chore(nixvim): preserve branch-specific setup

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

.codex/config.toml

@@ -0,0 +1,5 @@
+## Me
+
+[mcp_servers.nixos]
+command = "nix"
+args = ["run", "github:utensils/mcp-nixos", "--"]

TODO.md

@@ -1,3 +1 @@
-- Evaluate Plasma Manager when Plasma 6.7 support improves
 - Review system-wide package list periodically
-- Add additional hosts

flake.lock

@@ -37,11 +37,11 @@
         "sf-pro": "sf-pro"
       },
       "locked": {
-        "lastModified": 1786018145,
-        "narHash": "sha256-4cjJFmq6JC0Gk9wWt3aZzqovtmM9mikrDWjsBL2ZWu8=",
+        "lastModified": 1787373040,
+        "narHash": "sha256-mSpL69LSAA/+cQx+v9tC2XC/DD7cUepUmhiMx0/Hw64=",
         "owner": "Lyndeno",
         "repo": "apple-fonts.nix",
-        "rev": "66b5379c6a429ad4ea6ff3943cc1f651df55cc70",
+        "rev": "69f20e9ba294420e4b6407a827c6b5aea3afcc12",
         "type": "github"
       },
       "original": {
@@ -96,15 +96,16 @@
         ]
       },
       "locked": {
-        "lastModified": 1784665499,
-        "narHash": "sha256-9BMxlTxCCDAeoNLtb1a/st7udtTIJep+wpUzquA29VU=",
-        "owner": "nix-community",
+        "lastModified": 1788011267,
+        "narHash": "sha256-mEq2kU+ljompTToZ44Afvm7d/rHJ5iMBl0tjZuyShJs=",
+        "owner": "Mic92",
         "repo": "bun2nix",
-        "rev": "0f2a1f0b6f42cebe3b149bf62d38754c5e0e9729",
+        "rev": "5765b0614591f75ee8ba5596e81ae85c167d1071",
         "type": "github"
       },
       "original": {
-        "owner": "nix-community",
+        "owner": "Mic92",
+        "ref": "fix-structured-attrs-hook",
         "repo": "bun2nix",
         "type": "github"
       }
@@ -161,11 +162,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1785627969,
-        "narHash": "sha256-4dtXQk/NMePegK/nWp5NSeuZKLATItOq61lpEvmXqGw=",
+        "lastModified": 1788450739,
+        "narHash": "sha256-glZLQlzIn1fXH6PazR2iUmTo7kzzyYSshrWhLS9TqCU=",
         "owner": "hercules-ci",
         "repo": "flake-parts",
-        "rev": "427bf4bd9435fdf21321c8cc628c24efc14c0f7a",
+        "rev": "31729ca8cbdb4fa927b34e5f4353e6a83f39e993",
         "type": "github"
       },
       "original": {
@@ -175,6 +176,27 @@
       }
     },
     "flake-parts_2": {
+      "inputs": {
+        "nixpkgs-lib": [
+          "nixvim",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1787559586,
+        "narHash": "sha256-onL0VLf9vPllmT0H/OlURIU5r5t5WIEl7t4tVNKT0Nw=",
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "rev": "9d0d87172c374f89da73c1cfe6d81ae62feac1f1",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "type": "github"
+      }
+    },
+    "flake-parts_3": {
       "inputs": {
         "nixpkgs-lib": "nixpkgs-lib"
       },
@@ -220,11 +242,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1786999651,
-        "narHash": "sha256-MTGMFlLDTklsXhCp4r5GXB4VAVadPdalXLvUjd/K7h0=",
+        "lastModified": 1788458226,
+        "narHash": "sha256-UZTAlg8iKVEmyEXakzKmukrzFIKrXezYsRy9vajDrGw=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "353742587cbaf079b3caee743115d037bc51fea6",
+        "rev": "aa308770461dcf22c333a5e8a31c8bddbde5bee9",
         "type": "github"
       },
       "original": {
@@ -242,11 +264,11 @@
         "treefmt-nix": "treefmt-nix"
       },
       "locked": {
-        "lastModified": 1787027504,
-        "narHash": "sha256-8IqYrCfNgO+T4Sc2gM4AHSuqhSgwcrAq0uOTMq9ixKg=",
+        "lastModified": 1788481344,
+        "narHash": "sha256-3jEfPEkegrp3ps+VuNT0i+kI4hhfDKoSICoUzZrXDOE=",
         "owner": "numtide",
         "repo": "llm-agents.nix",
-        "rev": "50e05f7a7cc039d39d53bc77c132d9457f990375",
+        "rev": "496d8f2d508dcd4673a1480cd58b3e9bf3400c15",
         "type": "github"
       },
       "original": {
@@ -276,11 +298,11 @@
         "nixpkgs": "nixpkgs_3"
       },
       "locked": {
-        "lastModified": 1787016972,
-        "narHash": "sha256-6B98mtehXRht8nSiX+1tqm8WyeQvjCjhf8IjCKLh/dU=",
+        "lastModified": 1788408011,
+        "narHash": "sha256-VErLyHIT3U4x64a2G6J6wplB4yDPIpMXlhUpBjUMNEE=",
         "owner": "nix-community",
         "repo": "nix-vscode-extensions",
-        "rev": "596319216632f6e6da839787295a350c027d39be",
+        "rev": "f848614222a7ef023998450a6f6773e10f8adf83",
         "type": "github"
       },
       "original": {
@@ -322,11 +344,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1786963906,
-        "narHash": "sha256-3tkeMWSvHPo3tYljfXbPC/TgknikU1GvdVr/DkdfvE0=",
+        "lastModified": 1788372231,
+        "narHash": "sha256-7aqErvrAEz/5OcPA5p3M+tVOqeYc4oJXkNIPXfCqxAw=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "f4b6996c4e8b9ee06ce147ec344c885f51071b14",
+        "rev": "9387b3fcc0c23c86661636da63faabad4235a0a6",
         "type": "github"
       },
       "original": {
@@ -354,11 +376,11 @@
     },
     "nixpkgs_4": {
       "locked": {
-        "lastModified": 1787001381,
-        "narHash": "sha256-Ue1Yo8gfHdD4TMtNewhA4tkSYeFqXThju0nCyJc3ALo=",
+        "lastModified": 1788316716,
+        "narHash": "sha256-bc7rSpXIdn9QWGNqfWcPZWOhEVF8NoeAZkWq0XWnf/k=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "ec2d622de0773551768cf98f3fc50cbcc003b9c5",
+        "rev": "3ed67ec0a4d3c7ab4ae1f04f8ee8df07bfa506a2",
         "type": "github"
       },
       "original": {
@@ -368,6 +390,42 @@
         "type": "github"
       }
     },
+    "nixpkgs_5": {
+      "locked": {
+        "lastModified": 1789844176,
+        "narHash": "sha256-COQmpo4lFIzMgUjr3ntDpjH0NwrCnf7N0uhR+6WPGP8=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "79b35bf0bda5cd110f856aa5b5b2c5ba4460dbf5",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixpkgs-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixvim": {
+      "inputs": {
+        "flake-parts": "flake-parts_2",
+        "nixpkgs": "nixpkgs_5",
+        "systems": "systems_3"
+      },
+      "locked": {
+        "lastModified": 1788190018,
+        "narHash": "sha256-59BAfH0txPAZrPBF4QJqwvUWppD+ICrcjA1LZAmPnrQ=",
+        "owner": "nix-community",
+        "repo": "nixvim",
+        "rev": "41844750e55f17b1385d5b09ca7ade5f11f49506",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "repo": "nixvim",
+        "type": "github"
+      }
+    },
     "ny": {
       "flake": false,
       "locked": {
@@ -412,6 +470,7 @@
         "nix-flatpak": "nix-flatpak",
         "nix-vscode-extensions": "nix-vscode-extensions",
         "nixpkgs": "nixpkgs_4",
+        "nixvim": "nixvim",
         "plasma-manager": "plasma-manager",
         "sidra": "sidra",
         "vscode-server": "vscode-server"
@@ -508,11 +567,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1786706192,
-        "narHash": "sha256-NViIxuTn4VA6w5JPpzamwkCnFUmhFc4CFMemIKsC/B8=",
+        "lastModified": 1788475513,
+        "narHash": "sha256-JRZ3eQpeeExv3mR1icbZAjToe7MPm8XleJML0UsrAHg=",
         "owner": "wimpysworld",
         "repo": "sidra",
-        "rev": "8ace425cda0f462acc7a00ada1e71f87aa30c2cf",
+        "rev": "257dce10bd6805633d99e5cdae6897d014619dcc",
         "type": "github"
       },
       "original": {
@@ -551,6 +610,23 @@
         "type": "github"
       }
     },
+    "systems_3": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1774449309,
+        "narHash": "sha256-brhZ8DmuGtzkCYHJg4HEd602amKm89Y9ytsFZ5uWD1w=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "c29398b59d2048c4ab79345812849c9bd15e9150",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "ref": "future-26.11",
+        "repo": "default",
+        "type": "github"
+      }
+    },
     "treefmt-nix": {
       "inputs": {
         "nixpkgs": [
@@ -574,7 +650,7 @@
     },
     "vscode-server": {
       "inputs": {
-        "flake-parts": "flake-parts_2"
+        "flake-parts": "flake-parts_3"
       },
       "locked": {
         "lastModified": 1784312229,

flake.nix

@@ -1,5 +1,5 @@
 {
-  description = "NixOS configuration for my homelab";
+  description = "my nixos configurations";
 
   inputs = {
     nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
@@ -21,6 +21,7 @@
       url = "github:gmodena/nix-flatpak/?ref=latest";
     };
     vscode-server.url = "github:nix-community/nixos-vscode-server";
+    nixvim.url = "github:nix-community/nixvim";
     llm-agents.url = "github:numtide/llm-agents.nix";
     nix-vscode-extensions.url = "github:nix-community/nix-vscode-extensions";
     agenix = {
@@ -53,6 +54,7 @@
             home-manager.extraSpecialArgs = { inherit inputs; };
             home-manager.sharedModules = [
               plasma-manager.homeModules.plasma-manager
+              inputs.nixvim.homeModules.nixvim
             ];
             home-manager.users.emmatherock = { osConfig, ... }: {
               imports = [ ./home/emmatherock/core.nix ] ++ osConfig.myHomeProfile.extraPrograms;
@@ -74,6 +76,9 @@
             home-manager.useGlobalPkgs = true;
             home-manager.useUserPackages = true;
             home-manager.extraSpecialArgs = { inherit inputs; };
+            home-manager.sharedModules = [
+              inputs.nixvim.homeModules.nixvim
+            ];
             home-manager.users.emmatherock = { osConfig, ... }: {
               imports = [ ./home/emmatherock/core.nix ] ++ osConfig.myHomeProfile.extraPrograms;
             };

home/emmatherock/agents.nix

@@ -5,8 +5,9 @@ let
 in
 {
   home.packages = with agents; [
-    antigravity-cli
     codex
+    codex-acp
     claude-code
+    claude-agent-acp
   ];
 }

home/emmatherock/core.nix

@@ -1,3 +1,4 @@
+{ pkgs, ... }:
 {
   imports = [
     ./git.nix
@@ -7,5 +8,15 @@
   programs.home-manager.enable = true;
   programs.btop.enable = true;
 
+  # Per-project toolchain resolution (nix-shell / flake devShell), used by
+  # nixvim's LSP servers so they don't need language toolchains installed globally.
+  programs.direnv = {
+    enable = true;
+    nix-direnv.enable = true;
+  };
+  home.packages = with pkgs; [
+    fastfetch
+  ];
+
   home.stateVersion = "25.11";
 }

home/emmatherock/neovim.nix

@@ -0,0 +1,286 @@
+# Declarative Neovim config via nixvim. Goal: a real, lean IDE — not a
+# feature-for-feature VSCode clone. Every plugin here earns its place.
+
+{ pkgs, ... }:
+
+{
+  programs.nixvim = {
+    enable = true;
+    defaultEditor = true;
+    vimAlias = true; # `vim` -> nvim, handy when SSH'd into the VPS/homelab
+
+    colorschemes.catppuccin = {
+      enable = true;
+      settings.flavour = "mocha";
+    };
+
+    globals.mapleader = " ";
+
+    # --- System clipboard over OSC 52, so "+y / "+p work over SSH
+    #     (Termius -> VPS/homelab) without a local clipboard provider.
+    #     Requires Neovim 0.10+ for vim.ui.clipboard.osc52; confirmed
+    #     present (Neovim 0.12.5 on the pinned nixpkgs as of 2026-09).
+    extraConfigLua = ''
+      vim.g.clipboard = {
+        name = "OSC 52",
+        copy = {
+          ["+"] = require("vim.ui.clipboard.osc52").copy("+"),
+          ["*"] = require("vim.ui.clipboard.osc52").copy("*"),
+        },
+        paste = {
+          ["+"] = require("vim.ui.clipboard.osc52").paste("+"),
+          ["*"] = require("vim.ui.clipboard.osc52").paste("*"),
+        },
+      }
+    '';
+
+    opts = {
+      number = true;
+      relativenumber = true;
+      shiftwidth = 2;
+      tabstop = 2;
+      expandtab = true;
+      termguicolors = true;
+      signcolumn = "yes";
+      scrolloff = 8;
+    };
+
+    # --- File explorer ---
+    plugins.neo-tree = {
+      enable = true;
+      settings.window.width = 30;
+    };
+
+    # --- Fuzzy finder: files, grep, buffers, LSP symbols ---
+    plugins.telescope = {
+      enable = true;
+      extensions.fzf-native.enable = true;
+    };
+
+    # --- Treesitter: syntax highlighting/parsing for your stack ---
+    plugins.treesitter = {
+      enable = true;
+      settings.ensure_installed = [
+        "nix" "bash" "lua" "markdown" "json" "yaml"
+        "rust" "go" "gomod" "c" "cpp" "c_sharp" "python"
+        "javascript" "typescript" "tsx" "vue" "html" "css" "dockerfile"
+      ];
+    };
+
+    # --- LSP: one server per language/toolchain you use ---
+    plugins.lsp = {
+      enable = true;
+      servers = {
+        nixd.enable = true;
+        bashls.enable = true;
+        rust_analyzer = {
+          enable = true;
+          installCargo = true;
+          installRustc = true;
+        };
+        gopls.enable = true;
+        clangd.enable = true; # C / C++
+        csharp_ls.enable = true;
+        pyright.enable = true;
+        ts_ls.enable = true; # JS/TS, React
+        volar.enable = true; # Vue
+        html.enable = true;
+        cssls.enable = true;
+        tailwindcss.enable = true;
+        jsonls.enable = true;
+        dockerls.enable = true;
+        docker_compose_language_service.enable = true;
+      };
+      keymaps.lspBuf = {
+        "gd" = "definition";
+        "gr" = "references";
+        "K" = "hover";
+        "<leader>rn" = "rename";
+        "<leader>ca" = "code_action";
+      };
+    };
+
+    # --- Autocompletion ---
+    plugins.cmp = {
+      enable = true;
+      settings.sources = [
+        { name = "nvim_lsp"; }
+        { name = "luasnip"; }
+        { name = "path"; }
+        { name = "buffer"; }
+      ];
+      settings.snippet.expand = ''
+        function(args)
+          require("luasnip").lsp_expand(args.body)
+        end
+      '';
+      settings.mapping = {
+        "<Tab>" = ''
+          cmp.mapping(function(fallback)
+            if cmp.visible() then
+              cmp.select_next_item()
+            elseif require("luasnip").expand_or_jumpable() then
+              require("luasnip").expand_or_jump()
+            else
+              fallback()
+            end
+          end, { "i", "s" })
+        '';
+        "<S-Tab>" = ''
+          cmp.mapping(function(fallback)
+            if cmp.visible() then
+              cmp.select_prev_item()
+            elseif require("luasnip").jumpable(-1) then
+              require("luasnip").jump(-1)
+            else
+              fallback()
+            end
+          end, { "i", "s" })
+        '';
+      };
+    };
+    plugins.cmp-nvim-lsp.enable = true;
+    plugins.cmp_luasnip.enable = true;
+    plugins.cmp-path.enable = true;
+    plugins.cmp-buffer.enable = true;
+
+    # --- Snippets ---
+    plugins.luasnip = {
+      enable = true;
+      fromVscode = [ { paths = "${pkgs.vimPlugins.friendly-snippets}"; } ];
+    };
+
+    # --- Pairs and surrounding text ---
+    plugins.nvim-autopairs.enable = true;
+    plugins.nvim-surround.enable = true;
+
+    # --- Format on save ---
+    plugins.conform-nvim = {
+      enable = true;
+      settings = {
+        format_on_save = {
+          lsp_fallback = true;
+          timeout_ms = 500;
+        };
+        formatters_by_ft = {
+          rust = [ "rustfmt" ];
+          go = [ "gofmt" ];
+          c = [ "clang-format" ];
+          cpp = [ "clang-format" ];
+          python = [ "black" ];
+          javascript = [ "prettier" ];
+          typescript = [ "prettier" ];
+          javascriptreact = [ "prettier" ];
+          typescriptreact = [ "prettier" ];
+          vue = [ "prettier" ];
+          nix = [ "nixpkgs-fmt" ];
+        };
+      };
+    };
+
+    # --- Git: gutter signs, hunk stage/reset, blame ---
+    plugins.gitsigns.enable = true;
+
+    # --- Git: interactive status/commit/diff/blame ---
+    plugins.fugitive.enable = true;
+
+    # --- Statusline ---
+    plugins.lualine.enable = true;
+
+    # --- Discoverable keybindings while you're still learning ---
+    plugins.which-key.enable = true;
+
+    # --- AI agent: CodeCompanion, curated natively in nixvim ---
+    # Configured to reuse your existing `claude`/`codex` CLI auth via ACP
+    # adapters instead of a separate Anthropic Console/OpenAI API key.
+    #
+    # Verified against https://codecompanion.olimorris.dev/configuration/adapters-acp
+    # (CodeCompanion >= v18.0.0, which is what's pinned by nixvim's nixpkgs as of
+    # 2026-08). Two things changed from an older/assumed layout:
+    #   - the default-adapter key is `interactions.chat.adapter`, not
+    #     `strategies.chat.adapter` (renamed in v18.0.0);
+    #   - the built-in adapter name is `claude_code` (no `_acp` suffix) and
+    #     lives under `adapters.acp.<name>`.
+    #
+    # Neither adapter has a true zero-config mode that silently piggybacks on
+    # an already-logged-in CLI session:
+    #   - codex: extends the built-in `codex` preset. `defaults.auth_method`
+    #     accepts "api-key" | "chat-gpt" (confirmed against the docs above,
+    #     not "chatgpt"/"openai-api-key"/"codex-api-key"). "chat-gpt" reuses
+    #     your ChatGPT/Codex CLI login instead of an OPENAI_API_KEY.
+    #   - claude_code: there's no oauth-personal equivalent. Run
+    #     `claude setup-token` once (ties to your Pro/Max subscription rather
+    #     than a Console API key) and save the result to
+    #     ~/.config/codecompanion/claude-oauth-token (chmod 600, outside the
+    #     nix store). It's read at runtime via the `cmd:` prefix below rather
+    #     than embedded in this file.
+    plugins.codecompanion = {
+      enable = true;
+      settings = {
+        interactions.chat.adapter = "claude_code"; # switch to "codex" per-chat
+        interactions.inline.adapter = "claude_code";
+        adapters.acp = {
+          opts.show_presets = false;
+          claude_code.__raw = ''
+            function()
+              return require("codecompanion.adapters").extend("claude_code", {
+                env = {
+                  CLAUDE_CODE_OAUTH_TOKEN = "cmd:cat ~/.config/codecompanion/claude-oauth-token",
+                },
+              })
+            end
+          '';
+          codex.__raw = ''
+            function()
+              return require("codecompanion.adapters").extend("codex", {
+                defaults = {
+                  auth_method = "chat-gpt",
+                },
+              })
+            end
+          '';
+        };
+        adapters.http.opts.show_presets = false;
+          display.chat.window = {
+          layout = "vertical";
+          position = "right";
+          width = 0.4;
+        };
+      };
+    };
+
+    # --- Editor-level tooling only: formatters conform.nvim shells out to.
+    #     Language toolchains themselves (cargo, go, dotnet-sdk, nodejs,
+    #     a compiler, a python interpreter) come from your per-project
+    #     nix-shell / flake devShell, not from here — launch nvim from
+    #     inside that shell (`nix develop`, or nix-shell + direnv) so LSP
+    #     servers resolve the right toolchain via PATH.
+    extraPackages = with pkgs; [
+      python3Packages.black
+      prettier
+      nixpkgs-fmt
+      file
+      ripgrep
+      sqlite
+    ];
+
+    keymaps = [
+      { mode = "n"; key = "<leader>e"; action = "<cmd>Neotree toggle<CR>"; }
+      { mode = "n"; key = "<leader>ff"; action = "<cmd>Telescope find_files<CR>"; }
+      { mode = "n"; key = "<leader>fg"; action = "<cmd>Telescope live_grep<CR>"; }
+      { mode = "n"; key = "<leader>fb"; action = "<cmd>Telescope buffers<CR>"; }
+
+      # CodeCompanion
+      { mode = [ "n" "v" ]; key = "<leader>ac"; action = "<cmd>CodeCompanionChat Toggle<CR>"; }
+      { mode = "v"; key = "<leader>aa"; action = "<cmd>CodeCompanionChat Add<CR>"; }
+      { mode = "n"; key = "<leader>ai"; action = "<cmd>CodeCompanion<CR>"; } # inline assistant
+
+      # Fugitive
+      { mode = "n"; key = "<leader>gs"; action = "<cmd>Git<CR>"; } # status
+      { mode = "n"; key = "<leader>gc"; action = "<cmd>Git commit<CR>"; } # interactive commit
+      { mode = "n"; key = "<leader>gp"; action = "<cmd>Git push<CR>"; }
+      { mode = "n"; key = "<leader>gl"; action = "<cmd>Git pull<CR>"; }
+      { mode = "n"; key = "<leader>gd"; action = "<cmd>Gvdiffsplit<CR>"; } # diff current file
+    ];
+  };
+}

home/emmatherock/packages.nix

@@ -3,9 +3,6 @@
   programs.btop.package = pkgs.btop.override { cudaSupport = false; rocmSupport = true; };
 
   home.packages = with pkgs; [
-    # --- Base y Terminal ---
-    vim
-    fastfetch
     nvtopPackages.full
   ];
 }

hosts/miku-homelab/default.nix

@@ -5,6 +5,7 @@
     ./hardware-configuration.nix
     ../../modules/profiles/desktop.nix
     ../../modules/profiles/server.nix
+    ../../modules/services/ollama.nix
     ../../modules/services/samba.nix
     ../../modules/system/home-profile.nix
     ../../modules/system/nix-ld.nix
@@ -27,6 +28,7 @@
     ../../home/emmatherock/deskflow.nix
     ../../home/emmatherock/gaming.nix
     ../../home/emmatherock/media.nix
+    #../../home/emmatherock/neovim.nix
     ../../home/emmatherock/packages.nix
     ../../home/emmatherock/plasma.nix
     ../../home/emmatherock/vscode.nix
@@ -67,7 +69,7 @@
       extraGroups = [ "plugdev" "networkmanager" "wheel" "video" "mikushare-group" "render" ];
       authorizedKeys = [
         "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA8vfwM5g9RJXqHtqTgNqsYg9SxSm+UMvFqTjBoAsLJ6 emmatherock@MAIN-PC"
-        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIpTslcK0yQ6k+h8foNl17wVRyJUfEGzq7f1h3014WNB s21 plus"
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO6pnKpUEaeoNXqlenc8MAz1GG8P6BRILyIHMSLtvdeF termius"
       ];
     };
     serviceUsers.mikushare = {
@@ -156,5 +158,12 @@
     experimental-features = [ "nix-command" "flakes" ];
   };
 
+  zramSwap = {
+    enable = true;
+    algorithm = "zstd";
+    memoryPercent = 50;
+    priority = 100;
+  };
+
   system.stateVersion = "25.11";
 }

hosts/vps/default.nix

@@ -11,6 +11,11 @@
 
   age.secrets.vps-wg.file = ../../secrets/vps-wg.age;
 
+  myHomeProfile.extraPrograms = [
+    ../../home/emmatherock/agents.nix
+    ../../home/emmatherock/neovim.nix
+  ];
+
   myNetworking = {
     hostName = "vps";
     useNetworkManager = false;
@@ -37,6 +42,10 @@
           publicKey = "bqxDHQNxOSFpTo3We9ujC2WljtaRBgiNEewW+Rlu10k=";
           allowedIPs = [ "10.20.0.2/32" ];
         }
+        {
+          publicKey = "6aw0w7v9uFGvLn/eSdf7z/ljvzz4kviYlSOSj0LKp1E=";
+          allowedIPs = [ "10.20.0.3/32" ];
+        }
       ];
     };
   };
@@ -48,8 +57,8 @@
       extraGroups = [ "wheel" ];
       authorizedKeys = [
         "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA8vfwM5g9RJXqHtqTgNqsYg9SxSm+UMvFqTjBoAsLJ6 emmatherock@MAIN-PC"
-        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIpTslcK0yQ6k+h8foNl17wVRyJUfEGzq7f1h3014WNB s21 plus"
         "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEUCpjAuJobymPPAoPjLdL1eD6g4v6wrquu3cyHP22Wj emmatherock@NixOS"
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO6pnKpUEaeoNXqlenc8MAz1GG8P6BRILyIHMSLtvdeF termius"
       ];
     };
   };
@@ -66,6 +75,12 @@
   boot.loader.systemd-boot.configurationLimit = 10;
   boot.loader.efi.canTouchEfiVariables = true;
 
+  # Required for this host to act as a Tailscale/Headscale exit node.
+  boot.kernel.sysctl = {
+    "net.ipv4.ip_forward" = 1;
+    "net.ipv6.conf.all.forwarding" = 1;
+  };
+
   time.timeZone = "America/Argentina/Buenos_Aires";
   i18n.defaultLocale = "en_US.UTF-8";
 

modules/services/ollama.nix

@@ -0,0 +1,35 @@
+{ pkgs, ... }:
+
+{
+  services.ollama = {
+    enable = true;
+    # `services.ollama.acceleration` does not exist (that option only lives on
+    # services.tabby); GPU backend selection for ollama is done by package choice.
+    package = pkgs.ollama-rocm;
+
+    # Same "don't expose services directly" pattern as the rest of the homelab:
+    # bind to localhost only. If this needs to be reachable from other devices
+    # later, put it behind Traefik + Headscale like the other services instead
+    # of opening it up directly.
+    host = "127.0.0.1";
+    port = 11434;
+
+    environmentVariables = {
+      # Ollama is on-demand by design: it loads a model into VRAM on the first
+      # request and unloads it after this much idle time. 5m is already the
+      # ollama default, set explicitly so it's not an implicit behavior.
+      OLLAMA_KEEP_ALIVE = "5m";
+    };
+
+    # RDNA4 (gfx1200/gfx1201, incl. the RX 9060 XT) has official ROCm support
+    # since ROCm 6.4.4. Verified on this host (2026-08-30) with rocmPackages.clr
+    # 7.2.3: `rocminfo` correctly reports "Name: gfx1200" and `rocm-smi
+    # --showmeminfo vram` reports the full 16GiB, so the "detected with 0 VRAM,
+    # falls back to CPU" issue does not reproduce here and rocmOverrideGfx is
+    # not needed. If a future nixpkgs bump regresses this, re-check with:
+    #   nix shell nixpkgs#rocmPackages.rocminfo -c rocminfo | grep -i gfx
+    #   nix shell nixpkgs#rocmPackages.rocm-smi -c rocm-smi --showmeminfo vram
+    # and only then set rocmOverrideGfx = "12.0.0"; (gfx1200) if VRAM reports 0.
+    # rocmOverrideGfx = "12.0.0";
+  };
+}