feat: update hyprland, helix, bootloader and other configs

Changelog:
- autostart: remove hypridle from autostart script
- helix: add copilot LSP for Rust, JS/TS variants
- hyprland:
  - Refactor window rules with regex patterns
  - Update brightness controls for intel_backlight
  - Adjust pyprland scratchpad configurations
- bootloader:
  - Add i915 kernel modules
  - Disable initrd verbose logging
- greetd: update tuigreet command to use uwsm
- hyprland: enable hyprlock, hypridle services
- linux-kernel: add security hardening params
- ollama: add new LLM models (gemma3, deepcoder)
- utils: add sqlx-cli and kitty
- kitty: add config
- virtualisation:
  - Add lima, nerdctl
- vpn:
  - Enable mullvad VPN
  - Add mullvad and tor browsers
- stylus-themes: update to latest

nixos/bootloader.nix

@@ -6,7 +6,10 @@
   boot.loader.efi.canTouchEfiVariables = true;
   boot.loader.timeout = 2;
   boot.initrd.enable = true;
+  boot.initrd.verbose = false;
   boot.initrd.systemd.enable = true;
+  boot.initrd.availableKernelModules = [ "i915" ];
+  boot.initrd.kernelModules          = [ "i915" ];
   boot.consoleLogLevel = 3;
   boot.plymouth = {
     enable = true;

nixos/display-manager.nix

@@ -6,12 +6,21 @@
     enable = true;
     settings = {
       default_session = {
-        command = "${pkgs.greetd.tuigreet}/bin/tuigreet --time --time-format '%I:%M %p | %a • %h | %F' --cmd Hyprland";
-        user = "greeter";
+        command = "${pkgs.greetd.tuigreet}/bin/tuigreet \
+          --time --time-format '%I:%M %p | %a • %h | %F' \
+          --cmd 'uwsm start hyprland'";
+        user    = "greeter";
       };
     };
   };
 
+  users.users.greeter = {
+    isNormalUser = false;
+    description  = "greetd greeter user";
+    extraGroups  = [ "video" "audio" ];
+    linger        = true;
+  };
+
   environment.systemPackages = with pkgs; [
     greetd.tuigreet
   ];

nixos/flake.nix

@@ -50,7 +50,7 @@
         ./mosh.nix
         ./firewall.nix
         ./dns.nix
-        # ./vpn.nix
+        ./vpn.nix
         ./users.nix
         ./virtualisation.nix
         ./programming-languages.nix

nixos/hyprland.nix

@@ -2,10 +2,16 @@
 
 {
   # Enable Hyprland
-  programs.hyprland.enable = true;
+  programs.hyprland = {
+    enable = true;
+    withUWSM = true;
+  };
   environment.sessionVariables.NIXOS_OZONE_WL = "1";
   environment.sessionVariables.WLR_NO_HARDWARE_CURSORS = "1";
 
+  programs.hyprlock.enable = true;
+  services.hypridle.enable = true;
+
   environment.systemPackages = with pkgs; [
     pyprland
     hyprpicker
@@ -15,6 +21,7 @@
     hyprpaper
 
     inputs.wezterm.packages.${pkgs.system}.default
+    kitty
     cool-retro-term
 
     starship

nixos/linux-kernel.nix

@@ -2,10 +2,18 @@
 
 {
   # Linux Kernel
+  security.forcePageTableIsolation = true;
+  security.lockKernelModules = true;
+  # security.protectKernelImage = true;
+  security.unprivilegedUsernsClone = true;
+  security.virtualisation.flushL1DataCache = "cond";
   boot.kernelPackages = pkgs.linuxKernel.packages.linux_zen;
   boot.kernelParams = [ 
-    "splash"
     "quiet"
+    "splash"
+    "loglevel=3"
+    "rd.udev.log_priority=3"
+    "systemd.show_status=auto"
     "fbcon=nodefer"
     "vt.global_cursor_default=0"
     "kernel.modules_disabled=1"

nixos/llm.nix

@@ -4,7 +4,7 @@
 
   services.ollama = {
     enable = true;
-    loadModels = [ "llama3.2:3b" "llama3.2-vision:11b" "phi4:14b" "deepseek-r1:7b" "dolphin3:8b" "smallthinker:3b" "nomic-embed-text" ];
+    loadModels = [ "llama3.2:3b" "llama3.2-vision:11b" "phi4:14b" "deepseek-r1:7b" "dolphin3:8b" "smallthinker:3b" "nomic-embed-text" "gemma3:12b" "gemma3:27b" "deepcoder:14b" ];
     acceleration = "cuda";
   };
 

nixos/utils.nix

@@ -14,5 +14,6 @@
     surrealdb-migrations
     surrealist
     trunk
+    sqlx-cli
   ];
 }

nixos/virtualisation.nix

@@ -1,6 +1,12 @@
 { pkgs, ... }:
 
 {
+  # Enable Kasm
+  # services.kasmweb = {
+  #   enable = true;
+  #   listenPort = 9999;
+  # };
+
   # Enable Containerd
   # virtualisation.containerd.enable = true;
 
@@ -15,6 +21,7 @@
   # };
   # users.extraGroups.docker.members = [ "xnm" ];
 
+
   # Enable Podman
   virtualisation.podman = {
     enable = true;
@@ -31,7 +38,7 @@
 
   environment.systemPackages = with pkgs; [
     nvidia-docker
-    # nerdctl
+    nerdctl
 
     # firecracker
     # firectl
@@ -39,6 +46,7 @@
 
     distrobox
     qemu
+    lima
 
     podman-compose
     podman-tui

nixos/vpn.nix

@@ -7,5 +7,8 @@
 
   environment.systemPackages = with pkgs; [
     mullvad-closest
+
+    mullvad-browser
+    tor-browser
   ];
 }