entirely vibed refactor

nixos/modules/profiles/workstation.nix

@@ -0,0 +1,72 @@
+{ pkgs, pkgs-unstable, ... }:
+{
+  boot = {
+    plymouth.enable = true;
+    kernelParams = [
+      "quiet"
+      "udev.log_level=3"
+      "systemd.show_status=auto"
+    ];
+  };
+
+  security.sudo.wheelNeedsPassword = false;
+
+  services = {
+    printing.enable = true;
+    pulseaudio.enable = false;
+    pipewire = {
+      enable = true;
+      alsa.enable = true;
+      pulse.enable = true;
+      jack.enable = true;
+    };
+    xserver.xkb.layout = "se";
+    gnome = {
+      gnome-keyring.enable = true;
+      gnome-initial-setup.enable = false;
+    };
+    udev.packages = [
+      pkgs.via
+      pkgs.qmk
+      pkgs.qmk-udev-rules
+      pkgs.qmk_hid
+    ];
+    fwupd.enable = true;
+    openssh.settings.PasswordAuthentication = false;
+  };
+
+  programs.dconf.enable = true;
+
+  networking.firewall.allowedTCPPorts = [
+    1312
+    8000
+    8080
+    8888
+  ];
+
+  environment = {
+    systemPackages = [
+      pkgs.discord
+      pkgs.signal-desktop
+      pkgs.mumble
+      (pkgs.chromium.override { enableWideVine = true; })
+      pkgs.google-chrome
+      pkgs.vscodium
+      pkgs.codex
+      pkgs.devenv
+      pkgs.direnv
+      pkgs.syncthing
+      pkgs.steam
+      pkgs.krita
+      pkgs.edk2-uefi-shell
+      pkgs-unstable.obsidian
+      pkgs.gparted
+      pkgs.vlc
+      pkgs.via
+      pkgs.plymouth
+      pkgs.xorg.xhost
+      (pkgs.bottles.override { removeWarningPopup = true; })
+    ];
+    sessionVariables.NIXOS_OZONE_WL = "1";
+  };
+}