probably broken

system/profiles/live/default.nix

@@ -0,0 +1,121 @@
+{ pkgs, inputs, ... }: {
+
+    imports = with inputs; [
+        
+        disko.nixosModules.default
+
+        (import ./disko.nix { device = "/dev/mmcblk0"; })
+
+        sops-nix.nixosModules.sops
+
+        home-manager.nixosModules.default
+
+    ];
+
+    config = {
+
+        hardware.enableRedistributableFirmware = true;
+        hardware.enableAllHardware = true;
+        
+        programs.zsh.enable = true;
+
+        environment.shells = with pkgs; [ zsh bashInteractive ];
+
+        networking = {
+            nameservers = [ "1.1.1.1" "1.0.0.1" ];
+            networkmanager.enable = true;
+        };
+
+        nixpkgs.hostPlatform = "x86_64-linux";
+        
+        boot = {
+            loader = {
+                systemd-boot.enable = true;
+                efi.canTouchEfiVariables = true;
+            };
+        };
+
+        users.users."nathan" = {
+            hashedPassword = "$y$j9T$F0pn6l4C45lz4a0FTZLqE0$Fc48Ptbmz/3MJCk/Jsaqop4ff.bY3J3GcjhmJx5R7k6";
+            packages = with pkgs; [ 
+                git 
+                nerd-fonts.fira-code
+            ];
+        };
+
+        sops = {
+            age.keyFile = "/var/lib/sops/age/keys.txt";
+            defaultSopsFile = ./secrets.yaml;
+            defaultSopsFormat = "yaml";
+            #secrets."nathan/pass".neededForUsers = true;
+        };
+
+        sysconfig = {
+            #remoteBuildClient = true;
+            host = "live";
+            graphical = true;
+            users = {
+                nathan = {
+                    extraGroups = [ "wheel" "networkmanager" ];
+                    #hashedPasswordFile = config.sops.secrets."nathan/pass".path;
+                    shell = pkgs.zsh;
+                    sshKeys = [
+                        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAsU69CxfQk58CvItPN426h5Alnpb60SH37wet97Vb57 nathan@laptop"
+                    ];
+                    home-manager = {
+                        enable = true;
+                        standalone = false;
+                        extraModules = [
+                        {
+                            homeconfig = {
+                                minimal = false;
+                                hyprland.enable = true;
+                                hyprlock.enable = true;
+                                wal.enable = true;
+                                mpd.enable = true;
+                                hyprpanel.enable = true;
+                                calcurse.enable = true;
+                                rofi.enable = true;
+                                firefox.enable = true;
+                                #git.enable = true;
+                                nh.enable = true;
+                            };
+                        } 
+                        ];
+                    };
+                };
+            };
+
+            services = {
+                sddm.enable = true;
+                openssh.enable = true;
+                pipewire.enable = true;
+                #kdePlasma6.enable = true;
+                netbird.enable = true;
+                #ollama.enable = true;
+            };
+
+            programs = {
+                #steam.enable = true;
+                hyprpanel.enable = true;
+                hyprland.enable = true;
+            };
+
+
+            virtualization = {
+
+                wyoming = {
+                    enable = false;
+                };
+
+                homeassistant = {
+                    enable = false;
+                };
+            };
+        };
+
+        system.stateVersion = "25.05";
+
+        fonts.packages = with pkgs; [ nerd-fonts.fira-code ];
+    };
+}

system/profiles/live/disko.nix

@@ -0,0 +1,66 @@
+{
+  device1 ? throw "Set this to your disk device, e.g. /dev/sda",
+  ...
+}: {
+  disko.devices = {
+      disk = {
+          main = {
+              device = device1;
+              type = "disk";
+              content = {
+                  type = "gpt";
+                  partitions = {
+                      boot = {
+                          name = "boot";
+                          size = "1M";
+                          type = "EF02";
+                      };
+                      esp = {
+                          name = "ESP";
+                          size = "500M";
+                          type = "EF00";
+                          content = {
+                              type = "filesystem";
+                              format = "vfat";
+                              mountpoint = "/boot";
+                          };
+                      };
+                      root = {
+                          name = "root";
+                          size = "100%";
+                          content = {
+                              type = "lvm_pv";
+                              vg = "root_vg";
+                          };
+                      };
+                  };
+              };
+          };
+      };
+      lvm_vg = {
+          root_vg = {
+              type = "lvm_vg";
+              lvs = {
+                  root = {
+                      size = "100%FREE";
+                      content = {
+                          type = "btrfs";
+                          extraArgs = ["-f"];
+
+                          subvolumes = {
+                              "/root" = {
+                                  mountpoint = "/";
+                              };
+
+                              "/nix" = {
+                                  mountOptions = ["subvol=nix" "noatime"];
+                                  mountpoint = "/nix";
+                              };
+                          };
+                      };
+                  };
+              };
+          };
+      };    
+  };
+}

system/profiles/live/secrets.yaml

@@ -0,0 +1,17 @@
+nathan:
+    pass: ENC[AES256_GCM,data:0hmcbyTLbmadTAMoSeOgBmpqgtCKtfrY1EIxIUoxgo+3297+jZqcsSmhPlFKtbornezm+7uPRzaVRHyp2G0Ee6mG4FbzUfGYFg==,iv:F2aTS/BPPxTemu4vEy9H0FY0HUEBWaRFeaoMr8TJbmA=,tag:Ai90KJluCimR6OG5BtCnVQ==,type:str]
+sops:
+    age:
+        - recipient: age1yqgyp2uxz4lzrc9f9ka0mfjl5fr6ahf8nf24nlmran2wulg6fpvq9hyp9q
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5cUF3YWY2STgwc1pzREJP
+            QndUajV6WUJFZEdtOGNOQ05Ua1hGM25IbzJJCjF3Z24rc0JwMSt5bnpIVDZ0ZGJG
+            ZE9LdEU3bXhsMUxEL0hlMTNTc0VkR0kKLS0tIHhWOGJocS94eWJUSXdtaldJSG50
+            TjZCN3RneGtJa0hLNU1yTUlLMDJpcEUKNvpcKkNXeRyFsn0CRjSKNb89l1864I6A
+            Yzijw0c0BVfivhn2wAyq0fYuw2rT+vIJdFUHvIgxkpkZFl4n/RucOQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-08-31T19:51:15Z"
+    mac: ENC[AES256_GCM,data:L4SK7iaPX3dPJTyl2RgSuqMcoFRm8q9k64TsroV3tT1uWn0J9XRBj9KXgGj/qLloQkgmZsmtct8w2x5tYYosh5k1+056/DeTD8l/Nw5339qKJppRjg6jYNtw02ZGPSNFQdmGNQU9NOOuT8Q94sl0mphwlYhFV1Tf1r/AoSg1ja8=,iv:/qEVdxOR8CDJ2plE8Ez9ML+u+lKPmsNfV0GyXgBbQRk=,tag:EyjdJzvuHXn+0+5hOk0dVg==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.10.2