What a clusterfuck

modules/system/programs/appimage/default.nix

@@ -0,0 +1,7 @@
+{ ... }:
+{
+  programs.appimage = {
+    enable = true;
+    binfmt = true;
+  };
+}

modules/system/programs/default.nix

@@ -0,0 +1,9 @@
+{ ... }:
+{
+  imports = [
+    ./appimage
+    ./gaming
+    ./git
+    ./security
+  ];
+}

modules/system/programs/gaming/default.nix

@@ -0,0 +1,9 @@
+{ ... }:
+{
+  programs.gamemode = {
+    enable = true;
+    settings.general.renice = 10;
+  };
+
+  hardware.steam-hardware.enable = true;
+}

modules/system/programs/git/default.nix

@@ -0,0 +1,11 @@
+{ ... }:
+{
+  imports = [
+    ./gpg
+  ];
+
+  programs.git = {
+    enable = true;
+    lfs.enable = true;
+  };
+}

modules/system/programs/git/gpg/default.nix

@@ -0,0 +1,11 @@
+{ pkgs, ... }:
+{
+  programs.gnupg.agent = {
+    enable = true;
+    enableSSHSupport = true;
+  };
+
+  environment.systemPackages = with pkgs; [
+    git-crypt
+  ];
+}

modules/system/programs/security/apparmor/default.nix

@@ -0,0 +1,4 @@
+{ ... }:
+{
+  security.apparmor.enable = true;
+}

modules/system/programs/security/default.nix

@@ -0,0 +1,9 @@
+{ ... }:
+{
+  imports = [
+    ./apparmor
+    ./doas
+    ./gnome-keyring
+    ./polkit
+  ];
+}

modules/system/programs/security/doas/default.nix

@@ -0,0 +1,16 @@
+{ ... }:
+{
+  security = {
+    sudo.enable = false;
+    doas = {
+      enable = true;
+      extraRules = [
+        { # Give wheel root access
+          groups = ["wheel"];
+          keepEnv = true;
+          persist = true;
+        }
+      ];
+    };
+  };
+}

modules/system/programs/security/gnome-keyring/default.nix

@@ -0,0 +1,4 @@
+{ ... }:
+{
+  services.gnome.gnome-keyring.enable = true;
+}

modules/system/programs/security/polkit/default.nix

@@ -0,0 +1,7 @@
+{ ... }:
+{
+  security = {
+    polkit.enable = true;
+    rtkit.enable = true;
+  };
+}