move to dataset

common/tooling/git.nix

@@ -36,6 +36,7 @@ in
         push.autoSetupRemote = true;
         core.autocrlf = "input";
         commit.gpgsign = true;
+        safe.directory = "/etc/nixos";
         core.excludesfile = (
           pkgs.writeText ".gitignore" ''
             .idea

common/tooling/nix.nix

@@ -3,7 +3,6 @@
   environment.systemPackages = with pkgs; [
     (writeShellScriptBin "nix-referrers" "nix-store --query --referrers $@")
     (writeShellScriptBin "nixpkgs-review-head" "nixpkgs-review rev HEAD")
-    (writeShellScriptBin "rebuild" "bash -c \"nixos-rebuild switch |& nom\"")
 
     nixpkgs-review
     nixfmt-rfc-style
@@ -16,7 +15,13 @@
     nix-init
   ];
 
-  environment.sessionVariables = lib.mkIf pkgs.config.allowUnfree { NIXPKGS_ALLOW_UNFREE = "1"; };
+  environment.sessionVariables =
+    (lib.mkIf pkgs.config.allowUnfree { NIXPKGS_ALLOW_UNFREE = "1"; })
+    // {
+      NH_NOM = 1;
+    };
+
+  environment.shellAliases."rebuild" = "nixos-rebuild switch |& nom";
 
   grimmShared.tooling.lang_servers = [
     {
@@ -35,6 +40,14 @@
     ];
     warn-dirty = false;
   };
+
+  programs.nh = {
+    enable = true;
+    # clean.enable = true;
+    clean.extraArgs = "--keep-since 14d --keep 16";
+    flake = "/etc/nixos";
+  };
+
   nix.gc = {
     automatic = true;
     dates = "weekly";

flake.lock

@@ -366,17 +366,18 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1732297877,
-        "narHash": "sha256-OCazAn/xPjPTMo6cyMzJthmfMBuoCjcZ4O+kAkW3ixI=",
-        "ref": "refs/heads/apparmor_module",
-        "rev": "43d89bd05155f93038565672464931594b9b4fcd",
-        "revCount": 710089,
-        "type": "git",
-        "url": "file:///home/grimmauld/coding/nixpkgs"
+        "lastModified": 1732014248,
+        "narHash": "sha256-y/MEyuJ5oBWrWAic/14LaIr/u5E0wRVzyYsouYY3W6w=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "23e89b7da85c3640bbc2173fe04f4bd114342367",
+        "type": "github"
       },
       "original": {
-        "type": "git",
-        "url": "file:///home/grimmauld/coding/nixpkgs"
+        "owner": "NixOS",
+        "ref": "nixos-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
       }
     },
     "nixpkgs-24_05": {

flake.nix

@@ -3,8 +3,8 @@
 
   inputs = {
     nixpkgs = {
-      # url = "github:NixOS/nixpkgs/nixos-unstable";
-      url = "git+file:///home/grimmauld/coding/nixpkgs";
+      url = "github:NixOS/nixpkgs/nixos-unstable";
+      # url = "git+file:///home/grimmauld/coding/nixpkgs";
     };
     chaotic = {
       url = "github:chaotic-cx/nyx/nyxpkgs-unstable";
@@ -37,7 +37,7 @@
   outputs = inputs @ { self, agenix, nixpkgs, chaotic, aagl-gtk-on-nix, nixos-mailserver, nixos-matrix-modules, aa-alias-manager, ... }:
     let
       patches = [
-        # ./aa_mod.patch
+        ./aa_mod.patch
         {
           url = "https://github.com/NixOS/nixpkgs/pull/357468.patch";
           hash = "sha256-t+/zVO/Jyink9biD61AuDOmVt0GF3biKxR5hCAyl4Fc=";

specific/grimm-nixos-ssd/hardware-configuration.nix

@@ -43,6 +43,12 @@
     { device = "zpool/var";
       fsType = "zfs";
     };
+  
+  fileSystems."/etc/nixos" =
+    { device = "zpool/nix_conf";
+      fsType = "zfs";
+      options = [ "noacl" ];
+    };
 
 #  fileSystems."/home" =
 #    { device = "zpool/home";

users.nix

@@ -10,6 +10,7 @@
     # shell = pkgs.xonsh;
     description = "grimmauld";
 
+
     openssh.authorizedKeys.keys = (import ./authorizedKeys.nix);
     extraGroups = lib.intersectLists (lib.attrNames config.users.groups) [
       "networkmanager"