todo

README.md

@@ -7,5 +7,12 @@
 - `thinkpad` - Thinkpad T480, i5 8350U, 16GB RAM, 256GB NVME
 - `homelab` - i7 8700T, 32GB RAM, 512GB NVME, 1TB 2.5" SATA
 
+## Todo
+- Automatic backups to external drives.
+- Better documentation and code structure.
+- Use NixOS modules system. 
+
 ## Credits
 - [orangc's flake](https://git.orangc.net/c/dots)
+- [vimjoyer's tutorials](https://www.youtube.com/@vimjoyer)
+- [wallpaper source](https://github.com/er2de2/catppuccin_walls/blob/master/wallpapers_png/autumn_2.0.png)

modules/hardware/misc/battery-power.nix

@@ -17,8 +17,10 @@
           BAT_PCT=`${pkgs.acpi}/bin/acpi -b | ${pkgs.gnugrep}/bin/grep -P -o '[0-9]+(?=%)'`
           BAT_STA=`${pkgs.acpi}/bin/acpi -b | ${pkgs.gnugrep}/bin/grep -P -o '\w+(?=,)'`
           echo "`date` battery status:$BAT_STA percentage:$BAT_PCT"
-          test $BAT_PCT -le 30 && test $BAT_PCT -gt 15 && test $BAT_STA = "Discharging" && DISPLAY=:0.0 ${pkgs.libnotify}/bin/notify-send "Low Battery" "Battery remaining: $BAT_PCT%."
+          export DISPLAY=:0
-          test $BAT_PCT -le 15                         && test $BAT_STA = "Discharging" && DISPLAY=:0.0 ${pkgs.libnotify}/bin/notify-send -u critical "Low Battery" "Shutdown at 10%."
+          export DBUS_SESSION_BUS_ADDRESS=unix:path=/run/user/$(id -u)/bus
+          test $BAT_PCT -le 30 && test $BAT_PCT -gt 15 && test $BAT_STA = "Discharging" && ${pkgs.libnotify}/bin/notify-send "Low Battery" "Battery remaining: $BAT_PCT%."
+          test $BAT_PCT -le 15                         && test $BAT_STA = "Discharging" && ${pkgs.libnotify}/bin/notify-send -u critical "Low Battery" "Shutdown at 10%."
         ''} > /tmp/cron.batt.log 2>&1"
       ];
     };

modules/home/core/cli.nix

@@ -49,10 +49,20 @@
       initLua = ''
         vim.opt.clipboard = "unnamedplus"
         vim.opt.termguicolors = true
+        vim.g.clipboard = {
+          name = "OSC 52",
+          copy = {
+            ["+"] = require("vim.ui.clipboard.osc52").copy("+"),
+            ["*"] = require("vim.ui.clipboard.osc52").copy("*"),
+          },
+          paste = {
+            ["+"] = require("vim.ui.clipboard.osc52").paste("+"),
+            ["*"] = require("vim.ui.clipboard.osc52").paste("*"),
+          },
+        }
         require("nvim-tree").setup()
         vim.api.nvim_create_autocmd("VimEnter", {
           callback = function()
-            -- vim.cmd("NvimTreeOpen")
             vim.cmd("set nu")
             vim.cmd.wincmd 'p'
           end,

modules/home/core/shell.nix

@@ -37,9 +37,9 @@
         "cd" = "z";
 
         "sys" = "sudo systemctl --runtime";
-        "sys-log" = "journalctl -f -b -u";
+        "sys-log" = "journalctl -o cat -f -b -u";
         "user" = "systemctl --user --runtime";
-        "user-log" = "journalctl -f -b --user-unit";
+        "user-log" = "journalctl -o cat -f -b --user-unit";
 
         "ts" = "sudo tailscale";
         "tsip" = "tailscale ip -4";

modules/system/homelab/dash.nix

@@ -89,6 +89,101 @@ in {
       };
 
       pages = [
+        {
+          name = "Dashboard";
+          show-mobile-header = true;
+          width = "slim";
+          columns = [
+            {
+              size = "small";
+              widgets = [
+                {
+                  type = "monitor";
+                  title = "Critical Systems";
+                  cache = "15s";
+                  style = "compact";
+                  show-failing-only = true;
+                  sites = map (e: {
+                    same-tab = true;
+                    allow-insecure = true;
+                    title = builtins.elemAt e 0;
+                    url = builtins.elemAt e 1;
+                  }) monitor;
+                }
+                {
+                  type = "dns-stats";
+                  title = "DNS Stats";
+                  service = "adguard";
+                  url = "http://localhost:8088/";
+                  hour-format = "12h";
+                }
+                {
+                  type = "bookmarks";
+                  groups = [
+                    {
+                      links = [{
+                        same-tab = true;
+                        title = "NixFlake";
+                        icon = "si:nixos";
+                        url = "https://flake.satr14.my.id";
+                      }];
+                    }
+                    {
+                      links = map (e: {
+                        same-tab = true;
+                        title = builtins.elemAt e 0;
+                        icon = "si:${builtins.elemAt e 1}";
+                        url = builtins.elemAt e 2;
+                        alt-status-codes = [ 401 ];
+                      }) bookmarks;
+                    }
+                  ];
+                }
+                {
+                  type = "to-do";
+                  id = "tasks";
+                }
+              ];
+            }
+            {
+              size = "full";
+              widgets = [
+                {
+                  type = "server-stats";
+                  servers = [{
+                    type = "local";
+                    mountpoints = {
+                      "/boot".hide = true;
+                      "/nix/store".hide = true;
+                      "/var/lib/vaultwarden".hide = true;
+                      "/var/lib/private/cryptpad".hide = true;
+                      "/var/lib/acme/proxy.satr14.my.id".hide = true;
+                    };
+                  }];
+                }
+                {
+                  type = "monitor";
+                  cache = "1m";
+                  title = "Services";
+                  sites = map (e: { 
+                    same-tab = true;
+                    allow-insecure = true;
+                    title = builtins.elemAt e 0;
+                    icon = "si:${builtins.elemAt e 1}";
+                    url = builtins.elemAt e 2;
+                    check-url = builtins.elemAt e 3;
+                  }) homelab.dash;
+                }
+                {
+                  type = "docker-containers";
+                  title = "Containers";
+                  format-container-names = true;
+                  hide-by-default = true;
+                }
+              ];
+            }
+          ];
+        }
         {
           name = "Home";
           show-mobile-header = true;
@@ -187,101 +282,6 @@ in {
             }
           ];
         }
-        {
-          name = "Dashboard";
-          show-mobile-header = true;
-          width = "slim";
-          columns = [
-            {
-              size = "small";
-              widgets = [
-                {
-                  type = "monitor";
-                  title = "Critical Systems";
-                  cache = "15s";
-                  style = "compact";
-                  show-failing-only = true;
-                  sites = map (e: {
-                    same-tab = true;
-                    allow-insecure = true;
-                    title = builtins.elemAt e 0;
-                    url = builtins.elemAt e 1;
-                  }) monitor;
-                }
-                {
-                  type = "dns-stats";
-                  title = "DNS Stats";
-                  service = "adguard";
-                  url = "http://localhost:8088/";
-                  hour-format = "12h";
-                }
-                {
-                  type = "bookmarks";
-                  groups = [
-                    {
-                      links = [{
-                        same-tab = true;
-                        title = "NixFlake";
-                        icon = "si:nixos";
-                        url = "https://flake.satr14.my.id";
-                      }];
-                    }
-                    {
-                      links = map (e: {
-                        same-tab = true;
-                        title = builtins.elemAt e 0;
-                        icon = "si:${builtins.elemAt e 1}";
-                        url = builtins.elemAt e 2;
-                        alt-status-codes = [ 401 ];
-                      }) bookmarks;
-                    }
-                  ];
-                }
-                {
-                  type = "to-do";
-                  id = "tasks";
-                }
-              ];
-            }
-            {
-              size = "full";
-              widgets = [
-                {
-                  type = "server-stats";
-                  servers = [{
-                    type = "local";
-                    mountpoints = {
-                      "/boot".hide = true;
-                      "/nix/store".hide = true;
-                      "/var/lib/vaultwarden".hide = true;
-                      "/var/lib/private/cryptpad".hide = true;
-                      "/var/lib/acme/proxy.satr14.my.id".hide = true;
-                    };
-                  }];
-                }
-                {
-                  type = "monitor";
-                  cache = "1m";
-                  title = "Services";
-                  sites = map (e: { 
-                    same-tab = true;
-                    allow-insecure = true;
-                    title = builtins.elemAt e 0;
-                    icon = "si:${builtins.elemAt e 1}";
-                    url = builtins.elemAt e 2;
-                    check-url = builtins.elemAt e 3;
-                  }) homelab.dash;
-                }
-                {
-                  type = "docker-containers";
-                  title = "Containers";
-                  format-container-names = true;
-                  hide-by-default = true;
-                }
-              ];
-            }
-          ];
-        }
       ];
     };
   };

modules/system/homelab/git.nix

@@ -45,7 +45,7 @@
       url = "http://localhost:5080"; #"https://git.proxy.${homelab.domain}";
       tokenFile = "/mnt/data/apps/forgejo/token-runner"; 
       labels = [ "self-hosted:host" ];
-      hostPackages = with pkgs; [ bash coreutils git nix openssh nodejs ];
+      hostPackages = with pkgs; [ bash coreutils git nix openssh bun ];
     };
   };
   systemd.services = {

modules/system/homelab/mc.nix

@@ -1,75 +1,65 @@
 { inputs, lib, pkgs, ... }: let
-  ram-allocation = "10240M";
+  production = true;
-  # auth-server = "https://mc.satr14.my.id"; # TODO: self hosted drasl server
+  ram-allocation-mb = 12288;
+  rcon-pass = "howdy";
   modpack = let
-    commit = "667aadf36aac9b0689289f4988a76b924bbb9cbc";
+    commit = "8523f89493ace13087eb68cd9fe3b5eb4f669440";
+    path = if production then "commit/${commit}" else "branch/main";
   in pkgs.fetchPackwizModpack {
-    packHash = "sha256-sNWuqTIpqnwxhoof5PkJXrvVE5x/wnhc3LoqomjYBNs=";
+    packHash = "sha256-xB9Oc/aneogSQ9r7L42vyVM6xwq+QkoTaXYNuUzeo6M=";
-    url = "https://git.satr14.my.id/satr14/server-modpack/raw/commit/${commit}/pack.toml";
+    url = "https://git.satr14.my.id/satr14/server-modpack/raw/${path}/pack.toml";
   };
+  
 in {
   imports = [ inputs.mc.nixosModules.minecraft-servers ];
   nixpkgs.overlays = [ inputs.mc.overlay ];
   
+  powerManagement.cpuFreqGovernor = "powersave"; # performance governor causes overheating and thermal throttling, works fine with powesave
+  boot.kernel.sysctl = {
+    "vm.nr_hugepages" = (ram-allocation-mb / 2) + 512; # (heap_mb / 2MB per page) + 512 pages (1GB) for ZGC off-heap overhead
+    "vm.swappiness" = 10;
+  };
+  
   services.minecraft-servers = {
     enable = true;
     eula = true;
-    managementSystem.systemd-socket.enable = true; # Referenced but unset environment variable evaluates to an empty string: MAINPID
+    managementSystem.systemd-socket.enable = true;
     # ^^^ https://github.com/Infinidoge/nix-minecraft/issues/119
     
-    servers.mc0-explorers-creativity = {
+    # TODO: figure out how to set gamerules on start
+    # gamerules to disable: locator_bar, mob_explosion_drop_decay, (and possibly) reduced_debug_info, global_sound_events 
+    # gamerules to enable (temporarily): noend:disable_end
+   
+    servers.da-s3 = {
       enable = true;
       autoStart = true;
       restart = "always";
-      enableReload = false; # NOTE: development phase, disable in production
+      enableReload = production;
+      # extraReload = ''
+      #   function rcon() {
+      #     ${pkgs.rcon-cli}/bin/rcon-cli -p ${rcon-pass} $@
+      #   }
 
-      package = pkgs.fabricServers.fabric-1_21_11.override {
+      #   rcon "gamerule locator_bar false"
-        jre_headless = pkgs.javaPackages.compiler.temurin-bin.jre-25;
+      #   rcon "gamerule mob_explosion_drop_decay false"
-        loaderVersion = "0.19.2";
+      #   rcon "gamerule reduced_debug_info false"
+      #   rcon "gamerule global_sound_events false"
+      # '';
+      
+      operators = lib.mkIf (!production) {
+        "satr14" = {
+          uuid = "54441a30-fe73-46e7-adca-c476bd4fc6d2";
+          bypassesPlayerLimit = true;
+          level = 4;
+        };
       };
       
-      jvmOpts = let
-        flags = [
-          "-Xms${ram-allocation}"
-          "-Xmx${ram-allocation}"
-          "--add-modules=jdk.incubator.vector"
-          
-          # Custom auth server
-          # "-Dminecraft.api.env=custom"
-          # "-Dminecraft.api.auth.host=${auth-server}/auth"
-          # "-Dminecraft.api.account.host=${auth-server}/account"
-          # "-Dminecraft.api.profiles.host=${auth-server}/account"
-          # "-Dminecraft.api.session.host=${auth-server}/session"
-          # "-Dminecraft.api.services.host=${auth-server}/services"
-
-          # Aikar's GC flags (tuned for 10GB)
-          "-XX:+UseG1GC"
-          "-XX:+ParallelRefProcEnabled"
-          "-XX:MaxGCPauseMillis=200"
-          "-XX:+UnlockExperimentalVMOptions"
-          "-XX:+DisableExplicitGC"
-          "-XX:+AlwaysPreTouch"
-          "-XX:G1HeapWastePercent=5"
-          "-XX:G1MixedGCCountTarget=4"
-          "-XX:InitiatingHeapOccupancyPercent=15"
-          "-XX:G1MixedGCLiveThresholdPercent=90"
-          "-XX:G1RSetUpdatingPauseTimePercent=5"
-          "-XX:SurvivorRatio=32"
-          "-XX:+PerfDisableSharedMem"
-          "-XX:MaxTenuringThreshold=1"
-          "-Dusing.aikars.flags=https://mcflags.emc.gs"
-          "-Daikars.new.flags=true"
-          "-XX:G1NewSizePercent=30"
-          "-XX:G1MaxNewSizePercent=40"
-          "-XX:G1HeapRegionSize=8M"
-          "-XX:G1ReservePercent=20"
-        ];
-      in lib.concatStringsSep " " flags;
-      
       serverProperties = {
+        # server-ip = "localhost";
         server-port = 25565;
-        server-name = "Digit Association";
+        server-name = "Minecraft Server";
-        motd = "§lSeason 3 TESTING§r - §dExplorers Creativity 🔥";
+        motd = "§lSeason 3§r - §dExplorers Creativity 🔥";
+        log-ips = false; # TODO: figure out how to get ips from cloudflared tunnel
         
         difficulty = "normal";
         gamemode = "survival";
@@ -84,26 +74,41 @@ in {
         allow-flight = false;
         player-idle-timeout = 0;
         
-        # resource-pack = "https://cdn.satr14.my.id/public/fullslide-1.21.11.zip";
+        view-distance = 12;
-        # resource-pack-sha1 = "e0958dcef5755286f390c22280700c471ec34a65";
+        simulation-distance = 4;
-        # resource-pack-enforce = false;
-        
-        simulation-distance = 16;
-        view-distance = 4;
         
         enable-rcon = true;
         sync-chunk-writes = false;
-        "rcon.password" = "howdy";
+        "rcon.password" = rcon-pass;
         "rcon.port" = 25575;
       };
       
-      symlinks = {
+      symlinks = lib.mapAttrs'
-        # "resources/datapack/required" = "${modpack}/datapacks";
+        (name: _: lib.nameValuePair "mods/${name}" "${modpack}/mods/${name}")
-        "mods" = "${modpack}/mods";
+        (builtins.readDir "${modpack}/mods");
       
-        # "server-icon.png" = "${modpack}/server-icon.png";
+      package = pkgs.fabricServers.fabric-1_21_11.override {
-        # "config" = "";
+        jre_headless = pkgs.javaPackages.compiler.temurin-bin.jdk-25;
+        loaderVersion = "0.19.2";
       };
+
+      jvmOpts = let flags = [
+        "-Xms${toString ram-allocation-mb}M"
+        "-Xmx${toString ram-allocation-mb}M"
+        
+        "-XX:+UseZGC" # Use ZGC (requires Java v25+, 8+ CPU cores, 10GB+ RAM)
+        "-XX:+UseCompactObjectHeaders" # Use compact object headers (requires Java v16+, saves a couple of bits per object)
+        
+        "--add-modules=jdk.incubator.vector" # Exposes SIMD instructions (requires full JDK, useful with performance mods)
+        "-XX:+UseLargePages" # Large pages support (requires hugepages configured on the system)
+        "-XX:+AlwaysPreTouch" # Pre-allocates memory on startup, OS claims it immediately for JVM instead of negotiating it
+        "-XX:+DisableExplicitGC" # Disables mods from manually invoking the GC
+        "-XX:+PerfDisableSharedMem" # Disables constant /tmp writes for JVM metrics
+        "-XX:ZAllocationSpikeTolerance=5" # Helps when server is active with many players
+        "-XX:SoftMaxHeapSize=${toString (ram-allocation-mb - 2048)}M" # Leave 2GB headroom
+        "-XX:ZCollectionInterval=1" # Force a GC cycle at minimum every second
+        "-XX:ConcGCThreads=8" # Threads ZGC uses for concurrent work
+      ]; in lib.concatStringsSep " " flags;
     };
   };
 }

modules/system/misc/utilities.nix

@@ -8,6 +8,7 @@
     ntfs3g
     exfatprogs
     smartmontools
+    rclone
     ncdu
     ventoy-full-qt
 

modules/system/server.nix

@@ -35,12 +35,15 @@ in {
 
   users.users.root.openssh.authorizedKeys.keys = homelab.ssh-keys;
   
-  services.tailscale = {
+  services = {
-    enable = true;
+    netbird.enable = true;
-    authKeyFile = "/mnt/data/apps/tailscale/authkey";
+    tailscale = {
-    useRoutingFeatures = "server";
+      enable = true;
-    extraUpFlags = ts-flags;
+      authKeyFile = "/mnt/data/apps/tailscale/authkey";
-    extraSetFlags = ts-flags;
+      useRoutingFeatures = "server";
+      extraUpFlags = ts-flags;
+      extraSetFlags = ts-flags;
+    };
   };
 
   virtualisation = {

modules/system/user.nix

@@ -7,6 +7,7 @@
     shell = pkgs.zsh;
     extraGroups = [
       "networkmanager"
+      "minecraft"
       "wheel"
       "dialout"
       "libvirtd"