ -1,14 +1,7 @@
-{ stdenv, fetchFromGitHub }: stdenv.mkDerivation rec
+{ stdenv, src }: stdenv.mkDerivation
 {
-  pname = "zpp-bits";
-  version = "4.4.19";
-  src = fetchFromGitHub
-  {
-    owner = "eyalz800";
-    repo = "zpp_bits";
-    rev = "v${version}";
-    sha256 = "ejIwrvCFALuBQbQhTfzjBb11oMR/akKnboB60GWbjlQ=";
-  };
+  inherit src;
+  name = "zpp-bits";
  phases = [ "installPhase" ];
  installPhase =
  ''
--- a/modules/default.nix
+++ b/modules/default.nix
@@ -37,6 +37,7 @@ inputs:
              # needed by mirism
              nghttp2-2305 =
                inputs.pkgs.callPackage "${inputs.topInputs.nixpkgs-2305}/pkgs/development/libraries/nghttp2" {};
+              firefox-addons = (import "${topInputs.rycee}" { inherit (prev) pkgs; }).firefox-addons;
            })
          ];
          home-manager.sharedModules =
--- a/modules/hardware/default.nix
+++ b/modules/hardware/default.nix
@@ -1,6 +1,6 @@
 inputs:
 {
-  imports = inputs.localLib.mkModules [ ./legion.nix ];
+  imports = inputs.localLib.mkModules [ ./gpu.nix ./legion.nix ];
  options.nixos.hardware = let inherit (inputs.lib) mkOption types; in
  {
    bluetooth.enable = mkOption { type = types.bool; default = false; };
@@ -8,14 +8,6 @@ inputs:
    printer.enable = mkOption { type = types.bool; default = false; };
    sound.enable = mkOption { type = types.bool; default = false; };
    cpus = mkOption { type = types.listOf (types.enum [ "intel" "amd" ]); default = []; };
-    gpus = mkOption { type = types.listOf (types.enum [ "intel" "nvidia" "amd" ]); default = []; };
-    prime =
-    {
-      enable = mkOption { type = types.bool; default = false; };
-      mode = mkOption { type = types.enum [ "offload" "sync" ]; default = "offload"; };
-      busId = mkOption { type = types.attrsOf types.str; default = {}; };
-    };
-    gamemode.drmDevice = mkOption { type = types.int; default = 0; };
    halo-keyboard.enable = mkOption { type = types.bool; default = false; };
  };
  config =
@@ -82,80 +74,6 @@ inputs:
              concatLists (map (cpu: modules.${cpu}) hardware.cpus);
        }
      )
-      # gpus
-      (
-        mkIf (hardware.gpus != [])
-        {
-          boot.initrd.availableKernelModules =
-            let
-              modules =
-              {
-                intel = [ "i915" ];
-                nvidia = [ "nvidia" "nvidia_drm" "nvidia_modeset" "nvidia_uvm" ];
-                amd = [ "amdgpu" ];
-              };
-            in
-              concatLists (map (gpu: modules.${gpu}) hardware.gpus);
-          hardware =
-          {
-            opengl =
-            {
-              enable = true;
-              driSupport = true;
-              extraPackages =
-                with inputs.pkgs;
-                let
-                  packages =
-                  {
-                    intel = [ intel-compute-runtime intel-media-driver libvdpau-va-gl ]; # intel-vaapi-driver
-                    nvidia = [ vaapiVdpau ];
-                    amd = [ amdvlk rocmPackages.clr rocmPackages.clr.icd ];
-                  };
-                in
-                  concatLists (map (gpu: packages.${gpu}) hardware.gpus);
-              driSupport32Bit = true;
-            };
-            nvidia = mkIf (builtins.elem "nvidia" hardware.gpus)
-            {
-              modesetting.enable = true;
-              powerManagement.enable = true;
-              dynamicBoost.enable = true;
-              nvidiaSettings = true;
-              package = inputs.config.boot.kernelPackages.nvidiaPackages.production;
-            };
-          };
-        }
-      )
-      (mkIf (builtins.elem "intel" hardware.gpus) { services.xserver.videoDrivers = [ "modesetting" ]; })
-      (mkIf (builtins.elem "amd" hardware.gpus) { services.xserver.videoDrivers = [ "modesetting" ]; })
-      # prime
-      (
-        mkIf hardware.prime.enable
-        {
-          hardware.nvidia = mkMerge
-          [
-            (
-              mkIf (hardware.prime.mode == "offload")
-              {
-                prime.offload = { enable = true; enableOffloadCmd = true; };
-                powerManagement = { finegrained = true; enable = true; };
-              }
-            )
-            (
-              mkIf (hardware.prime.mode == "sync")
-              {
-                prime = { sync.enable = true; };
-                # prime.forceFullCompositionPipeline = true;
-              }
-            )
-            {
-              prime = listToAttrs
-                (map (gpu: { inherit (gpu) value; name = "${gpu.name}BusId"; }) (attrsToList hardware.prime.busId));
-            }
-          ];
-        }
-      )
-      { programs.gamemode.settings.gpu.gpu_device = "${toString hardware.gamemode.drmDevice}"; }
      # halo-keyboard
      (mkIf hardware.halo-keyboard.enable
      (
--- a/modules/hardware/gpu.nix
+++ b/modules/hardware/gpu.nix
@@ -0,0 +1,84 @@
+inputs:
+{
+  options.nixos.hardware.gpu = let inherit (inputs.lib) mkOption types; in
+  {
+    type = mkOption
+    {
+      type = types.nullOr (types.enum
+      [
+        # single gpu
+        "intel" "nvidia" "amd"
+        # hibrid gpu: use nvidia prime offload mode
+        "intel+nvidia" "amd+nvidia"
+      ]);
+      default = null;
+    };
+    prime.busId = mkOption { type = types.attrsOf types.nonEmptyStr; default = {}; };
+  };
+  config = let inherit (inputs.config.nixos.hardware) gpu; in inputs.lib.mkIf (gpu.type != null) (inputs.lib.mkMerge
+  [
+    # generic settings
+    (
+      let gpus = inputs.lib.strings.splitString "+" gpu.type; in
+      {
+        boot.initrd.availableKernelModules =
+          let modules =
+          {
+            intel = [ "i915" ];
+            nvidia = [ "nvidia" "nvidia_drm" "nvidia_modeset" ]; # nvidia-uvm should not be loaded
+            amd = [ "amdgpu" ];
+          };
+          in builtins.concatLists (builtins.map (gpu: modules.${gpu}) gpus);
+        hardware =
+        {
+          opengl =
+          {
+            enable = true;
+            driSupport = true;
+            driSupport32Bit = true;
+            extraPackages =
+              let packages = with inputs.pkgs;
+              {
+                intel = [ intel-vaapi-driver libvdpau-va-gl intel-media-driver ];
+                nvidia = [ vaapiVdpau ];
+                amd = [ amdvlk rocmPackages.clr rocmPackages.clr.icd ];
+              };
+              in builtins.concatLists (builtins.map (gpu: packages.${gpu}) gpus);
+            extraPackages32 =
+              let packages = { intel = []; nvidia = []; amd = [ inputs.pkgs.driversi686Linux.amdvlk ]; };
+              in builtins.concatLists (builtins.map (gpu: packages.${gpu}) gpus);
+          };
+          nvidia = inputs.lib.mkIf (builtins.elem "nvidia" gpus)
+          {
+            modesetting.enable = true;
+            powerManagement.enable = true;
+            dynamicBoost.enable = true;
+            nvidiaSettings = true;
+            # package = inputs.config.boot.kernelPackages.nvidiaPackages.production;
+          };
+        };
+        boot =
+        {
+          kernelParams = inputs.lib.mkIf (builtins.elem "amd" gpus)
+            [ "radeon.cik_support=0" "amdgpu.cik_support=1" "radeon.si_support=0" "amdgpu.si_support=1" "iommu=pt" ];
+          blacklistedKernelModules = [ "nouveau" ];
+        };
+        environment.variables.VDPAU_DRIVER = inputs.lib.mkIf (builtins.elem "intel" gpus) "va_gl";
+        services.xserver.videoDrivers =
+          let driver = { intel = "modesetting"; amd = "amdgpu"; nvidia = "nvidia"; };
+          in builtins.map (gpu: driver.${gpu}) gpus;
+      }
+    )
+    # nvidia prime offload
+    (
+      inputs.lib.mkIf (inputs.lib.strings.hasSuffix "+nvidia" gpu.type) { hardware.nvidia =
+      {
+        prime = { offload = { enable = true; enableOffloadCmd = true; }; }
+          // builtins.listToAttrs (builtins.map
+            (gpu: { name = "${if gpu.name == "amd" then "amdgpu" else gpu.name}BusId"; value = "PCI:${gpu.value}"; })
+            (inputs.localLib.attrsToList gpu.prime.busId));
+        powerManagement.finegrained = true;
+      };}
+    )
+  ]);
+}
--- a/modules/packages/desktop-fat/default.nix
+++ b/modules/packages/desktop-fat/default.nix
@@ -17,7 +17,7 @@ inputs:
          _packages =
          [
            # system management
-            etcher btrfs-assistant snapper-gui libsForQt5.qtstyleplugin-kvantum
+            etcher btrfs-assistant snapper-gui libsForQt5.qtstyleplugin-kvantum ventoy-full
            # password and key management
            yubikey-manager yubikey-manager-qt yubikey-personalization yubikey-personalization-gui bitwarden
            # download
@@ -25,7 +25,8 @@ inputs:
            # development
            scrcpy weston cage openbox krita
            # media
-            spotify yesplaymusic simplescreenrecorder imagemagick gimp netease-cloud-music-gtk vlc
+            spotify yesplaymusic simplescreenrecorder imagemagick gimp netease-cloud-music-gtk vlc obs-studio
+            waifu2x-converter-cpp inkscape blender
            # editor
            localPackages.typora
            # themes
@@ -33,13 +34,17 @@ inputs:
            # news
            fluent-reader
            # nix tools
-            deploy-rs.deploy-rs nixpkgs-fmt
+            deploy-rs.deploy-rs nixpkgs-fmt appimage-run nixd nix-serve node2nix nix-prefetch-github prefetch-npm-deps
+            nix-prefetch-docker
            # instant messager
-            element-desktop telegram-desktop discord fluffychat
+            element-desktop telegram-desktop discord fluffychat zoom-us signal-desktop slack nur-linyinfeng.wemeet
            # browser
            google-chrome
            # office
-            crow-translate zotero pandoc ydict
+            crow-translate zotero pandoc ydict libreoffice-qt texstudio poppler_utils pdftk gnuplot pdfchain hdfview
+            (texlive.combine { inherit (texlive) scheme-full; inherit (localPackages) citation-style-language; })
+            # math, physics and chemistry
+            octaveFull root ovito localPackages.vesta localPackages.vaspkit localPackages.v-sim
          ] ++ (with inputs.lib; filter isDerivation (attrValues plasma5Packages.kdeGear));
        };
      };
--- a/modules/packages/desktop/default.nix
+++ b/modules/packages/desktop/default.nix
@@ -1,6 +1,6 @@
 inputs:
 {
-  imports = inputs.localLib.mkModules [ ./vscode.nix ];
+  imports = inputs.localLib.mkModules [ ./vscode.nix ./firefox.nix ];
  config =
    let
      inherit (inputs.lib) mkIf;
@@ -11,36 +11,46 @@ inputs:
        packages._packages = with inputs.pkgs;
        [
          # system management
-          gparted wl-clipboard-x11 kio-fuse
-          wayland-utils clinfo glxinfo vulkan-tools dracut
+          gparted kio-fuse wayland-utils clinfo glxinfo vulkan-tools dracut
+          (
+            writeShellScriptBin "xclip"
+            ''
+              #!${bash}/bin/bash
+              if [ "$XDG_SESSION_TYPE" = "x11" ]; then
+                exec ${xclip}/bin/xclip "$@"
+              else
+                exec ${wl-clipboard-x11}/bin/xclip "$@"
+              fi
+            ''
+          )
+          # color management
+          argyllcms xcalib
          # networking
          remmina putty mtr-gui
          # media
          mpv nomacs
          # themes
-          tela-circle-icon-theme
-          firefoxpwa
+          tela-circle-icon-theme localPackages.win11os-kde localPackages.fluent-kde localPackages.blurred-wallpaper
+          localPackages.slate utterly-nord-plasma
        ];
        users.sharedModules =
-        [{
-          config.home.file.".config/baloofilerc".text =
-          ''
-            [Basic Settings]
-            Indexing-Enabled=false
-          '';
-        }];
+        [(homeInputs: {
+          config.home.file = mkIf (!homeInputs.config.programs.plasma.enable)
+          {
+            ".config/baloofilerc".text =
+            ''
+              [Basic Settings]
+              Indexing-Enabled=false
+            '';
+          };
+        })];
      };
      programs =
      {
        adb.enable = true;
        wireshark = { enable = true; package = inputs.pkgs.wireshark; };
-        firefox =
-        {
-          enable = true;
-          languagePacks = [ "zh-CN" "en-US" ];
-          nativeMessagingHosts.packages = [ inputs.pkgs.firefoxpwa ];
-        };
        vim.package = inputs.pkgs.vim-full;
+        yubikey-touch-detector.enable = true;
      };
      nixpkgs.config.packageOverrides = pkgs: 
      {
--- a/modules/packages/desktop/firefox.nix
+++ b/modules/packages/desktop/firefox.nix
@@ -0,0 +1,58 @@
+inputs:
+{
+  config = inputs.lib.mkIf (builtins.elem "desktop" inputs.config.nixos.packages._packageSets)
+  {
+    nixos.users.sharedModules = [{ config =
+    {
+      programs.firefox =
+      {
+        enable = true;
+        # TODO: switch to 24.05
+        # nativeMessagingHosts = [ inputs.pkgs.plasma-browser-integration ];
+        package = inputs.pkgs.firefox.override { nativeMessagingHosts = [ inputs.pkgs.plasma-browser-integration ]; };
+        policies.DefaultDownloadDirectory = "\${home}/Downloads";
+        profiles.default =
+        {
+          extensions = with inputs.pkgs.firefox-addons;
+          [
+            immersive-translate tampermonkey bitwarden cookies-txt dualsub firefox-color i-dont-care-about-cookies
+            metamask pakkujs switchyomega rsshub-radar rsspreview tabliss tree-style-tab ublock-origin wallabagger
+            wappalyzer grammarly
+            (
+              buildFirefoxXpiAddon
+              {
+                pname = "zotero-connector";
+                version = "5.0.114";
+                addonId = "zotero@chnm.gmu.edu";
+                url = "https://download.zotero.org/connector/firefox/release/Zotero_Connector-5.0.114.xpi";
+                sha256 = "1g9d991m4vfj5x6r86sw754bx7r4qi8g5ddlqp7rcw6wrgydhrhw";
+                meta = {};
+              }
+            )
+          ];
+          search = { default = "Google"; force = true; };
+          userChrome = builtins.readFile "${inputs.topInputs.lepton}/userChrome.css";
+          userContent = builtins.readFile "${inputs.topInputs.lepton}/userContent.css";
+          extraConfig = builtins.readFile "${inputs.topInputs.lepton}/user.js";
+          settings =
+          {
+            # general
+            "browser.search.region" = "CN";
+            "intl.locale.requested" = "zh-CN,en-US";
+            "browser.aboutConfig.showWarning" = false;
+            "browser.bookmarks.showMobileBookmarks" = true;
+            "browser.download.panel.shown" = true;
+            "browser.download.useDownloadDir" = true;
+            "browser.newtab.extensionControlled" = true;
+            "browser.toolbars.bookmarks.visibility" = "never";
+            # allow to apply userChrome.css
+            "toolkit.legacyUserProfileCustomizations.stylesheets" = true;
+          };
+        };
+      };
+      home.file.".mozilla/firefox/profiles.ini".force = true;
+    };}];
+    # still enable global firefox, to install language packs
+    programs.firefox = { enable = true; languagePacks = [ "zh-CN" "en-US" ]; };
+  };
+}
--- a/modules/packages/server/default.nix
+++ b/modules/packages/server/default.nix
@@ -17,7 +17,7 @@ inputs:
      {
        packages = with inputs.pkgs;
        {
-          _packages = 
+          _packages =
          [
            # shell
            ksh
@@ -25,7 +25,7 @@ inputs:
            beep dos2unix gnugrep pv tmux screen parallel tldr cowsay jq zellij neofetch ipfetch localPackages.pslist
            fastfetch reptyr
            # lsxx
-            pciutils usbutils lshw util-linux lsof
+            pciutils usbutils lshw util-linux lsof dmidecode
            # top
            iotop iftop htop btop powertop s-tui
            # editor
@@ -51,6 +51,11 @@ inputs:
            # development
            gdb try inputs.topInputs.plasma-manager.packages.x86_64-linux.rc2nix hexo-cli
          ] ++ (with inputs.config.boot.kernelPackages; [ cpupower usbip ]);
+          _pythonPackages = [(pythonPackages: with pythonPackages;
+          [
+            openai python-telegram-bot fastapi pypdf2 pandas matplotlib plotly gunicorn redis jinja2
+            certifi charset-normalizer idna orjson psycopg2 inquirerpy requests tqdm
+          ])];
        };
        users.sharedModules = [(home-inputs:
        {
--- a/modules/packages/server/ssh/default.nix
+++ b/modules/packages/server/ssh/default.nix
@@ -41,6 +41,11 @@ inputs:
              ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAoMu0HEaFQsnlJL0L6isnkNZdRq0OiDXyaX3+fl3NjT";
              hostnames = [ "initrd.nas.chn.moe" "[office.chn.moe]:5440" "192.168.1.185" ];
            };
+            surface =
+            {
+              ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFdm3DcfHdcLP0oSpVrWwIZ/b9lZuakBSPwCFz2BdTJ7";
+              hostnames = [ "192.168.1.166" ];
+            };
            pc =
            {
              ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMSfREi19OSwQnhdsE8wiNwGSFFJwNGN0M5gN+sdrrLJ";
@@ -161,6 +166,7 @@ inputs:
          // {
            xmupc1 = { host = "xmupc1"; hostname = "office.chn.moe"; port = 6007; };
            nas = { host = "nas"; hostname = "office.chn.moe"; port = 5440; };
+            surface = { host = "surface"; hostname = "192.168.1.166"; };
            gitea = { host = "gitea"; hostname = "ssh.git.chn.moe"; };
          };
        };
--- a/modules/packages/server/ssh/surface_rsa.pub
+++ b/modules/packages/server/ssh/surface_rsa.pub
@@ -0,0 +1 @@
+ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDJAyDl52UVGFPTV/rXFERrXAMY5qZ3g+tpg9HOGdw86G4Nr8Xp/cTxZjF4kSfIkSrGblAV9Lm4US0fW3pGOQu5qQrSAENxqHxdlEyzt7izyF2CklDUeTjs3KHOIZMvSli4z014NPcswBbjwB9Lyrw0fCQ9P1vYkrUHEzL2SMxdack1EQPcMF4MxblDqc+eQhdMCkKE8T1Cb1ZqxeLVMPn9CwjG18JoxL+/xs+MjcsSXYWcoqYTfgfhguMbh0D4Eo32MHS/IzRSxnOHJxhG5xYePcyBlb/CxQuYA+RTqKNE85j7GcL2oEmeZ1b++/9qFT9grwVh+UOBRO2xiMzKDF24nXPJ+eLyd6Z/3swGT4rTVDnrXV5eZUkWLHN093IdLJCTtPVrKV9OxEKr5sU2W0edpirNrlGq7/MYkJX9EbQctDFA69XfQkZlGK9xGutqSgEaVlY54fS0Due+NDrNBPfMKJ9MTmFDOY+NYn05El2rMD39OKbGbCR5ASwSSBlcQeE=
--- a/modules/packages/workstation/default.nix
+++ b/modules/packages/workstation/default.nix
@@ -14,27 +14,21 @@ inputs:
            # password and key management
            electrum jabref
            # system management
-            wl-mirror ventoy-full
+            wl-mirror
            # nix tools
-            nix-template appimage-run nil nixd nix-alien nix-serve node2nix nix-prefetch-github prefetch-npm-deps
-            nix-prefetch-docker pnpm-lock-export bundix
+            nix-template nil nix-alien pnpm-lock-export bundix
            # instant messager
-            zoom-us signal-desktop qq nur-xddxdd.wechat-uos slack nur-linyinfeng.wemeet
-            cinny-desktop nheko
-            # office
-            libreoffice-qt texstudio poppler_utils pdftk gnuplot pdfchain hdfview
-            (texlive.combine { inherit (texlive) scheme-full; inherit (localPackages) citation-style-language; })
+            qq nur-xddxdd.wechat-uos cinny-desktop nheko
            # development
            jetbrains.clion android-studio dbeaver cling clang-tools_16 ccls fprettify aircrack-ng
            # media
-            nur-xddxdd.svp obs-studio waifu2x-converter-cpp inkscape blender
+            nur-xddxdd.svp
            # virtualization
            wineWowPackages.stagingFull virt-viewer bottles # wine64
            # text editor
            appflowy notion-app-enhanced joplin-desktop standardnotes logseq
            # math, physics and chemistry
-            mathematica octaveFull root ovito paraview localPackages.vesta # qchem.quantum-espresso
-            localPackages.vasp localPackages.vaspkit jmol localPackages.v_sim
+            mathematica paraview localPackages.vasp jmol # qchem.quantum-espresso
            # encryption and password management
            john crunch hashcat
            # container and vm
@@ -43,13 +37,11 @@ inputs:
            microsoft-edge
            # news
            rssguard newsflash newsboat
+            yuzu-early-access
          ];
          _pythonPackages = [(pythonPackages: with pythonPackages;
          [
-            phonopy tensorflow keras openai scipy scikit-learn jupyterlab autograd
-            # localPackages.pix2tex
-            inquirerpy requests python-telegram-bot tqdm fastapi pypdf2 pandas matplotlib plotly gunicorn redis jinja2
-            certifi charset-normalizer idna orjson psycopg2 localPackages.eigengdb
+            phonopy tensorflow keras scipy scikit-learn jupyterlab autograd # localPackages.pix2tex
          ])];
          _prebuildPackages =
          [
@@ -76,29 +68,7 @@ inputs:
        anime-game-launcher = { enable = true; package = inputs.pkgs.anime-game-launcher; };
        honkers-railway-launcher = { enable = true; package = inputs.pkgs.honkers-railway-launcher; };
        nix-ld.enable = true;
-        gamemode =
-        {
-          enable = true;
-          settings =
-          {
-            general.renice = 10;
-            gpu =
-            {
-              apply_gpu_optimisations = "accept-responsibility";
-              nv_powermizer_mode = 1;
-            };
-            custom = let notify-send = "${inputs.pkgs.libnotify}/bin/notify-send"; in
-            {
-              start = "${notify-send} 'GameMode started'";
-              end = "${notify-send} 'GameMode ended'";
-            };
-          };
-        };
-        chromium =
-        {
-          enable = true;
-          extraOpts.PasswordManagerEnabled = false;
-        };
+        chromium = { enable = true; extraOpts.PasswordManagerEnabled = false; };
      };
    };
 }
--- a/modules/services/beesd.nix
+++ b/modules/services/beesd.nix
@@ -8,8 +8,14 @@ inputs:
      type = types.attrsOf (types.oneOf
      [
        types.nonEmptyStr
-        (types.submodule { options =
-          { device = mkOption { type = types.nonEmptyStr; }; hashTableSizeMB = mkOption { type = types.int; }; };})
+        (types.submodule
+        {
+          options =
+          {
+            device = mkOption { type = types.nonEmptyStr; };
+            hashTableSizeMB = mkOption { type = types.ints.unsigned; default = 1024; };
+            threads = mkOption { type = types.ints.unsigned; default = 1; };
+          };})
      ]);
      default = {};
    };
@@ -30,7 +36,7 @@ inputs:
            {
              spec = instance.value.device or instance.value;
              hashTableSizeMB = instance.value.hashTableSizeMB or 1024;
-              extraOptions = [ "--thread-count" "1" "--scan-mode" "3" ];
+              extraOptions = [ "--thread-count" "${toString instance.value.threads or 1}" "--scan-mode" "3" ];
            };
          })
          (attrsToList beesd.instances));
--- a/modules/services/default.nix
+++ b/modules/services/default.nix
@@ -40,6 +40,7 @@ inputs:
    ./fail2ban.nix
    ./wireguard.nix
    ./akkoma.nix
+    ./gamemode.nix
  ];
  options.nixos.services = let inherit (inputs.lib) mkOption types; in
  {
--- a/modules/services/fontconfig.nix
+++ b/modules/services/fontconfig.nix
@@ -23,5 +23,6 @@ inputs:
          serif = [ "Noto Serif CJK SC" "Source Han Serif SC" "DejaVu Serif" ];
        };
      };
+      nixos.users.sharedModules = [{ config.xdg.configFile."fontconfig/conf.d/10-hm-fonts.conf".force = true; }];
    };
 }
--- a/modules/services/gamemode.nix
+++ b/modules/services/gamemode.nix
@@ -0,0 +1,30 @@
+inputs:
+{
+  options.nixos.services.gamemode = let inherit (inputs.lib) mkOption types; in
+  {
+    enable = mkOption { type = types.bool; default = false; };
+    drmDevice = mkOption { type = types.int; };
+  };
+  config = let inherit (inputs.config.nixos.services) gamemode; in inputs.lib.mkIf gamemode.enable
+  {
+    programs.gamemode =
+    {
+      enable = true;
+      settings =
+      {
+        general.renice = 10;
+        gpu =
+        {
+          apply_gpu_optimisations = "accept-responsibility";
+          nv_powermizer_mode = 1;
+          gpu_device = builtins.toString gamemode.drmDevice;
+        };
+        custom = let notify-send = "${inputs.pkgs.libnotify}/bin/notify-send"; in
+        {
+          start = "${notify-send} 'GameMode started'";
+          end = "${notify-send} 'GameMode ended'";
+        };
+      };
+    };
+  };
+}
--- a/modules/services/wireguard.nix
+++ b/modules/services/wireguard.nix
@@ -3,45 +3,88 @@ inputs:
  options.nixos.services.wireguard = let inherit (inputs.lib) mkOption types; in
  {
    enable = mkOption { type = types.bool; default = false; };
-    peers = mkOption { type = types.nonEmptyListOf types.nonEmptyStr; default = []; };
    # wg genkey | wg pubkey
    publicKey = mkOption { type = types.nonEmptyStr; };
-    wireguardIp = mkOption { type = types.nonEmptyStr; };
-    externalIp = mkOption { type = types.nullOr types.nonEmptyStr; default = null; };
    lighthouse = mkOption { type = types.bool; default = false; };
+    behindNat = mkOption
+    {
+      type = types.bool;
+      default = inputs.config.nixos.services.xray.client.enable;
+    };
+    listenIp = mkOption { type = types.nullOr types.nonEmptyStr; default = null; };
+    # if the host is behind xray, it should listen on another port, to make xray succeffully listen on 51820
+    listenPort = mkOption
+    {
+      type = types.ints.unsigned;
+      default = if inputs.config.nixos.services.wireguard.behindNat then 51821 else 51820;
+    };
+    wireguardIp = mkOption { type = types.nonEmptyStr; };
+    peers = mkOption { type = types.nonEmptyListOf types.nonEmptyStr; default = []; };
  };
  config =
    let
-      inherit (inputs.lib) mkIf;
+      inherit (inputs.lib) mkIf mkMerge;
      inherit (inputs.config.nixos.services) wireguard;
-      inherit (builtins) map toString;
-    in mkIf wireguard.enable
-    {
-      networking =
-        let
-          # if the host is behind xray, it should listen on another port, to make xray succeffully listen on 51820
-          port = 51820 + (if inputs.config.nixos.services.xrayClient.enable then 1 else 0);
-        in
+      inherit (builtins) map toString listToAttrs filter;
+    in mkMerge
+    [
+      {
+        assertions =
+        [{
+          assertion = !wireguard.behindNat -> wireguard.listenIp != null;
+          message = "wireguard.listenIp should be not null when behindNat is false.";
+        }];
+      }
+      (
+        mkIf wireguard.enable
        {
-          firewall = { allowedUDPPorts = [ port ]; trustedInterfaces = [ "wireguard" ]; };
-          wireguard.interfaces.wireguard =
+          networking =
          {
-            ips = [ "${wireguard.wireguardIp}/24" ];
-            listenPort = port;
-            privateKeyFile = inputs.config.sops.secrets."wireguard/privateKey".path;
-            peers = map
+            firewall = { allowedUDPPorts = [ wireguard.listenPort ]; trustedInterfaces = [ "wireguard" ]; };
+            wireguard.interfaces.wireguard =
+            {
+              ips = [ "${wireguard.wireguardIp}/24" ];
+              inherit (wireguard) listenPort;
+              privateKeyFile = inputs.config.sops.secrets."wireguard/privateKey".path;
+              peers = map
+                (peer:
+                {
+                  publicKey = peer.publicKey;
+                  allowedIPs = [ (if peer.lighthouse then "192.168.83.0/24" else "${peer.wireguardIp}/32") ];
+                  endpoint = mkIf (!peer.behindNat) "${peer.listenIp}:${builtins.toString peer.listenPort}";
+                  persistentKeepalive = 3;
+                })
+                (map
+                  (peer: inputs.topInputs.self.nixosConfigurations.${peer}.config.nixos.services.wireguard)
+                  wireguard.peers);
+            };
+          };
+          sops.secrets."wireguard/privateKey" = {};
+          # somehow fix wireguard connection
+          systemd.services = mkIf wireguard.behindNat (listToAttrs (map
+            (peer:
+            {
+              name = "wireguard-ping-${peer.name}";
+              value =
+              {
+                description = "ping ${peer.name}";
+                after = [ "network.target" ];
+                wantedBy = [ "multi-user.target" ];
+                serviceConfig =
+                {
+                  ExecStart = "${inputs.pkgs.iputils}/bin/ping -i 3 ${peer.value.wireguardIp}";
+                  Restart = "always";
+                };
+              };
+            })
+            (filter (peer: !peer.value.behindNat) (map
              (peer:
              {
-                publicKey = peer.publicKey;
-                allowedIPs = [ (if peer.lighthouse then "192.168.83.0/24" else "${peer.wireguardIp}/32") ];
-                endpoint = mkIf (peer.externalIp != null) "${peer.externalIp}:51820";
-                persistentKeepalive = 3;
+                name = peer;
+                value = inputs.topInputs.self.nixosConfigurations.${peer}.config.nixos.services.wireguard;
              })
-              (map
-                (peer: inputs.topInputs.self.nixosConfigurations.${peer}.config.nixos.services.wireguard)
-                wireguard.peers);
-          };
-        };
-      sops.secrets."wireguard/privateKey" = {};
-    };
+              wireguard.peers))));
+        }
+      )
+    ];
 }
--- a/modules/services/xray.nix
+++ b/modules/services/xray.nix
@@ -1,8 +1,8 @@
 inputs:
 {
-  options.nixos.services = let inherit (inputs.lib) mkOption types; in
+  options.nixos.services.xray = let inherit (inputs.lib) mkOption types; in
  {
-    xrayClient =
+    client =
    {
      enable = mkOption { type = types.bool; default = false; };
      serverAddress = mkOption { type = types.nonEmptyStr; };
@@ -13,7 +13,7 @@ inputs:
        extraInterfaces = mkOption { type = types.listOf types.nonEmptyStr; default = []; };
      }; }; };
    };
-    xrayServer =
+    server =
    {
      enable = mkOption { type = types.bool; default = false; };
      serverName = mkOption { type = types.nonEmptyStr; };
@@ -23,12 +23,19 @@ inputs:
    let
      inherit (inputs.lib) mkMerge mkIf;
      inherit (inputs.localLib) stripeTabs attrsToList;
-      inherit (inputs.config.nixos.services) xrayClient xrayServer;
+      inherit (inputs.config.nixos.services) xray;
      inherit (builtins) map listToAttrs toString genList length concatStringsSep;
    in mkMerge
    [
+      {
+        assertions =
+        [{
+          assertion = !(xray.client.enable && xray.server.enable);
+          message = "Currenty xray.client and xray.server could not be simutaniusly enabled.";
+        }];
+      }
      (
-        mkIf xrayClient.enable
+        mkIf xray.client.enable
        {
          services =
          {
@@ -40,14 +47,10 @@ inputs:
                no-poll = true;
                log-queries = true;
                server = [ "127.0.0.1#10853" ];
-                interface = xrayClient.dns.extraInterfaces ++ [ "lo" ];
+                interface = xray.client.dns.extraInterfaces ++ [ "lo" ];
                bind-dynamic = true;
-                ipset =
-                [
-                  "/developer.download.nvidia.com/noproxy_net"
-                  "/yuanshen.com/noproxy_net"
-                ];
-                address = map (host: "/${host.name}/${host.value}") (attrsToList xrayClient.dns.hosts);
+                ipset = [ "/yuanshen.com/noproxy_net" ];
+                address = map (host: "/${host.name}/${host.value}") (attrsToList xray.client.dns.hosts);
              };
            };
            xray = { enable = true; settingsFile = inputs.config.sops.templates."xray-client.json".path; };
@@ -130,7 +133,7 @@ inputs:
                      protocol = "vless";
                      settings.vnext =
                      [{
-                        address = xrayClient.serverAddress;
+                        address = xray.client.serverAddress;
                        port = 443;
                        users =
                        [{
@@ -145,7 +148,7 @@ inputs:
                        security = "reality";
                        realitySettings =
                        {
-                          serverName = xrayClient.serverName;
+                          serverName = xray.client.serverName;
                          publicKey = "Nl0eVZoDF9d71_3dVsZGJl3UWR9LCv3B14gu7G6vhjk";
                          fingerprint = "firefox";
                        };
@@ -308,7 +311,7 @@ inputs:
        }
      )
      (
-        mkIf xrayServer.enable (let userList = genList (n: n) 30; in
+        mkIf xray.server.enable (let userList = genList (n: n) 30; in
        {
          services.xray = { enable = true; settingsFile = inputs.config.sops.templates."xray-server.json".path; };
          sops =
@@ -351,7 +354,7 @@ inputs:
                        realitySettings =
                        {
                          dest = "127.0.0.1:${fallbackPort}";
-                          serverNames = [ xrayServer.serverName ];
+                          serverNames = [ xray.server.serverName ];
                          privateKey = inputs.config.sops.placeholder."xray-server/private-key";
                          minClientVer = "1.8.0";
                          shortIds = [ "" ];
@@ -493,12 +496,12 @@ inputs:
          };
          nixos.services =
          {
-            acme = { enable = true; cert.${xrayServer.serverName}.group = inputs.config.users.users.nginx.group; };
+            acme = { enable = true; cert.${xray.server.serverName}.group = inputs.config.users.users.nginx.group; };
            nginx =
            {
              enable = true;
-              transparentProxy.map."${xrayServer.serverName}" = 4726;
-              https."${xrayServer.serverName}" =
+              transparentProxy.map."${xray.server.serverName}" = 4726;
+              https."${xray.server.serverName}" =
              {
                listen.main = { proxyProtocol = false; addToTransparentProxy = false; };
                location."/".return.return = "400";
--- a/modules/system/default.nix
+++ b/modules/system/default.nix
@@ -16,6 +16,7 @@ inputs:
    ./sops.nix
    ./user.nix
    ./sysctl.nix
+    ./envfs.nix
  ];
  config =
  {
@@ -24,7 +25,7 @@ inputs:
    boot =
    {
      supportedFilesystems = [ "ntfs" ];
-      consoleLogLevel = 7;
+      # consoleLogLevel = 7;
    };
    hardware.enableAllFirmware = true;
    environment.sessionVariables = rec
--- a/modules/system/envfs.nix
+++ b/modules/system/envfs.nix
@@ -0,0 +1,12 @@
+inputs:
+{
+  options.nixos.system.envfs = let inherit (inputs.lib) mkOption types; in
+  {
+    enable = mkOption { type = types.bool; default = true; };
+  };
+  config = inputs.lib.mkMerge
+  [
+    (builtins.elemAt inputs.topInputs.envfs.nixosModules.envfs.imports 0 inputs)
+    { environment.variables.ENVFS_RESOLVE_ALWAYS = "1"; }
+  ];
+}
--- a/modules/system/grub.nix
+++ b/modules/system/grub.nix
@@ -7,44 +7,78 @@ inputs:
    # "efi" using efi, "efiRemovable" using efi with install grub removable, or dev path like "/dev/sda" using bios
    installDevice = mkOption { type = types.str; };
  };
-  config =
-    let
-      inherit (inputs.lib) mkIf;
-      inherit (inputs.localLib) mkConditional attrsToList stripeTabs;
-      inherit (inputs.config.nixos.system) grub;
-      inherit (builtins) concatStringsSep map;
-    in { boot.loader =
+  config = let inherit (inputs.config.nixos.system) grub; in inputs.lib.mkMerge
+  [
+    # general settings
+    { boot.loader.grub = { enable = true; useOSProber = false; }; }
+    # grub timeout
+    { boot.loader.timeout = grub.timeout; }
+    # grub install
    {
-      timeout = grub.timeout;
-      grub =
+      boot.loader =
      {
-        enable = true;
-        useOSProber = false;
-        extraEntries = concatStringsSep "\n" (map
-          (system:
-          ''
-            menuentry "${system.value}" {
-              insmod part_gpt
-              insmod fat
-              insmod search_fs_uuid
-              insmod chain
-              search --fs-uuid --set=root ${system.name}
-              chainloader /EFI/Microsoft/Boot/bootmgfw.efi
-            }
-          '')
-          (attrsToList grub.windowsEntries));
-        device =
-          if grub.installDevice == "efi" || grub.installDevice == "efiRemovable" then "nodev"
-          else grub.installDevice;
-        efiSupport = grub.installDevice == "efi" || grub.installDevice == "efiRemovable";
-        efiInstallAsRemovable = grub.installDevice == "efiRemovable";
+        grub =
+        {
+          device = if builtins.elem grub.installDevice [ "efi" "efiRemovable" ] then "nodev" else grub.installDevice;
+          efiSupport = builtins.elem grub.installDevice [ "efi" "efiRemovable" ];
+          efiInstallAsRemovable = grub.installDevice == "efiRemovable";
+        };
+        efi =
+        {
+          canTouchEfiVariables = grub.installDevice == "efi";
+          efiSysMountPoint = inputs.lib.mkIf (builtins.elem grub.installDevice [ "efi" "efiRemovable" ]) "/boot/efi";
+        };
      };
-      efi =
+    }
+    # extra grub entries
+    {
+      boot.loader.grub =
      {
-        canTouchEfiVariables = grub.installDevice == "efi";
-        efiSysMountPoint =
-          if grub.installDevice == "efi" || grub.installDevice == "efiRemovable" then "/boot/efi"
-          else inputs.options.boot.loader.efi.efiSysMountPoint.default;
+        memtest86.enable = true;
+        extraFiles = inputs.lib.mkIf (builtins.elem grub.installDevice [ "efi" "efiRemovable" ])
+          { "shell.efi" = "${inputs.pkgs.edk2-uefi-shell}/shell.efi"; };
+        extraEntries = inputs.lib.mkMerge (builtins.concatLists
+        [
+          (builtins.map
+            (system:
+            ''
+              menuentry "${system.value}" {
+                insmod part_gpt
+                insmod fat
+                insmod search_fs_uuid
+                insmod chain
+                search --fs-uuid --set=root ${system.name}
+                chainloader /EFI/Microsoft/Boot/bootmgfw.efi
+              }
+            '')
+            (inputs.localLib.attrsToList grub.windowsEntries))
+          [
+            ''
+              menuentry "System shutdown" {
+                echo "System shutting down..."
+                halt
+              }
+              menuentry "System restart" {
+                echo "System rebooting..."
+                reboot
+              }
+            ''
+            (
+              inputs.lib.optionalString (builtins.elem grub.installDevice [ "efi" "efiRemovable" ])
+              ''
+                menuentry 'UEFI Firmware Settings' --id 'uefi-firmware' {
+                  fwsetup
+                }
+                menuentry "UEFI Shell" {
+                  insmod fat
+                  insmod chain
+                  chainloader @bootRoot@/shell.efi
+                }
+              ''
+            )
+          ]
+        ]);
      };
-    };};
+    }
+  ];
 }
--- a/modules/system/gui.nix
+++ b/modules/system/gui.nix
@@ -17,9 +17,8 @@ inputs:
      services.xserver =
      {
        enable = true;
-        displayManager = { sddm.enable = true; defaultSession = "plasma"; };
+        displayManager = { sddm.enable = true; defaultSession = "plasmawayland"; };
        desktopManager.plasma5.enable = true;
-        videoDrivers = inputs.config.nixos.hardware.gpus;
      };
      systemd.services.display-manager = { after = [ "network-online.target" ]; enable = gui.autoStart; };
      environment =
--- a/modules/system/impermanence.nix
+++ b/modules/system/impermanence.nix
@@ -2,7 +2,7 @@ inputs:
 {
  options.nixos.system.impermanence = let inherit (inputs.lib) mkOption types; in
  {
-    enable = mkOption { type = types.bool; default = false; };
+    enable = mkOption { type = types.bool; default = true; };
    persistence = mkOption { type = types.nonEmptyStr; default = "/nix/persistent"; };
    root = mkOption { type = types.nonEmptyStr; default = "/nix/rootfs/current"; };
    nodatacow = mkOption { type = types.nullOr types.nonEmptyStr; default = "/nix/nodatacow"; };
@@ -56,7 +56,7 @@ inputs:
        {
          users.chn =
          {
-            directories = [ ".cache" ];
+            directories = [ ".cache" ".config/fontconfig" ];
          };
        } else {});
        "${impermanence.nodatacow}" =
--- a/modules/system/kernel.nix
+++ b/modules/system/kernel.nix
@@ -33,14 +33,14 @@ inputs:
      extraModulePackages = (with inputs.config.boot.kernelPackages; [ v4l2loopback ]) ++ kernel.modules.install;
      extraModprobeConfig = builtins.concatStringsSep "\n" kernel.modules.modprobeConfig;
      kernelParams = [ "delayacct" "acpi_osi=Linux" "acpi.ec_no_wakeup=1" ];
-      blacklistedKernelModules = [ "ideapad_laptop" ];
      kernelPackages = inputs.pkgs.linuxPackages_xanmod_latest;
      kernelPatches =
        let
          patches =
          {
            cjktty =
-            {
+            [{
+              name = "cjktty";
              patch =
                let
                  version = builtins.splitVersion inputs.config.boot.kernelPackages.kernel.version;
@@ -55,15 +55,16 @@ inputs:
                      hashes =
                      {
                        "6.1" = "11ddiammvjxx2m9v32p25l1ai759a1d6xhdpszgnihv7g2fzigf5";
-                        "6.6" = "19ib0syj3207ifr315gdrnpv6nhh435fmgl05c7k715nng40i827";
+                        "6.7" = "1yfsmc0873xiwlirir0xfp9zyrpd09q1srgr3z4rl7i7lxzaqls8";
                      };
                    in hashes."${major}.${minor}";
                };
              extraStructuredConfig =
                { FONT_CJK_16x16 = inputs.lib.kernel.yes; FONT_CJK_32x32 = inputs.lib.kernel.yes; };
-            };
+            }];
            lantian =
-            {
+            [{
+              name = "lantian";
              patch = null;
              # pick from xddxdd/nur-packages dce93a
              extraStructuredConfig = with inputs.lib.kernel;
@@ -80,9 +81,47 @@ inputs:
                HZ_250 = inputs.lib.mkForce no;
                HZ = inputs.lib.mkForce (freeform "1000");
              };
-            };
+            }];
+            surface =
+              let
+                version =
+                  let versionArray = builtins.splitVersion inputs.config.boot.kernelPackages.kernel.version;
+                  in "${builtins.elemAt versionArray 0}.${builtins.elemAt versionArray 1}";
+                kernelPatches = builtins.map
+                  (file:
+                  {
+                    name = "surface-${file.name}";
+                    patch = "${inputs.topInputs.linux-surface}/patches/${version}/${file.name}";
+                  })
+                  (builtins.filter
+                    (file: file.value == "regular")
+                    (inputs.localLib.attrsToList (builtins.readDir
+                      "${inputs.topInputs.linux-surface}/patches/${version}")));
+                kernelConfig = builtins.removeAttrs
+                  (builtins.listToAttrs (builtins.concatLists (builtins.map
+                    (configString:
+                      if builtins.match "CONFIG_.*=." configString == [] then
+                      (
+                        let match = builtins.match "CONFIG_(.*)=(.)" configString; in with inputs.lib.kernel;
+                        [{
+                          name = builtins.elemAt match 0;
+                          value = { m = module; y = yes; }.${builtins.elemAt match 1};
+                        }]
+                      )
+                      else if builtins.match "# CONFIG_.* is not set" configString == [] then
+                      [{
+                        name = builtins.elemAt (builtins.match "# CONFIG_(.*) is not set" configString) 0;
+                        value = inputs.lib.kernel.unset;
+                      }]
+                      else if builtins.match "#.*" configString == [] then []
+                      else if configString == "" then []
+                      else throw "could not parse: ${configString}"
+                    )
+                    (inputs.lib.strings.splitString "\n"
+                      (builtins.readFile "${inputs.topInputs.linux-surface}/configs/surface-${version}.config")))))
+                  [ "VIDEO_IPU3_IMGU" ];
+              in kernelPatches ++ [{ name = "surface-config"; patch = null; extraStructuredConfig = kernelConfig; }];
          };
-        in
-          builtins.map (name: { inherit name; } // patches.${name}) kernel.patches;
+        in builtins.concatLists (builtins.map (name: patches.${name}) kernel.patches);
    };};
 }
--- a/modules/system/nix.nix
+++ b/modules/system/nix.nix
@@ -4,61 +4,82 @@ inputs:
  {
    # marches allowed to be compiled on this machine
    marches = mkOption { type = types.nullOr (types.listOf types.nonEmptyStr); default = null; };
-    keepOutputs = mkOption { type = types.bool; default = false; };
+    includeBuildDependencies = mkOption { type = types.bool; default = inputs.topInputs.self.config.archive; };
    substituters = mkOption { type = types.nullOr (types.listOf types.nonEmptyStr); default = null; };
-    autoOptimiseStore = mkOption { type = types.bool; default = true; };
+    autoOptimiseStore = mkOption { type = types.bool; default = false; };
  };
-  config =
-    let
-      inherit (inputs.config.nixos.system) nix;
-    in
+  config = let inherit (inputs.config.nixos.system) nix; in inputs.lib.mkMerge
+  [
+    # general nix config
+    {
+      nix.settings =
      {
-        nix =
+        system-features = [ "big-parallel" "nixos-test" "benchmark" ];
+        experimental-features = [ "nix-command" "flakes" ];
+        keep-failed = true;
+        max-substitution-jobs = 4;
+        trusted-public-keys = [ "chn:Cc+nowW1LIpe1kyXOZmNaznFDiH1glXmpb4A+WD/DTE=" ];
+        show-trace = true;
+        max-jobs = 4;
+        cores = 0;
+        keep-going = true;
+      };
+      systemd.services.nix-daemon = { serviceConfig.CacheDirectory = "nix"; environment.TMPDIR = "/var/cache/nix"; };
+    }
+    # nix daemon use lower io/cpu priority
+    {
+      nix = { daemonIOSchedClass = "idle"; daemonCPUSchedPolicy = "idle"; };
+      systemd.services.nix-daemon.serviceConfig = { Slice = "-.slice"; Nice = "19"; };
+    }
+    # nix channel & nix flake registry
+    {
+      nix =
+      {
+        registry =
        {
-          settings =
-          {
-            system-features = [ "big-parallel" "nixos-test" "benchmark" ] ++ (map
-              (march: "gccarch-${march}")
-              (
-                if nix.marches == null then
-                  (with inputs.config.nixos.system.nixpkgs; if march == null then [] else [ march ])
-                else nix.marches
-              ));
-            experimental-features = [ "nix-command" "flakes" ];
-            keep-outputs = nix.keepOutputs;
-            keep-failed = true;
-            auto-optimise-store = nix.autoOptimiseStore;
-            substituters = if nix.substituters == null then [ "https://cache.nixos.org/" ] else nix.substituters;
-            trusted-public-keys = [ "chn:Cc+nowW1LIpe1kyXOZmNaznFDiH1glXmpb4A+WD/DTE=" ];
-            show-trace = true;
-            max-jobs = 2;
-            cores = 0;
-            keep-going = true;
-          };
-          daemonIOSchedClass = "idle";
-          daemonCPUSchedPolicy = "idle";
-          registry =
-          {
-            nixpkgs.flake = inputs.topInputs.nixpkgs;
-            nixpkgs-unstable.flake = inputs.topInputs.nixpkgs-unstable;
-            nixos.flake = inputs.topInputs.self;
-          };
-          nixPath = [ "nixpkgs=${inputs.topInputs.nixpkgs}" ];
+          nixpkgs.flake = inputs.topInputs.nixpkgs;
+          nixpkgs-unstable.flake = inputs.topInputs.nixpkgs-unstable;
+          nixos.flake = inputs.topInputs.self;
        };
-        systemd.services.nix-daemon =
-        {
-          serviceConfig = { CacheDirectory = "nix"; Slice = "-.slice"; Nice = "19"; };
-          environment = { TMPDIR = "/var/cache/nix"; };
-        };
-        environment.etc =
+        nixPath = [ "nixpkgs=${inputs.topInputs.nixpkgs}" ];
+      };
+      environment =
+      {
+        etc =
        {
          "channels/nixpkgs".source = inputs.topInputs.nixpkgs.outPath;
          "channels/nixpkgs-unstable".source = inputs.topInputs.nixpkgs-unstable.outPath;
          "nixos".source = inputs.topInputs.self.outPath;
        };
-        # environment.pathsToLink = [ "/include" ];
-        # environment.variables.CPATH = "/run/current-system/sw/include";
-        # environment.variables.LIBRARY_PATH = "/run/current-system/sw/lib";
-        # gui.enable
+        variables.COMMA_NIXPKGS_FLAKE = "nixpkgs-unstable";
      };
+    }
+    # marches
+    {
+      nix.settings.system-features = map
+        (march: "gccarch-${march}")
+        (
+          if nix.marches == null then
+            (with inputs.config.nixos.system.nixpkgs; if march == null then [] else [ march ])
+          else nix.marches
+        );
+    }
+    # includeBuildDependencies
+    {
+      nix.settings.keep-outputs = nix.includeBuildDependencies;
+      system.includeBuildDependencies = nix.includeBuildDependencies;
+    }
+    # substituters
+    {
+      nix.settings.substituters = if nix.substituters == null then [ "https://cache.nixos.org/" ] else nix.substituters;
+    }
+    # autoOptimiseStore
+    {
+      nix.settings.auto-optimise-store = nix.autoOptimiseStore;
+    }
+    # c++ include path
+    # environment.pathsToLink = [ "/include" ];
+    # environment.variables.CPATH = "/run/current-system/sw/include";
+    # environment.variables.LIBRARY_PATH = "/run/current-system/sw/lib";
+  ];
 }
--- a/modules/system/nixpkgs.nix
+++ b/modules/system/nixpkgs.nix
@@ -24,7 +24,7 @@ inputs:
        nixpkgs =
          let
            permittedInsecurePackages =
-              [ "openssl_1_1" "electron_19" "python2" "electron_12" "electron_24" "zotero" ];
+              [ "openssl_1_1" "electron_19" "python2" "electron_12" "electron_24" "zotero" "electron_25" ];
            hostPlatform = mkConditional (nixpkgs.march != null)
              { system = "x86_64-linux"; gcc = { arch = nixpkgs.march; tune = nixpkgs.march; }; }
              "x86_64-linux";
--- a/modules/users/chn/default.nix
+++ b/modules/users/chn/default.nix
@@ -1,6 +1,6 @@
 inputs:
 {
-  # imports = inputs.localLib.mkModules [ ./plasma.nix ];
+  imports = inputs.localLib.mkModules [ ./plasma ];
  config =
    let
      inherit (inputs.lib) mkIf;
--- a/modules/users/chn/plasma.nix
+++ b/modules/users/chn/plasma.nix
@@ -1,197 +0,0 @@
-{
-  # plasma-manager is not mature, so only use 
-  config.home-manager.users.chn.config.programs.plasma =
-  {
-    enable = true;
-    shortcuts =
-    {
-      # crow translate
-      "io.crow_translate.CrowTranslate.desktop"."TranslateSelectedText" = "Ctrl+Alt+E";
-
-      # display
-      "kded5"."display" = [ "Display" "Meta+P" ];
-      "kwin"."view_actual_size" = "Meta+0";
-      "kwin"."view_zoom_in" = ["Meta++" "Meta+="];
-      "kwin"."view_zoom_out" = "Meta+-";
-      "org_kde_powerdevil"."Decrease Screen Brightness" = "Monitor Brightness Down";
-      "org_kde_powerdevil"."Increase Screen Brightness" = "Monitor Brightness Up";
-
-      # volume
-      "kmix" =
-      {
-        "decrease_volume" = "Volume Down";
-        "increase_volume" = "Volume Up";
-        "mic_mute" = [ "Meta+Volume Mute" ];
-        "mute" = "Volume Mute";
-      };
-
-      # session
-      "ksmserver"."Lock Session" = [ "Meta+L" "Screensaver" ];
-      "ksmserver"."Log Out" = "Ctrl+Alt+Del";
-      "org_kde_powerdevil"."Turn Off Screen" = "Meta+Ctrl+L";
-
-      # mouse
-      "kwin"."MoveMouseToCenter" = "Meta+F6";
-
-      # window
-      "kwin"."Overview" = "Meta+Tab";
-      "kwin"."Show Desktop" = "Meta+D";
-      "kwin"."Suspend Compositing" = "Alt+Shift+F12";
-      "kwin"."Walk Through Windows" = "Alt+Tab";
-      "kwin"."Walk Through Windows (Reverse)" = "Alt+Shift+Backtab";
-      "kwin"."Window Above Other Windows" = "Meta+Shift+PgUp";
-      "kwin"."Window Below Other Windows" = "Meta+Shift+PgDown";
-      "kwin"."Window Close" = "Alt+F4";
-      "kwin"."Window Maximize" = "Meta+PgUp";
-      "kwin"."Window Minimize" = "Meta+PgDown";
-      "kwin"."Window Operations Menu" = "Alt+F3";
-      "kwin"."Window Quick Tile Bottom" = "Meta+Down";
-      "kwin"."Window Quick Tile Left" = "Meta+Left";
-      "kwin"."Window Quick Tile Right" = "Meta+Right";
-      "kwin"."Window Quick Tile Top" = "Meta+Up";
-
-      # virtual desktop
-      "kwin"."Switch One Desktop Down" = "Meta+Ctrl+Down";
-      "kwin"."Switch One Desktop Up" = "Meta+Ctrl+Up";
-      "kwin"."Switch One Desktop to the Left" = "Meta+Ctrl+Left";
-      "kwin"."Switch One Desktop to the Right" = "Meta+Ctrl+Right";
-      "kwin"."Window One Desktop Down" = "Meta+Ctrl+Shift+Down";
-      "kwin"."Window One Desktop Up" = "Meta+Ctrl+Shift+Up";
-      "kwin"."Window One Desktop to the Left" = "Meta+Ctrl+Shift+Left";
-      "kwin"."Window One Desktop to the Right" = "Meta+Ctrl+Shift+Right";
-
-      # media
-      "mediacontrol"."nextmedia" = "Media Next";
-      "mediacontrol"."pausemedia" = "Media Pause";
-      "mediacontrol"."playpausemedia" = [ "Pause" "Media Play" ];
-      "mediacontrol"."previousmedia" = "Media Previous";
-      "mediacontrol"."stopmedia" = "Media Stop";
-
-      # dolphin
-      "org.kde.dolphin.desktop"."_launch" = "Meta+E";
-
-      # konsole
-      "org.kde.konsole.desktop"."_launch" = "Ctrl+Alt+T";
-
-      # krunner
-      "org.kde.krunner.desktop"."_launch" = "Alt+Space";
-
-      # screenshot
-      "org.kde.spectacle.desktop"."ActiveWindowScreenShot" = "Meta+Print";
-      "org.kde.spectacle.desktop"."CurrentMonitorScreenShot" = [ ];
-      "org.kde.spectacle.desktop"."FullScreenScreenShot" = "Shift+Print";
-      "org.kde.spectacle.desktop"."OpenWithoutScreenshot" = [ ];
-      "org.kde.spectacle.desktop"."RectangularRegionScreenShot" = "Meta+Shift+Print";
-      "org.kde.spectacle.desktop"."WindowUnderCursorScreenShot" = "Meta+Ctrl+Print";
-      "org.kde.spectacle.desktop"."_launch" = "Print";
-
-      # settings
-      "systemsettings.desktop"."_launch" = "Meta+I";
-
-      # yakuake
-      "yakuake"."toggle-window-state" = "Meta+Space";
-    };
-    configFile =
-    {
-      # baloo
-      # "baloofilerc"."Basic Settings"."Indexing-Enabled" = false;
-
-      # dolphin
-      "dolphinrc"."General"."ShowFullPath" = true;
-      "dolphinrc"."PreviewSettings"."Plugins" = "blenderthumbnail,comicbookthumbnail,djvuthumbnail,ebookthumbnail,exrthumbnail,marble_thumbnail_geojson,marble_thumbnail_gpx,jpegthumbnail,marble_thumbnail_kmz,marble_thumbnail_kml,kraorathumbnail,windowsimagethumbnail,windowsexethumbnail,mltpreview,mobithumbnail,opendocumentthumbnail,marble_thumbnail_osm,palathumbcreator,gsthumbnail,rawthumbnail,svgthumbnail,imagethumbnail,fontthumbnail,directorythumbnail,textthumbnail,webarchivethumbnail,ffmpegthumbs,audiothumbnail";
-
-      "kcminputrc"."Mouse"."cursorTheme" = "breeze_cursors";
-      "kdeglobals"."KDE"."widgetStyle" = "kvantum";
-      "kdeglobals"."KFileDialog Settings"."Allow Expansion" = true;
-      "kdeglobals"."KFileDialog Settings"."Automatically select filename extension" = true;
-      "kdeglobals"."KFileDialog Settings"."Show Bookmarks" = true;
-      "kdeglobals"."KFileDialog Settings"."Show Full Path" = true;
-      "kdeglobals"."KFileDialog Settings"."Show Inline Previews" = true;
-      "kdeglobals"."KFileDialog Settings"."Show Preview" = true;
-      "kdeglobals"."KFileDialog Settings"."Show Speedbar" = true;
-      "kdeglobals"."KFileDialog Settings"."Show hidden files" = true;
-      "kdeglobals"."KFileDialog Settings"."Sort by" = "Name";
-      "kdeglobals"."KFileDialog Settings"."Sort directories first" = true;
-      "kdeglobals"."KFileDialog Settings"."Sort hidden files last" = true;
-      "kdeglobals"."KFileDialog Settings"."View Style" = "DetailTree";
-
-      "krunnerrc"."General"."FreeFloating" = true;
-      "krunnerrc"."Plugins"."baloosearchEnabled" = false;
-      "kscreenlockerrc"."Daemon"."Autolock" = false;
-
-      # https://www.fanbox.cc/@peas0125/posts/5405326
-      "kscreenlockerrc"."Greeter.Wallpaper.org.kde.image.General"."Image" = ./wallpaper/fanbox-5405326-x4-chop.png;
-      "kscreenlockerrc"."Greeter.Wallpaper.org.kde.image.General"."PreviewImage" =
-        ./wallpaper/fanbox-5405326-x4-chop.png;
-
-
-      "kwinrc"."Effect-blur"."BlurStrength" = 10;
-      "kwinrc"."Effect-kwin4_effect_translucency"."MoveResize" = 75;
-      "kwinrc"."Effect-wobblywindows"."AdvancedMode" = true;
-      "kwinrc"."Effect-wobblywindows"."Drag" = 85;
-      "kwinrc"."Effect-wobblywindows"."Stiffness" = 10;
-      "kwinrc"."Effect-wobblywindows"."WobblynessLevel" = 1;
-      "kwinrc"."Plugins"."blurEnabled" = true;
-      "kwinrc"."Plugins"."contrastEnabled" = false;
-      "kwinrc"."Plugins"."kwin4_effect_dimscreenEnabled" = true;
-      "kwinrc"."Plugins"."kwin4_effect_translucencyEnabled" = true;
-      "kwinrc"."Plugins"."padding" = 4;
-      "kwinrc"."Plugins"."wobblywindowsEnabled" = true;
-      "kwinrc"."SubSession: 3435a388-a8b3-4d1d-9794-b8c30162ce16"."active" = "-1";
-      "kwinrc"."SubSession: 3435a388-a8b3-4d1d-9794-b8c30162ce16"."count" = 0;
-      "kwinrc"."SubSession: 6a473a77-85df-4e49-8c74-bdb06d1f0efd"."active" = "-1";
-      "kwinrc"."SubSession: 6a473a77-85df-4e49-8c74-bdb06d1f0efd"."count" = 0;
-      "kwinrc"."Tiling"."padding" = 4;
-      "kwinrc"."Wayland"."InputMethod[$e]" = "/run/current-system/sw/share/applications/org.fcitx.Fcitx5.desktop";
-      "kwinrc"."Windows"."RollOverDesktops" = true;
-      "kwinrc"."Xwayland"."Scale" = 1;
-      "kwinrc"."Xwayland"."XwaylandEavesdrops" = "Combinations";
-      "kwinrc"."org.kde.kdecoration2"."ButtonsOnLeft" = "M";
-      "kwinrc"."org.kde.kdecoration2"."ButtonsOnRight" = "BFIAX";
-      "kwinrulesrc"."06734e18-08f2-47f9-a6dc-9085d95fe9b0"."Description" = "org.kde.kruler 的设置";
-      "kwinrulesrc"."06734e18-08f2-47f9-a6dc-9085d95fe9b0"."above" = true;
-      "kwinrulesrc"."06734e18-08f2-47f9-a6dc-9085d95fe9b0"."aboverule" = 2;
-      "kwinrulesrc"."06734e18-08f2-47f9-a6dc-9085d95fe9b0"."skipswitcher" = true;
-      "kwinrulesrc"."06734e18-08f2-47f9-a6dc-9085d95fe9b0"."skipswitcherrule" = 2;
-      "kwinrulesrc"."06734e18-08f2-47f9-a6dc-9085d95fe9b0"."wmclass" = "org.kde.kruler";
-      "kwinrulesrc"."06734e18-08f2-47f9-a6dc-9085d95fe9b0"."wmclassmatch" = 1;
-      "kwinrulesrc"."1"."Description" = "element 的设置";
-      "kwinrulesrc"."1"."activity" = "00000000-0000-0000-0000-000000000000";
-      "kwinrulesrc"."1"."activityrule" = 2;
-      "kwinrulesrc"."1"."wmclass" = "element";
-      "kwinrulesrc"."1"."wmclassmatch" = 1;
-      "kwinrulesrc"."2"."Description" = "org.telegram.desktop 的设置";
-      "kwinrulesrc"."2"."activity" = "00000000-0000-0000-0000-000000000000";
-      "kwinrulesrc"."2"."activityrule" = 2;
-      "kwinrulesrc"."2"."wmclass" = "org.telegram.desktop";
-      "kwinrulesrc"."2"."wmclassmatch" = 1;
-      "kwinrulesrc"."3"."Description" = "org.kde.kruler 的设置";
-      "kwinrulesrc"."3"."above" = true;
-      "kwinrulesrc"."3"."aboverule" = 2;
-      "kwinrulesrc"."3"."skipswitcher" = true;
-      "kwinrulesrc"."3"."skipswitcherrule" = 2;
-      "kwinrulesrc"."3"."wmclass" = "org.kde.kruler";
-      "kwinrulesrc"."3"."wmclassmatch" = 1;
-      "kwinrulesrc"."8c1ccf0b-abf4-4d24-a848-522a76a2440d"."Description" = "element 的设置";
-      "kwinrulesrc"."8c1ccf0b-abf4-4d24-a848-522a76a2440d"."activity" = "00000000-0000-0000-0000-000000000000";
-      "kwinrulesrc"."8c1ccf0b-abf4-4d24-a848-522a76a2440d"."activityrule" = 2;
-      "kwinrulesrc"."8c1ccf0b-abf4-4d24-a848-522a76a2440d"."wmclass" = "element";
-      "kwinrulesrc"."8c1ccf0b-abf4-4d24-a848-522a76a2440d"."wmclassmatch" = 1;
-      "kwinrulesrc"."General"."count" = 3;
-      "kwinrulesrc"."General"."rules" = "1,2,3";
-      "kwinrulesrc"."e75e010c-c094-4e6c-a98e-fe011e563466"."Description" = "org.telegram.desktop 的设置";
-      "kwinrulesrc"."e75e010c-c094-4e6c-a98e-fe011e563466"."activity" = "00000000-0000-0000-0000-000000000000";
-      "kwinrulesrc"."e75e010c-c094-4e6c-a98e-fe011e563466"."activityrule" = 2;
-      "kwinrulesrc"."e75e010c-c094-4e6c-a98e-fe011e563466"."wmclass" = "org.telegram.desktop";
-      "kwinrulesrc"."e75e010c-c094-4e6c-a98e-fe011e563466"."wmclassmatch" = 1;
-      "kxkbrc"."Layout"."DisplayNames" = "";
-      "kxkbrc"."Layout"."LayoutList" = "us";
-      "kxkbrc"."Layout"."Use" = true;
-      "kxkbrc"."Layout"."VariantList" = "";
-      "plasma-localerc"."Formats"."LANG" = "en_US.UTF-8";
-      "plasma-localerc"."Translations"."LANGUAGE" = "zh_CN";
-      "plasmanotifyrc"."Notifications"."PopupPosition" = "BottomRight";
-      "plasmarc"."Wallpapers"."usersWallpapers" = "/home/chn/Desktop/.桌面/twin_96734339_x2.png,/home/chn/Desktop/.桌面/E_yCTfDUUAgykjX_x8.jpeg,/home/chn/Desktop/.桌面/102692178_p0_[L1][x2.00].png,/home/chn/Desktop/.桌面/111392869_p0.png,/home/chn/Desktop/.桌面/HlszomyrfyxKLtpkVixEtikq_x4_chop.png";
-    };
-  };
-}
--- a/modules/users/chn/plasma/autostart/default.nix
+++ b/modules/users/chn/plasma/autostart/default.nix
@@ -0,0 +1,63 @@
+inputs:
+{
+  config = inputs.lib.mkIf inputs.config.nixos.system.gui.enable
+  {
+    home-manager.users.chn.config.home.file =
+      let
+        programs =
+        {
+          nheko =
+            let
+              drv = inputs.pkgs.writeTextDir "nheko.desktop" (builtins.replaceStrings
+                [ "Exec=nheko %u" ] [ "Exec=bash -c 'sleep 5 && nheko'" ]
+                (builtins.readFile "${inputs.pkgs.nheko}/share/applications/nheko.desktop"));
+            in "${drv}/nheko.desktop";
+          kclockd = "${inputs.pkgs.plasma5Packages.kdeGear.kclock}/etc/xdg/autostart/org.kde.kclockd-autostart.desktop";
+          yakuake = "${inputs.pkgs.yakuake}/share/applications/org.kde.yakuake.desktop";
+          telegram =
+            let
+              drv = inputs.pkgs.writeTextDir "org.telegram.desktop.desktop" (builtins.replaceStrings
+                [ "Exec=telegram-desktop -- %u" ] [ "Exec=bash -c 'sleep 5 && telegram-desktop -autostart'" ]
+                (builtins.readFile "${inputs.pkgs.telegram-desktop}/share/applications/org.telegram.desktop.desktop"));
+            in "${drv}/org.telegram.desktop.desktop";
+          element =
+            let
+              drv = inputs.pkgs.writeTextDir "element-desktop.desktop" (builtins.replaceStrings
+                [ "Exec=element-desktop %u" ] [ "Exec=element-desktop --hidden" ]
+                (builtins.readFile
+                  "${inputs.pkgs.element-desktop.desktopItem}/share/applications/element-desktop.desktop"));
+            in "${drv}/element-desktop.desktop";
+          # kmail = 
+          #   let
+          #     drv = inputs.pkgs.writeTextDir "org.kde.kmail2.desktop" (builtins.replaceStrings
+          #       [ "Exec=kmail -qwindowtitle %c %u" ] [ "Exec=bash -c 'sleep 5 && kmail -qwindowtitle'" ]
+          #       (builtins.readFile "${inputs.pkgs.kmail}/share/applications/org.kde.kmail2.desktop"));
+          #   in "${drv}/org.kde.kmail2.desktop";
+          kmail = "${inputs.pkgs.kmail}/share/applications/org.kde.kmail2.desktop";
+          discord =
+            let
+              drv = inputs.pkgs.writeTextDir "discord.desktop" (builtins.replaceStrings
+                [ "Exec=Discord" ] [ "Exec=Discord --start-minimized" ]
+                (builtins.readFile "${inputs.pkgs.discord.desktopItem}/share/applications/discord.desktop"));
+            in "${drv}/discord.desktop";
+        };
+        devices =
+        {
+          pc = [ "nheko" "kclockd" "yakuake" "telegram" "element" "kmail" "discord" ];
+          surface = [ "kclockd" "yakuake" "telegram" "element" ];
+        };
+      in builtins.listToAttrs (builtins.map
+        (file:
+        {
+          name = ".config/autostart/${builtins.baseNameOf (builtins.unsafeDiscardStringContext programs.${file})}";
+          value.source = programs.${file};
+        })
+        (devices.${inputs.config.nixos.system.networking.hostname} or []));
+    environment.persistence =
+      let impermanence = inputs.config.nixos.system.impermanence;
+      in inputs.lib.mkIf impermanence.enable
+      {
+        "${impermanence.root}".users.chn.directories = [ ".config/autostart" ];
+      };
+  };
+}
--- a/modules/users/chn/plasma/autostart/org.telegram.desktop.desktop
+++ b/modules/users/chn/plasma/autostart/org.telegram.desktop.desktop
@@ -0,0 +1,17 @@
+[Desktop Entry]
+Name=Telegram Desktop
+Comment=Official desktop version of Telegram messaging app
+TryExec=telegram-desktop
+Exec=bash -c "sleep 5 && telegram-desktop -autostart"
+Icon=telegram
+Terminal=false
+StartupWMClass=TelegramDesktop
+Type=Application
+Categories=Chat;Network;InstantMessaging;Qt;
+MimeType=x-scheme-handler/tg;
+Keywords=tg;chat;im;messaging;messenger;sms;tdesktop;
+Actions=quit;
+DBusActivatable=true
+SingleMainWindow=true
+X-GNOME-UsesNotifications=true
+X-GNOME-SingleWindow=true
--- a/modules/users/chn/plasma/default.nix
+++ b/modules/users/chn/plasma/default.nix
@@ -0,0 +1,94 @@
+inputs:
+{
+  imports = inputs.localLib.mkModules [ ./autostart ./wallpaper ./konsole.nix ./shortcuts.nix ./theme.nix ];
+  config = inputs.lib.mkIf inputs.config.nixos.system.gui.enable
+  {
+    home-manager.users.chn.config.programs.plasma = inputs.lib.mkMerge
+    [
+      # TODO: autostart, panel, discard user changed settings
+      # general
+      {
+        enable = true;
+        configFile.plasma-localerc = { Formats.LANG = "en_US.UTF-8"; Translations.LANGUAGE = "zh_CN"; };
+      }
+      # kwin
+      {
+        kwin.titlebarButtons.right = [ "help" "keep-below-windows" "keep-above-windows" "minimize" "maximize" "close" ];
+        windows.allowWindowsToRememberPositions = false;
+        configFile =
+        {
+          plasmanotifyrc.Notifications.PopupPosition = "BottomRight";
+          kwinrc =
+          {
+            Tiling.padding = 4;
+            Wayland."InputMethod[$e]" = "/run/current-system/sw/share/applications/org.fcitx.Fcitx5.desktop";
+            Windows.RollOverDesktops = true;
+            Compositing = { AllowTearing = false; WindowsBlockCompositing = false; };
+          };
+        };
+      }
+      # baloo
+      { configFile.baloofilerc."Basic Settings".Indexing-Enabled = false; }
+      # dolphin and file chooser
+      {
+        configFile =
+        {
+          dolphinrc =
+          {
+            General = { ShowFullPath = true; FilterBar = true; RememberOpenedTabs = false; };
+            PreviewSettings.Plugins = builtins.concatStringsSep ","
+            [
+              "blenderthumbnail"
+              "comicbookthumbnail"
+              "djvuthumbnail"
+              "ebookthumbnail"
+              "exrthumbnail"
+              "marble_thumbnail_geojson"
+              "marble_thumbnail_gpx"
+              "jpegthumbnail"
+              "marble_thumbnail_kmz"
+              "marble_thumbnail_kml"
+              "kraorathumbnail"
+              "windowsimagethumbnail"
+              "windowsexethumbnail"
+              "mltpreview"
+              "mobithumbnail"
+              "opendocumentthumbnail"
+              "marble_thumbnail_osm"
+              "palathumbcreator"
+              "gsthumbnail"
+              "rawthumbnail"
+              "svgthumbnail"
+              "imagethumbnail"
+              "fontthumbnail"
+              "directorythumbnail"
+              "textthumbnail"
+              "webarchivethumbnail"
+              "ffmpegthumbs"
+              "audiothumbnail"
+            ];
+          };
+          kdeglobals."KFileDialog Settings" =
+          {
+            "Allow Expansion" = true;
+            "Automatically select filename extension" = true;
+            "Show Bookmarks" = true;
+            "Show Full Path" = true;
+            "Show Inline Previews" = true;
+            "Show Preview" = true;
+            "Show Speedbar" = true;
+            "Show hidden files" = true;
+            "Sort by" = "Name";
+            "Sort directories first" = true;
+            "Sort hidden files last" = true;
+            "View Style" = "DetailTree";
+          };
+        };
+      }
+      # krunner
+      { configFile.krunnerrc = { General.FreeFloating = true; Plugins.baloosearchEnabled = false; }; }
+      # lock screen
+      { configFile.kscreenlockerrc.Daemon.Autolock = false; }
+    ];
+  };
+}
--- a/modules/users/chn/plasma/konsole.nix
+++ b/modules/users/chn/plasma/konsole.nix
@@ -0,0 +1,81 @@
+inputs:
+{
+  config = inputs.lib.mkIf inputs.config.nixos.system.gui.enable
+  {
+    home-manager.users.chn.config =
+    {
+      programs.plasma =
+      {
+        overrideConfig = true;
+        overrideConfigFiles = [ "konsolerc" "yakuakerc" ];
+        configFile =
+        {
+          yakuakerc =
+          {
+            Appearance =
+            {
+              HideSkinBorders = true;
+              Skin = "Slate";
+              Translucency = true;
+            };
+            "Desktop Entry".DefaultProfile = "plasma-manager.profile";
+            Dialogs.FirstRun = false;
+            Window =
+            {
+              KeepOpen = false;
+              KeepOpenAfterLastSessionCloses = true;
+              ShowSystrayIcon = false;
+            };
+          };
+          konsolerc =
+          {
+            "Desktop Entry".DefaultProfile = "plasma-manager.profile";
+            "MainWindow.Toolbar sessionToolbar".ToolButtonStyle = "IconOnly";
+          };
+        };
+        dataFile."konsole/plasma-manager.profile" =
+        {
+          Appearance =
+          {
+            AntiAliasFonts = true;
+            BoldIntense = true;
+            ColorScheme = "Breeze";
+            Font = "FiraCode Nerd Font Mono,10,-1,5,50,0,0,0,0,0";
+            UseFontLineChararacters = true;
+            WordModeAttr = false;
+          };
+          "Cursor Options".CursorShape = 1;
+          General =
+          {
+            Name = "plasma-manager";
+            Parent = "FALLBACK/";
+            TerminalCenter = true;
+            TerminalMargin = 1;
+          };
+          "Interaction Options" =
+          {
+            AutoCopySelectedText = true;
+            TrimLeadingSpacesInSelectedText = true;
+            TrimTrailingSpacesInSelectedText = true;
+            UnderlineFilesEnabled = true;
+          };
+          Scrolling =
+          {
+            HistoryMode = 2;
+            ReflowLines = false;
+          };
+          "Terminal Features".BlinkingCursorEnabled = true;
+        };
+      };
+      home.file.".local/share/konsole/Breeze.colorscheme".text = builtins.replaceStrings
+        [ "Opacity=1" ] [ "Opacity=0.9\nBlur=true" ]
+        (builtins.readFile "${inputs.pkgs.konsole}/share/konsole/Breeze.colorscheme");
+    };
+    environment.persistence =
+      let impermanence = inputs.config.nixos.system.impermanence;
+      in inputs.lib.mkIf impermanence.enable
+      {
+        "${impermanence.root}".users.chn.directories = [ ".local/share/konsole" ".local/share/yakuake" ];
+      };
+  };
+}
--- a/modules/users/chn/plasma/shortcuts.nix
+++ b/modules/users/chn/plasma/shortcuts.nix
@@ -0,0 +1,102 @@
+inputs:
+{
+  config = inputs.lib.mkIf inputs.config.nixos.system.gui.enable
+  {
+    home-manager.users.chn.config.programs.plasma =
+    {
+      spectacle.shortcuts.captureRectangularRegion = "Print";
+      shortcuts = inputs.lib.mkMerge
+      [
+        # firefox
+        { "firefox.desktop"._launch = "Meta+B"; }
+        # crow translate
+        { "io.crow_translate.CrowTranslate.desktop".TranslateSelectedText = "Ctrl+Alt+E"; }
+        # display
+        {
+          kded5.display = [ "Display" "Meta+P" ];
+          kwin = { view_actual_size = "Meta+0"; view_zoom_in = [ "Meta++" "Meta+=" ]; view_zoom_out = "Meta+-"; };
+          org_kde_powerdevil =
+          {
+            "Decrease Screen Brightness" = "Monitor Brightness Down";
+            "Increase Screen Brightness" = "Monitor Brightness Up";
+          };
+        }
+        # volume
+        {
+          kmix =
+          {
+            decrease_volume = "Volume Down";
+            increase_volume = "Volume Up";
+            mic_mute = [ "Meta+Volume Mute" ];
+            mute = "Volume Mute";
+          };
+        }
+        # session
+        {
+          ksmserver = { "Lock Session" = [ "Meta+L" "Screensaver" ]; "Log Out" = "Ctrl+Alt+Del"; };
+          org_kde_powerdevil."Turn Off Screen" = "Meta+Ctrl+L";
+        }
+        # window
+        {
+          kwin =
+          {
+            ExposeAll = "Meta+Tab";
+            "Show Desktop" = "Meta+D";
+            "Suspend Compositing" = "Alt+Shift+F12";
+            "Walk Through Windows" = "Alt+Tab";
+            "Walk Through Windows (Reverse)" = "Alt+Shift+Backtab";
+            "Window Above Other Windows" = "Meta+Shift+PgUp";
+            "Window Below Other Windows" = "Meta+Shift+PgDown";
+            "Window Close" = "Alt+F4";
+            "Window Maximize" = "Meta+PgUp";
+            "Window Minimize" = "Meta+PgDown";
+            "Window Operations Menu" = "Alt+F3";
+            "Window Quick Tile Bottom" = "Meta+Down";
+            "Window Quick Tile Left" = "Meta+Left";
+            "Window Quick Tile Right" = "Meta+Right";
+            "Window Quick Tile Top" = "Meta+Up";
+          };
+        }
+        # virtual desktop
+        {
+          kwin =
+          {
+            "Switch One Desktop Down" = "Meta+Ctrl+Down";
+            "Switch One Desktop Up" = "Meta+Ctrl+Up";
+            "Switch One Desktop to the Left" = "Meta+Ctrl+Left";
+            "Switch One Desktop to the Right" = "Meta+Ctrl+Right";
+            "Window One Desktop Down" = "Meta+Ctrl+Shift+Down";
+            "Window One Desktop Up" = "Meta+Ctrl+Shift+Up";
+            "Window One Desktop to the Left" = "Meta+Ctrl+Shift+Left";
+            "Window One Desktop to the Right" = "Meta+Ctrl+Shift+Right";
+          };
+        }
+        # media
+        {
+          mediacontrol =
+          {
+            nextmedia = "Media Next";
+            pausemedia = "Media Pause";
+            playpausemedia = [ "Pause" "Media Play" ];
+            previousmedia = "Media Previous";
+            stopmedia = "Media Stop";
+          };
+        }
+        # dolphin
+        { "org.kde.dolphin.desktop"._launch = "Meta+E"; }
+        # konsole
+        { "org.kde.konsole.desktop"._launch = "Ctrl+Alt+T"; }
+        # krunner
+        { "org.kde.krunner.desktop"._launch = "Alt+Space"; }
+        # settings
+        { "systemsettings.desktop"._launch = "Meta+I"; }
+        # yakuake
+        { yakuake.toggle-window-state = "Meta+Space"; }
+        # virt-manager
+        { "virt-manager.desktop"._launch = "Meta+V"; }
+        # system monitor
+        { "org.kde.plasma-systemmonitor.desktop"._launch = "Meta+Esc"; }
+      ];
+    };
+  };
+}
--- a/modules/users/chn/plasma/theme.nix
+++ b/modules/users/chn/plasma/theme.nix
@@ -0,0 +1,36 @@
+inputs:
+{
+  config = inputs.lib.mkIf inputs.config.nixos.system.gui.enable
+  {
+    home-manager.users.chn.config.programs.plasma =
+    {
+      workspace =
+      {
+        theme = "Fluent-round-light";
+        colorScheme = "FluentLight";
+        cursorTheme = "Breeze_Snow";
+        lookAndFeel = "com.github.vinceliuice.Fluent-round-light";
+        iconTheme = "Tela-circle";
+      };
+      configFile =
+      {
+        kdeglobals.KDE.widgetStyle = "kvantum";
+        "Kvantum/kvantum.kvconfig".General.theme = "Fluent-round";
+        kwinrc =
+        {
+          Effect-blur.BlurStrength = 10;
+          Effect-kwin4_effect_translucency.MoveResize = 75;
+          Effect-wobblywindows = { AdvancedMode = true; Drag = 85; Stiffness = 10; WobblynessLevel = 1; };
+          Plugins =
+          {
+            blurEnabled = true;
+            kwin4_effect_dimscreenEnabled = true;
+            kwin4_effect_translucencyEnabled = true;
+            padding = 4;
+            wobblywindowsEnabled = true;
+          };
+        };
+      };
+    };
+  };
+}
--- a/modules/users/chn/plasma/wallpaper/default.nix
+++ b/modules/users/chn/plasma/wallpaper/default.nix
@@ -0,0 +1,13 @@
+inputs:
+{
+  config.home-manager.users.chn.config.programs.plasma.configFile =
+    let wallpaper = "${./pixiv-96734339-x2.png}"; in
+    {
+      "plasma-org.kde.plasma.desktop-appletsrc" =
+      {
+        "Containments.1".wallpaperplugin = "a2n.blur";
+        "Containments.1.Wallpaper.a2n\\.blur.General".Image = wallpaper;
+      };
+      kscreenlockerrc."Greeter.Wallpaper.org\\.kde\\.image.General" = { Image = wallpaper; PreviewImage = wallpaper; };
+    };
+}
--- a/modules/users/chn/plasma/wallpaper/fanbox-5405326-x4-chop.png
+++ b/modules/users/chn/plasma/wallpaper/fanbox-5405326-x4-chop.png
--- a/modules/users/chn/plasma/wallpaper/pixiv-96734339-x2.png
+++ b/modules/users/chn/plasma/wallpaper/pixiv-96734339-x2.png
--- a/modules/virtualization/default.nix
+++ b/modules/virtualization/default.nix
@@ -37,7 +37,9 @@ inputs:
            setSocketVariable = true;
            daemon.settings = { features.buildkit = true; dns = [ "1.1.1.1" ]; storage-driver = "overlay2"; };
          };
-          enableNvidia = builtins.elem "nvidia" inputs.config.nixos.hardware.gpus;
+          enableNvidia =
+            let gpu = inputs.config.nixos.hardware.gpu.type;
+            in inputs.lib.mkIf (gpu != null && inputs.lib.strings.hasInfix "nvidia" gpu) true;
          storageDriver = "overlay2";
        };
        nixos.services.firewall.trustedInterfaces = [ "docker0" ];
--- a/secrets/surface/default.yaml
+++ b/secrets/surface/default.yaml
@@ -1,5 +1,5 @@
 xray-client:
-    uuid: ENC[AES256_GCM,data:WQUDaTeOsY61st6HQKjGKuVoQIy6Gpf0dMzJeIqMUV/4sihj,iv:R6IZzIAmn7rknxD5HWGRE618pdUyEWB0F2tO9+EfunI=,tag:u+50NAK8LwzyUNt0GVyabw==,type:str]
+    uuid: ENC[AES256_GCM,data:WEBAH3PQM5ahNpH/kvTtcjcJ2GllmmRlBR2oclG6AimGenSg,iv:TMp0WTOe9fuELSZoVGenl5XSZUFoiYUBEMWMn4NFv1g=,tag:GJTE0EELcZkrnGAKLYer1g==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -9,23 +9,23 @@ sops:
        - recipient: age19ax6vm3pv8rph5tq3mmehd9sy9jk823tw8svsd790r0lkslycquqvlwz9m
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaTmlZdld6eWtrZzVTR1Fs
-            RXhTczRsOVNrMWIyWm9ud1lzYVJUbGJnc2drCmVKTHlVNXFZUTh5bmlncHA1MmlE
-            UnovM0tONHBHTkY4TS9FRmRkRFkrcjgKLS0tIGxxbzV4Z09CdWkyY3d1MFBNL2dO
-            MGFMaGM3WW5LRXd1T2ZPTkpBdWRTR00Ktnuqblw4rS9fXb2CTzY7BjpDK6K1wx97
-            tV1FeuKcEXpp8AMKOdbKTOznnolI4sTnz2l0iP1m7bk6f9PGNjyQhw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzV1pvWkVGSFg5TVAvRlhu
+            TnFnMEszcDRWWHlQanAyRkRpQWdqQkdhTzFvCjBqUG4xNFBiRnlSeTNQSmdkVkdD
+            UlVCQjRFVExuZHdrSnViajZGZ3c2dWsKLS0tIHlQYU5VeGpEQzllMmxLSnJZZzZx
+            N1R3Mkhxa0dOVlJiU0V2OEZVVzZVMFkKae3c1axl22uxh9wMygAHs6q1WA5ImOS8
+            uzKSthWSqtC7DMqgUFaaSjBYM2TN3l402syx71xVFyyAmCcGZbbJcg==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1qrea4twxdhd7fnvlq5v45528c90qy6hp2wa55kghsxzgut6n6fxs7w6u42
+        - recipient: age1ck5vzs0xqx0jplmuksrkh45xwmkm2t05m2wyq5k2w2mnkmn79fxs6tvl3l
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaQkxFc1U2R2RndVRHcisv
-            ZGg0VXhDYnpsQVV0Q3habXRiSHhTVTVUOUZ3CkFMUTMzL3NFcHpwaklZZStIYktW
-            WUpwWi9xQ3MyNXl1aVREcC9KeFlsWE0KLS0tIEJVR1VFRHNBSVVaVlJsNFJtWXAv
-            YmphYnp4YTQyV0VrT0h4RlNSRVptbkEKao+OYKlwgLcbMe75+RcdlxmYtvgheqp2
-            SwEhhlV8QNWylkOU+S38C3+oiQqlPZQkwOyBMfB5eoTUM8xCLjf1og==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCSHJVRGIwQUFpVER5SWxq
+            YjJOT0lXN3dFOFpjMFlWV3JCbmZFN0hnNEJBClpQUEczK2RWTGlVTmJRbVZaUC8y
+            bEFrL1RjTTNlYVNnRVRBZlRjaTlnUEEKLS0tIE5GM01pTGFFcWVVSWEvUHE3Z08r
+            a2xybTRFUFZZN20zajZJTVNwVEpGcEEKglmFMk7z1q5IlZ+lZf9M0HtknmvcYt/P
+            2/z5e8wLN1Hy0Zsbv0yIL/NmqwxAOGJOdzz7ElJszk/Y4kUr9aRasg==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-08-20T18:23:21Z"
-    mac: ENC[AES256_GCM,data:Dn2yxA/8GjPpmI5oWybiv0JNiiHDbleTtYZaM7GTMStP15N4Yo1tzVqlfzy6QWdLvcyZtoodamnry9yj+A7dP1sj0Fgkiq2FnzIp+JuJXkKH7AYWKugOmzKz7Kky2SEDU2r1UoucIbW9SRbgyukXPLpGRUGqIZNLR6OZ3w0atTA=,iv:sKyg1opbnQsQs/ZteTjEyarFU/HgmSSe+Frmvwfpylk=,tag:Sc6z4SnXOxICQ+TN7C6ZVA==,type:str]
+    lastmodified: "2024-01-17T08:21:40Z"
+    mac: ENC[AES256_GCM,data:8+nUsgM47gMZmCQwPgqzM95UuYgF3UStE+XiOPPaed/VIk9e2fNLu9vR+wEgb04pR29BQTWV0qx7xqF/IzFbMYLfujgfDQoOf5pTFi5E6WTFp/MDlq8DSwxJqegEvshoAcRMt2Ur8VKbEZ/ya+yZipEZBPyGHkvi0kS8AOULbb8=,iv:txSZzGGtMVMwi1ogcAJdNqm0bb8so0RVJvkbu0QMHT4=,tag:6TQ7LYfoOrCTPMBAPQqwyg==,type:str]
    pgp: []
    unencrypted_suffix: _unencrypted
-    version: 3.7.3
+    version: 3.8.1
Author	SHA1	Message	Date
chn	983decc8c1	packages.firefox: switch to lepton	2024-02-16 15:32:26 +08:00
chn	7d584a6563	hardware.gpu: fix	2024-02-16 15:01:24 +08:00
chn	7f8f65649b	system.nix: increase max-jobs and max-substitution-jobs	2024-02-16 12:37:01 +08:00
chn	390c24aea9	devices.pc: reload mt7921e on resume	2024-02-16 12:36:23 +08:00
chn	98e75a2ab4	virtualization.docker: fix	2024-02-16 11:39:37 +08:00
chn	7c161d3521	devices.pc: use xcalib to load color profile	2024-02-16 10:50:12 +08:00
chn	7cb4c6ecec	devices.pc: try to use colord	2024-02-16 10:48:24 +08:00
chn	aef16e54f1	devices.pc: add specialisation for nvidia graphic card	2024-02-16 10:04:07 +08:00
chn	536a96ce5e	hardware.gpu: fix	2024-02-16 09:44:14 +08:00
chn	a94d6e3d21	devices.pc: switch to amd+nvidia	2024-02-15 23:20:56 +08:00
chn	0e09b925c2	hardware.gpu: rewrite	2024-02-15 23:17:20 +08:00
chn	9d1fae10d8	hardware: update nvidia driver	2024-02-15 20:28:51 +08:00
chn	ef1caae121	hardware: use default nvidia driver	2024-02-15 19:55:41 +08:00
chn	6d70eecc19	system.kernel: fix for surface	2024-02-15 19:38:33 +08:00
chn	1e42238723	system.kernel: update to 6.7	2024-02-15 19:38:17 +08:00
chn	fe089060ae	Revert "add todo" This reverts commit `54bfa1c8ac`.	2024-02-15 16:54:57 +08:00
chn	8a5bb908c7	devices.nas: disable snapper	2024-02-15 16:17:16 +08:00
chn	54bfa1c8ac	add todo	2024-02-15 16:16:40 +08:00
chn	54493a2ec6	users.chn.plasma: fix kwin shortcuts	2024-02-15 15:53:57 +08:00
chn	f1218571c5	fix build	2024-02-15 15:40:21 +08:00
chn	aecc530aa9	packages.firefox: fix cascade UI	2024-02-15 15:28:21 +08:00
chn	c43187a15c	fix build	2024-02-15 15:27:39 +08:00
chn	86a781b327	packages.firefox: add grammarly	2024-02-12 18:39:05 +08:00
chn	0424d7eed7	users.chn.plasma.wallpaper: fix	2024-02-12 18:23:11 +08:00
chn	78a74a5aef	users.chn.plasma.shortcuts: add shortcut for system monitor	2024-02-12 14:16:24 +08:00
chn	a4c04c9de2	devices.nas: use desktop-fat package set	2024-02-12 14:12:15 +08:00
chn	aad44c7edd	users.chn.plasma.autostart: fix	2024-02-12 13:40:40 +08:00
chn	2a7e8d78be	Revert "vps7: disable gui" This reverts commit `bffed3b584`.	2024-02-12 13:39:37 +08:00
chn	8b90c0bc22	Revert "nas: disable gui" This reverts commit `08df40f3a3`.	2024-02-12 13:39:26 +08:00
chn	6f533e73ee	packages.desktop: enable yubikey-touch-detector	2024-02-12 13:36:55 +08:00
chn	244b0e17fa	users.chn.plasma.autostart: fix	2024-02-12 11:59:42 +08:00
chn	7f165fccf4	users.chn.plasma.autostart: add kmail and discord	2024-02-12 11:27:48 +08:00
chn	40f4d35b62	users.chn.plasma.autostart: add element	2024-02-12 11:09:26 +08:00
chn	02981d242f	users.chn.plasma.autostart: init	2024-02-12 10:17:28 +08:00
chn	6a36fe0539	users.chn.plasma: split config	2024-02-12 10:04:56 +08:00
chn	45e5569d55	packages.firefox: force write profile.ini	2024-02-12 09:19:09 +08:00
chn	a9027c6127	Merge branch 'firefox' into production	2024-02-12 08:28:37 +08:00
chn	67079b0885	packages.firefox: add dualsub, pakkujs, rsspreview	2024-02-12 08:28:17 +08:00
chn	3384026e91	users.chn.plasma: use tela icon	2024-02-12 00:05:58 +08:00
chn	803b20ec96	users.chn.plasma: switch back to black background	2024-02-11 23:47:56 +08:00
chn	074f88d231	users.chn.konsole: fix opacity	2024-02-11 23:22:10 +08:00
chn	fd7fe508f5	localPackages.blurred-wallpaper: fix	2024-02-11 22:57:59 +08:00
chn	cf6a66f11e	users.chn.plasma: fix	2024-02-11 22:45:59 +08:00
chn	c4c2e680a4	packages.firefox: do not use catppuccin	2024-02-11 22:23:02 +08:00
chn	bf16cc5593	packages.desktop.firefox: use catppucin color	2024-02-11 22:08:43 +08:00
chn	5d473887a3	Merge branch 'production' into firefox	2024-02-11 21:56:44 +08:00
chn	773b2e8cc1	users.chn.plasma: add impermanence	2024-02-11 21:53:12 +08:00
chn	c9cfbb515b	users.chn.plasma: add yakuake and konsole	2024-02-11 21:41:43 +08:00
chn	82e2cd4e7d	system.impermanence: do not persist fontconfig	2024-02-11 17:27:15 +08:00
chn	794657d0ea	packages.desktop.firefox: add firefox-color	2024-02-11 17:26:24 +08:00
chn	4f621ce7f1	fix wallpaper	2024-02-11 17:17:24 +08:00
chn	4ebff80941	services.fontconfig: force set font config	2024-02-11 16:59:43 +08:00
chn	6080de15ca	users.chn.wallpaper: use blurred-wallpaper package	2024-02-11 16:45:51 +08:00
chn	2310289c92	packages.desktop.firefox: enable language packs	2024-02-11 11:59:31 +08:00
chn	ef30e0f6dc	packages.desktop.firefox: force set search engine	2024-02-11 11:32:22 +08:00
chn	e26e287603	packages.default.firefox: add zotero-connector	2024-02-11 11:26:42 +08:00
chn	f9227c3e85	packages.desktop.firefox: add some settings	2024-02-11 09:55:40 +08:00
chn	264be067ca	packages.desktop.firefox: add user chrome	2024-02-10 11:21:49 +08:00
chn	047619ee17	packages.desktop.firefox: init	2024-02-10 10:53:57 +08:00
chn	fc6cbc6230	do not set wallpaper	2024-02-09 21:48:12 +08:00
chn	056f38dbf5	devices.pc: fix xcalib startup script	2024-02-09 21:32:12 +08:00
chn	61d7db84ba	direct add wallpaper to flake	2024-02-09 21:24:20 +08:00
chn	6672ea7f4f	plasma-manager: init	2024-02-09 17:05:34 +08:00
chn	4aead6cfc6	fix build	2024-02-09 12:38:12 +08:00
chn	139722dfdf	fix waydroid	2024-02-09 12:12:58 +08:00
chn	ac85049d0f	fix zip	2024-02-08 23:01:08 +08:00
chn	f5f71bee21	localPackages.win11os-kde: init	2024-02-05 18:18:10 +08:00
chn	08af6615af	update plasma-manager	2024-02-05 11:45:56 +08:00
chn	a07800192d	system.gurb: fix efishell	2024-02-04 11:37:36 +08:00
chn	13b0c77e7a	do not archive	2024-02-04 11:13:34 +08:00
chn	43e8215fc6	Merge branch 'main' into production	2024-02-03 20:52:43 +08:00
chn	abdf3f5f0b	vps7: disable mastodon	2024-02-03 20:52:16 +08:00
chn	9b41ebd154	Revert "services.mastodon: security update to 4.2.5" This reverts commit `3a60acebb5`.	2024-02-03 20:51:55 +08:00
chn	21e8b5300a	switch to production	2024-02-03 20:49:59 +08:00
chn	6967ab4839	Revert "switch to production build" This reverts commit `2fe4fb2a25`.	2024-02-03 20:45:25 +08:00
chn	3a60acebb5	services.mastodon: security update to 4.2.5	2024-02-03 20:39:47 +08:00
chn	26f0b20684	fix build for silvermont	2024-02-03 19:21:34 +08:00
chn	2fe4fb2a25	switch to production build	2024-02-03 19:14:42 +08:00
chn	641fd3bb97	fix vps7 build	2024-02-03 10:56:07 +08:00
chn	d37e47ff40	system.grub: fix efi shell	2024-02-02 23:39:12 +08:00
chn	67d3cac7a1	packages.server: add dmidecode	2024-02-01 14:32:23 +08:00
chn	3ffdf466bb	system.grub: add efi shell	2024-02-01 13:56:09 +08:00
chn	c89af3fa52	system.grub: rewrite	2024-02-01 12:30:01 +08:00
chn	817613ea96	system.envfs: fix	2024-02-01 11:09:11 +08:00
chn	236ddddffc	rewrite system.nix	2024-02-01 10:55:47 +08:00
chn	c08fd457cb	system.nix: keepOutputs -> includeBuildDependencies	2024-02-01 10:43:54 +08:00
chn	a577616756	system.nix: autoOptimiseStore = false by default	2024-02-01 10:39:27 +08:00
chn	9e43844e14	system.impermanence: enable by default	2024-02-01 10:05:02 +08:00
chn	81521bcd3b	system: add envfs	2024-02-01 10:03:15 +08:00
chn	e2674908fb	packages.desktop: fix xclip	2024-02-01 09:56:30 +08:00
chn	7d43e6218d	localPackages: fix mirism	2024-02-01 09:30:37 +08:00
chn	41552e2ea1	pc: envfs use upstream	2024-02-01 00:30:11 +08:00
chn	268c5bdf3a	pc: enable envfs	2024-02-01 00:05:04 +08:00
chn	500d4ac79e	整理了一些plasma的配置	2024-01-31 22:49:30 +08:00
chn	d0603c5977	fix surface build	2024-01-31 22:05:18 +08:00
chn	a5fdf1ea1d	pc: do not include build dependencies	2024-01-31 21:14:21 +08:00
chn	8774a6759a	packages.workstation: add yuzu	2024-01-31 15:21:22 +08:00
chn	d354b555eb	Revert "pc: enable envfs" This reverts commit `3a96911336`.	2024-01-30 20:21:35 +08:00
chn	3a96911336	pc: enable envfs	2024-01-30 19:34:10 +08:00
chn	08df40f3a3	nas: disable gui	2024-01-30 19:22:25 +08:00
chn	bffed3b584	vps7: disable gui	2024-01-30 19:21:36 +08:00
chn	c29eb53ee0	Revert "Revert "pc: include all build dependencies"" This reverts commit `fbc6d5bee1`.	2024-01-30 13:34:54 +08:00
chn	42119af04d	fix pc build	2024-01-30 11:46:06 +08:00
chn	9d5772ab1f	Merge branch 'main' into next	2024-01-30 11:41:04 +08:00
chn	fbc6d5bee1	Revert "pc: include all build dependencies" This reverts commit `9f9e58e54e`.	2024-01-29 21:34:40 +08:00
chn	9f9e58e54e	pc: include all build dependencies	2024-01-29 18:45:48 +08:00
chn	dc297d0d04	pc: enable snapper	2024-01-29 14:48:58 +08:00
chn	b59dc1b213	services.xray: do not bypass nvidia	2024-01-29 11:07:05 +08:00
chn	853aaf8183	system.nix: set max-jobs & max-substitution-jobs	2024-01-28 19:02:34 +08:00
chn	795acc3828	system.nix: limit max-substitution-jobs	2024-01-27 18:38:28 +08:00
chn	7cf371e78c	system.grub: enable memtest86	2024-01-27 18:36:51 +08:00
chn	39fde66754	pc: enable beesd	2024-01-26 16:00:12 +08:00
chn	7a881491bd	pc: do not autoOptimiseStore	2024-01-26 15:56:49 +08:00
chn	8e7c615b02	pc: disable beesd and snapper	2024-01-24 08:59:54 +08:00
chn	dbc6874ead	update everything	2024-01-23 15:31:49 +08:00
chn	1a2f725a8e	localPackages: zpp-bits use flake inputs	2024-01-22 21:11:00 +08:00
chn	0665f57988	pc: setup color profile	2024-01-22 10:54:31 +08:00
chn	15a9f0c05e	packages.desktop: add xcalib	2024-01-22 10:50:36 +08:00
chn	82d834e93a	pc: add color profiles	2024-01-22 00:52:49 +08:00
chn	c4cccacba3	packages.desktop: add argyllcms	2024-01-22 00:30:53 +08:00
chn	753709d494	pc: disable colord	2024-01-22 00:28:13 +08:00
chn	173d83daae	localPackage.rsshub: use flake inputs	2024-01-21 23:45:43 +08:00
chn	cbe228c873	surface: enable waydroid	2024-01-21 18:14:11 +08:00
chn	eb2ab49388	packages: move some package from workstation to desktop-fat	2024-01-20 11:42:41 +08:00
chn	3fd0988582	surface: add maliit	2024-01-20 11:36:26 +08:00
chn	de3b40360b	surface: enable iptsd	2024-01-20 11:10:27 +08:00
chn	bb9a1bfb68	Revert "surface: remove patch from nixos-hardware" This reverts commit `9d8442b1cf`.	2024-01-20 11:10:13 +08:00
chn	9d8442b1cf	surface: remove patch from nixos-hardware	2024-01-20 10:04:00 +08:00
chn	26150244cb	update aagl	2024-01-19 23:50:47 +08:00
chn	914eea92b6	services.wireguard: fix	2024-01-19 19:45:56 +08:00
chn	b2532ef44d	services.xray: rename	2024-01-19 19:08:28 +08:00
chn	b600c81aa7	system.nix: comma use upstream nixpkgs-unstable	2024-01-19 10:39:08 +08:00
chn	01a5c290bc	surface: enable swap	2024-01-18 22:38:29 +08:00
chn	16c9fa7c3d	surface: disable iptsd	2024-01-18 22:12:28 +08:00
chn	9bf3faee63	system.gui: fix	2024-01-18 21:40:51 +08:00
chn	e1789991c4	allow deploy to surface	2024-01-18 21:38:11 +08:00
chn	3cbfe14cc2	system.gui: use wayland as default	2024-01-18 21:20:56 +08:00
chn	2df6396b84	localPackages.typora: update	2024-01-18 15:11:17 +08:00
chn	ce44fe7856	localPackages.misskey: use flake input	2024-01-18 14:45:50 +08:00
chn	de292de159	system: less log	2024-01-18 11:39:09 +08:00
chn	81b6831e1b	do not blacklist module ideapad_laptop	2024-01-18 10:18:01 +08:00
chn	bd445d5034	surface: adjust	2024-01-17 16:22:07 +08:00
chn	0ca6df2499	nixos-hardware use upstream repo	2024-01-17 15:10:03 +08:00
chn	00d010a910	surface: fix kernel	2024-01-17 15:07:42 +08:00
				`@@ -0,0 +1 @@`
				ssh-rsa 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