dev-config/work.nix at main · samuelho-dev/dev-config · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
{
  username,
  homeDirectory,
  ...
}:
{
  # Import dev-config Home Manager module
  imports = [ ./modules/home-manager ];

  home = {
    username = username;
    homeDirectory = homeDirectory;
    stateVersion = "24.05";
  };

  # Minimal session path
  home.sessionPath = [
    "$HOME/.nix-profile/bin"
    "$HOME/.local/bin"
    "$HOME/.bun/bin"
    "$HOME/Library/pnpm"
  ];

  # Session variables
  home.sessionVariables = {
    EDITOR = "nvim";
    VISUAL = "nvim";
    CLAUDE_BASH_MAINTAIN_PROJECT_WORKING_DIR = "1";
  };

  # NO sops-nix secrets at work

  dev-config = {
    enable = true;

    # Core
    zsh = {
      enable = true;
      zshrcSource = null;
      zprofileSource = null;
      p10kSource = null;
    };
    git = {
      enable = true;
      userName = "samuelho-dev";
      userEmail = "samuelho343@gmail.com";
      signing.enable = false; # No 1Password on work machine
    };
    neovim.enable = true;
    tmux = {
      enable = true;
      devpodConnect.enable = false;
    };
    ssh = {
      enable = true;
      onePasswordAgent.enable = false; # No 1Password on work machine
      devpods.enable = false;
    };

    # Dev tooling
    biome = {
      enable = true;
      gritql.enable = true;
    };
    npm.enable = true;

    # Claude Code — work MCP servers, explicit trust only
    claude-code = {
      enable = true;
      litellm.enable = false;
      enableAllProjectMcpServers = true;
      mcpServers = { }; # Add work-specific servers here
    };

    # Opencode (Gemini assistant)
    opencode.enable = true;

    ghostty = {
      enable = true;
      package = null; # Installed via Homebrew on macOS (not in nixpkgs)
    };
    yazi.enable = true;
    sops-env.enable = false; # No sops secrets at work
  };

  programs.home-manager.enable = true;
}