Replace dotfiles with Nix

.github/workflows/check.yml

@@ -0,0 +1,62 @@
+name: Flake Tests
+
+on: [push, pull_request, workflow_dispatch]
+
+jobs:
+  flake-check:
+    name: Flake Check
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - uses: cachix/install-nix-action@v31
+        with:
+          install_url: https://nixos.org/nix/install
+          extra_nix_config: |
+            auto-optimise-store = true
+            access-tokens = github.com=${{ secrets.GITHUB_TOKEN }}
+            experimental-features = nix-command flakes
+      - run: nix flake check --all-systems .
+  lint:
+    name: Nix lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - uses: cachix/install-nix-action@v31
+        with:
+          install_url: https://nixos.org/nix/install
+          extra_nix_config: |
+            auto-optimise-store = true
+            access-tokens = github.com=${{ secrets.GITHUB_TOKEN }}
+      - uses: workflow/nix-shell-action@v3
+        with:
+          packages: nil
+          script: |
+            find . -name '*.nix' -print0 | xargs -0 nil diagnostics | tee /tmp/findings.txt
+            if [ -s "/tmp/findings.txt" ]; then
+              echo "Nil detected warnings/errors"
+              exit 1
+            fi
+  formatter:
+    name: Nix formatter
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - uses: cachix/install-nix-action@v31
+        with:
+          install_url: https://nixos.org/nix/install
+          extra_nix_config: |
+            auto-optimise-store = true
+            access-tokens = github.com=${{ secrets.GITHUB_TOKEN }}
+      - uses: workflow/nix-shell-action@v3
+        with:
+          packages: nixfmt-tree,git
+          script: |
+            treefmt
+            GIT_CHANGES="$(git status --porcelain=v1)"
+            if [[ -n "$GIT_CHANGES" ]]; then
+              echo "Code not formatted"
+              echo "Run nixfmt and commit changes"
+              echo "Affected files:"
+              echo "$GIT_CHANGES"
+              exit 1
+            fi

.sops.yaml

@@ -0,0 +1,25 @@
+keys:
+  hosts:
+    qemu-nixos-btw: &host_qemu-nixos-btw_age |
+      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
+    dell-xps9360-nixos-btw: &host_dell-xps9360-nixos-btw_age |
+      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
+
+  users:
+    rtucek:
+      user_rtucek_pgp_key_yubi_13364058: &user_rtucek_pgp_key_yubi_13364058 "0x416CF1EF9AAF90BC"
+      user_rtucek_age_identity: &user_rtucek_age_identity |
+        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
+
+creation_rules:
+  - key_groups:
+    - pgp:
+      - *user_rtucek_pgp_key_yubi_13364058
+      age:
+      - *user_rtucek_age_identity
+      - *host_qemu-nixos-btw_age
+      - *host_dell-xps9360-nixos-btw_age
+
+stores:
+  yaml:
+    indent: 2