Configure power actions with logind

This configures what happens on lid close (on battery / on AC) and
control what happens on the power button press.

home/programs/terminal/shell/zsh/rc/profile.zsh

@@ -9,12 +9,12 @@ if [ -d "$HOME/.local/bin" ]; then
     PATH+=":${$(find -L ~/.local/bin -type d | tr '\n' ':')%%:}"
 fi
 
+# I'm using a greeter now, so the below is disabled.
 # Start graphical session automatically on tty1 if Hyprland or startx is available
-if [ "$(tty)" = "/dev/tty1" ] && [ "$UID" != 0 ]; then
+#if [ "$(tty)" = "/dev/tty1" ] && [ "$UID" != 0 ]; then
-    if command -v Hyprland >/dev/null; then
+#    if command -v Hyprland >/dev/null; then
-      ! pidof -s Hyprland >/dev/null 2>&1 && Hyprland
+#      ! pidof -s Hyprland >/dev/null 2>&1 && Hyprland
-    elif command -v startx >/dev/null; then
+#    elif command -v startx >/dev/null; then
-      ! pidof -s Xorg >/dev/null 2>&1 && exec startx "$XINITRC"
+#      ! pidof -s Xorg >/dev/null 2>&1 && exec startx "$XINITRC"
-    fi
+#    fi
-fi
+#fi
-

options/home/theme.nix

@@ -125,13 +125,13 @@ in
     cursor = {
       name = mkOption {
         type = types.str;
-        default = "catppuccin-mocha-dark-cursors";
+        default = "BreezeX-RosePine-Linux";
         description = "The name of the cursor inside the package";
       };
 
       package = mkOption {
         type = types.package;
-        default = pkgs.catppuccin-cursors.mochaDark;
+        default = pkgs.rose-pine-cursor;
         description = "The package providing the cursors";
       };
 

system/roles/workstation/display/default.nix

@@ -1,5 +1,6 @@
 {
   imports = [
+    ./login
     ./wayland
   ];
 }

system/roles/workstation/display/login/default.nix

@@ -0,0 +1,6 @@
+{
+  imports = [
+    ./greetd.nix
+    ./pam.nix
+  ];
+}

system/roles/workstation/display/login/greetd.nix

@@ -0,0 +1,58 @@
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}: let
+  inherit (lib) mkIf getExe;
+  inherit (lib.strings) concatStringsSep;
+
+
+  deviceType = config.myOptions.device.roles.type;
+  acceptedTypes = ["laptop" "desktop"];
+
+  sessionData = config.services.displayManager.sessionData.desktops;
+  sessionPaths = concatStringsSep ":" [
+    "${sessionData}/share/xsessions"
+    "${sessionData}/share/wayland-sessions"
+  ];
+
+  defaultSession = {
+    user = "greeter";
+    command = concatStringsSep " " [
+      (getExe pkgs.greetd.tuigreet)
+      "--time"
+      "--remember"
+      "--remember-user-session"
+      "--asterisks"
+      "--sessions '${sessionPaths}'"
+    ];
+  };
+in {
+  config = mkIf (builtins.elem deviceType acceptedTypes) {
+    services.greetd = {
+      enable = true;
+      vt = 2;
+
+      # <https://man.sr.ht/~kennylevinsen/greetd/>
+      settings = {
+        # default session is what will be used if no session is selected
+        # in this case it'll be a TUI greeter
+        default_session = defaultSession;
+      };
+    };
+
+    # Suppress error messages on tuigreet. They sometimes obscure the TUI
+    # boundaries of the greeter.
+    # See: https://github.com/apognu/tuigreet/issues/68#issuecomment-1586359960
+    systemd.services.greetd.serviceConfig = {
+      Type = "idle";
+      StandardInputs = "tty";
+      StandardOutput = "tty";
+      StandardError = "journal";
+      TTYReset = true;
+      TTYVHangup = true;
+      TTYVTDisallocate = true;
+    };
+  };
+}

system/roles/workstation/display/login/pam.nix

@@ -0,0 +1,31 @@
+{lib, config, ...}: let
+  inherit (lib) mkIf;
+  deviceType = config.myOptions.device.roles.type;
+  acceptedTypes = ["laptop" "desktop"];
+in {
+  config = mkIf (builtins.elem deviceType acceptedTypes) {
+    # unlock GPG keyring on login
+    security.pam.services = let
+      gnupg = {
+        enable = true;
+        noAutostart = true;
+        storeOnly = true;
+      };
+    in {
+      login = {
+        enableGnomeKeyring = true;
+        inherit gnupg;
+      };
+
+      greetd = {
+        enableGnomeKeyring = true;
+        inherit gnupg;
+      };
+
+      tuigreet = {
+        enableGnomeKeyring = true;
+        inherit gnupg;
+      };
+    };
+  };
+}

system/roles/workstation/services/default.nix

@@ -4,6 +4,8 @@
     ./mount.nix
     ./printing.nix
     ./misc.nix
+    ./logind.nix
+    ./gnome-keyring.nix
   ];
 }
 

system/roles/workstation/services/gnome-keyring.nix

@@ -0,0 +1,20 @@
+{pkgs, lib, config, ...}: let
+  inherit (lib) mkIf;
+  deviceType = config.myOptions.device.roles.type;
+  acceptedTypes = ["laptop" "desktop"];
+in {
+  config = mkIf (builtins.elem deviceType acceptedTypes) {
+    services = {
+      udev.packages = with pkgs; [gnome.gnome-settings-daemon];
+      gnome.gnome-keyring.enable = true;
+    };
+
+    # seahorse is an application for managing encryption keys
+    # and passwords in the gnome keyring
+    programs.seahorse.enable = true;
+
+    xdg.portal.config.common = {
+      "org.freedesktop.impl.portal.Secret" = [ "gnome-keyring" ];
+    };
+  };
+}

system/roles/workstation/services/logind.nix

@@ -0,0 +1,18 @@
+{lib, config, ...}: let
+  inherit (lib) mkIf;
+  deviceType = config.myOptions.device.roles.type;
+  acceptedTypes = ["laptop" "desktop"];
+in {
+  config = mkIf (builtins.elem deviceType acceptedTypes) {
+    # despite being under logind, this has nothing to do with login
+    # it's about power management
+    services.logind = {
+      lidSwitch = "suspend-then-hibernate";
+      lidSwitchExternalPower = "lock";
+      extraConfig = ''
+        HandlePowerKey=suspend-then-hibernate
+        HibernateDelaySec=3600
+      '';
+    };
+  };
+}