update flake lock

flake.lock

@@ -467,11 +467,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1723688146,
-        "narHash": "sha256-sqLwJcHYeWLOeP/XoLwAtYjr01TISlkOfz+NG82pbdg=",
+        "lastModified": 1724098845,
+        "narHash": "sha256-D5HwjQw/02fuXbR4LCTo64koglP2j99hkDR79/3yLOE=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "c3d4ac725177c030b1e289015989da2ad9d56af0",
+        "rev": "f1bad50880bae73ff2d82fafc22010b4fc097a9c",
         "type": "github"
       },
       "original": {
@@ -559,11 +559,11 @@
     },
     "nixpkgs-unstable_2": {
       "locked": {
-        "lastModified": 1723637854,
-        "narHash": "sha256-med8+5DSWa2UnOqtdICndjDAEjxr5D7zaIiK4pn0Q7c=",
+        "lastModified": 1723991338,
+        "narHash": "sha256-Grh5PF0+gootJfOJFenTTxDTYPidA3V28dqJ/WV7iis=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "c3aa7b8938b17aebd2deecf7be0636000d62a2b9",
+        "rev": "8a3354191c0d7144db9756a74755672387b702ba",
         "type": "github"
       },
       "original": {

flake.nix

@@ -79,6 +79,7 @@
       inputs.nixpkgs.follows = "nixpkgs";
     };
 
+    # ghostty - 👻
     ghostty = {
       url = "git+ssh://git@github.com/ghostty-org/ghostty";
     };

nixos/home/jahanson/workstation.nix

@@ -33,6 +33,7 @@ with config;
         solaar
         talosctl
         termius
+        unstable.bruno
         unstable.fractal
         unstable.peazip
         unstable.telegram-desktop

nixos/modules/nixos/editor/vscode.nix

@@ -25,6 +25,7 @@ let
     "tamasfe.even-better-toml"
     "tyriar.sort-lines"
     "yzhang.markdown-all-in-one"
+    "foxundermoon.shell-format"
   ];
   # Nixpkgs Extensions. These are updated whenver they get around to it.
   vscodeNixpkgsExtensions = [

nixos/modules/nixos/services/dnsmasq/default.nix

@@ -18,6 +18,11 @@ in
   };
 
   config = mkIf cfg.enable {
+    # Ensure the tftpRoot directory exists
+    systemd.tmpfiles.rules = [
+      "d ${cfg.tftpRoot} 0755 dnsmasq dnsmasq"
+    ];
+
     networking.firewall = {
       # dhcp ports
       allowedUDPPorts = [ 67 68 ]; # server/client

nixos/modules/nixos/services/matchbox/default.nix

@@ -10,14 +10,23 @@ in
     dataPath = mkOption {
       type = types.str;
       example = "/var/lib/matchbox";
+      description = "This is where profiles, groups, and other matchbox configuration is stored.";
     };
     assetPath = mkOption {
       type = types.str;
-      example = "/nas/matchbox/assets";
+      example = "/var/lib/matchbox/assets";
+      description = "This is where matchbox will look for assets like kernels and initrds.";
     };
   };
 
   config = mkIf cfg.enable {
+    # Ensure the dataPath and assetPath directories exist
+    systemd.tmpfiles.rules = [
+      "d ${cfg.dataPath} 0755 matchbox matchbox"
+      "d ${cfg.assetPath} 0755 matchbox matchbox"
+    ];
+
+    # Matchbox Server for PXE booting via device profiles
     environment.systemPackages = [
       cfg.package
     ];
@@ -27,7 +36,6 @@ in
       allowedTCPPorts = [ 8086 ];
     };
 
-    # Matchbox Server for PXE booting via device profiles
     users.groups.matchbox = { };
     users.users = {
       matchbox = {

nixos/profiles/role-dev.nix

@@ -6,19 +6,20 @@ with config;
 {
   # git & vim are in global
   environment.systemPackages = with pkgs; [
-    jq
-    yq
     btop
     dnsutils
-    nix
     fira-code-nerdfont
+    jq
+    nix
+    yq
 
     # TODO Move
-    nil
-    nixpkgs-fmt
-    statix
     gh
     go
+    nil
+    nixpkgs-fmt
+    shfmt
+    statix
 
     # bind # for dns utils like named-checkconf
     inputs.nix-inspect.packages.${pkgs.system}.default