add agenix

flake.nix

@@ -4,6 +4,18 @@
     nixpkgs.url = "github:nixos/nixpkgs/nixos-26.05";
     flake-parts.url = "github:hercules-ci/flake-parts";
     import-tree.url = "github:vic/import-tree";
+    nix-easyroam = {
+      url = "github:0x5a4/nix-easyroam";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+    nixcord = {
+      url = "github:4evy/nixcord";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+    agenix = {
+      url = "github:ryantm/agenix";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
   };
   outputs = inputs: inputs.flake-parts.lib.mkFlake { inherit inputs; } (inputs.import-tree ./modules);
 }

modules/default.nix

@@ -3,6 +3,7 @@
     modules = with self.nixosModules; [
       user
       packages
+      /etc/nixos/hardware-configuration.nix
     ];
   };
 }

modules/system/agenix/agenix.nix

@@ -0,0 +1,17 @@
+{ ... }: {
+  flake.nixosModules =
+    { config, ... }:
+    let
+      main = "age17hvac3hn79mwttel9snw87a20x4vguh7y7ys43xmvlhrl3mqs3wswuzlt6";
+    in
+    {
+      "easyroam.age".publicKeys = [ main ];
+      age = {
+        enable = true;
+        identityPaths = [ "/var/lib/misc/key.age" ];
+        secrets = {
+          easyroam.file = ./easyroam.age;
+        };
+      };
+    };
+}

modules/system/packages.nix

@@ -1,5 +1,6 @@
 { ... }: {
   flake.nixosModules.packages = { pkgs, ... }: {
+    nixpkgs.config.allowUnfree = true;
     environment.systemPackages = with pkgs; [
       stow
       ufetch
@@ -31,7 +32,7 @@
       clang
       gdb
       gnumake
-      libreoffice-stable
+      libreoffice
       ripgrep
       jq
       nmgui

modules/system/user.nix

@@ -1,9 +1,8 @@
 { ... }: {
-  flake.nixosModule.user = { pkgs, ... }: {
+  flake.nixosModules.user = { pkgs, ... }: {
     users.users."lucy" = {
       isNormalUser = true;
       description = "lucy";
-      shell = pkgs.zsh;
       extraGroups = [
         "networkmanager"
         "wheel"

result

@@ -0,0 +1 @@
+/nix/store/3lkm1mz19agygph7bmav1qf9k3jx97mx-nixos-vm