use switch-to-configuration-ng and nixos-rebuild-ng

migrate secureboot key /etc/secureboot -> /var/lib/sbctl

hardware.pulseaudio -> services.pulseaudio

enable machine-learning for immich

modules/hardware.nix

@@ -16,15 +16,17 @@ in
     })
     (lib.mkIf (!cfg.sound.disable) {
       security.rtkit.enable = true;
-      hardware.pulseaudio.enable = lib.mkForce false; # disable pulseAudio
-      services.pipewire = {
-        enable = true;
-        alsa = {
+      services = {
+        pulseaudio.enable = lib.mkForce false; # disable pulseAudio
+        pipewire = {
           enable = true;
-          support32Bit = true;
+          alsa = {
+            enable = true;
+            support32Bit = true;
+          };
+          pulse.enable = true;
+          jack.enable = false;
         };
-        pulse.enable = true;
-        jack.enable = false;
       };
     })
 

modules/misc.nix

@@ -11,36 +11,39 @@
   };
 
   config = {
+
     nixpkgs.config = {
       allowAliases = false;
       allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) config.local.allowedUnfree;
     };
 
+    local.packages = {
+      inherit (pkgs)
+        bottom # view tasks
+        efibootmgr # efi editor
+        nix-output-monitor # nom nom nom nom;
+        nix-tree # view packages
+        pciutils # lspci
+        nixos-rebuild-ng
+        ;
+      nix-janitor = pkgs.symlinkJoin {
+        name = "nix-janitor";
+        paths = [ nix-janitor.packages.default ];
+        nativeBuildInputs = [ pkgs.makeBinaryWrapper ];
+        postBuild = ''
+          wrapProgram "$out/bin/janitor" \
+          --suffix PATH : ${lib.makeBinPath [ config.nix.package ]}
+        '';
+      };
+
+    };
+
     programs.git.enable = true;
     # Mr sandro why
     services.libinput.enable = true;
     programs.nano.enable = false;
 
-    environment.defaultPackages = lib.mkForce (
-      builtins.attrValues {
-        inherit (pkgs)
-          bottom # view tasks
-          efibootmgr # efi editor
-          nix-output-monitor # nom nom nom nom;
-          nix-tree # view packages
-          pciutils # lspci
-          ;
-        nix-janitor = pkgs.symlinkJoin {
-          name = "nix-janitor";
-          paths = [ nix-janitor.packages.default ];
-          nativeBuildInputs = [ pkgs.makeBinaryWrapper ];
-          postBuild = ''
-            wrapProgram "$out/bin/janitor" \
-            --suffix PATH : ${lib.makeBinPath [ config.nix.package ]}
-          '';
-        };
-      }
-    );
+    environment.defaultPackages = lib.mkForce [ ];
 
     #enable ssh
     programs.mtr.enable = true; # ping and traceroute
@@ -78,5 +81,7 @@
     documentation.nixos.enable = false;
     # Useless with flakes (without configuring)
     programs.command-not-found.enable = false;
+
+    system.switch.enableNg = true;
   };
 }