From d071c00946eb572abb6db39462a56015977ef5f6 Mon Sep 17 00:00:00 2001
From: Roy Dumblauskas <roydumblauskas@gmail.com>
Date: Tue, 19 May 2026 21:44:40 -0500
Subject: [PATCH] roy-config

---
 nixos/configuration.nix                          | 16 ++++++----------
 nixos/roy-config/hypr/hyprland.conf              |  0
 .../move-workspace-to-unfocused-monitor.sh       |  3 +++
 .../hypr/scripts/switch-to-unfocused-monitor.sh  |  4 ++++
 nixos/roy-config/waybar/config                   |  0
 nixos/roy-config/waybar/style.css                |  0
 6 files changed, 13 insertions(+), 10 deletions(-)
 mode change 100644 => 100755 nixos/roy-config/hypr/hyprland.conf
 create mode 100755 nixos/roy-config/hypr/scripts/move-workspace-to-unfocused-monitor.sh
 create mode 100755 nixos/roy-config/hypr/scripts/switch-to-unfocused-monitor.sh
 mode change 100644 => 100755 nixos/roy-config/waybar/config
 mode change 100644 => 100755 nixos/roy-config/waybar/style.css

diff --git a/nixos/configuration.nix b/nixos/configuration.nix
index cf58170..eabd0e5 100755
--- a/nixos/configuration.nix
+++ b/nixos/configuration.nix
@@ -73,9 +73,9 @@ in
     acceptTerms = true;
     defaults = {
       # use staging for testing
-      server = "https://acme-staging-v02.api.letsencrypt.org/directory";
+      # server = "https://acme-staging-v02.api.letsencrypt.org/directory";
       # use prod for deploy
-      # server = "https://acme-v02.api.letsencrypt.org/directory";
+      server = "https://acme-v02.api.letsencrypt.org/directory";
       email = "roydumblauskas@gmail.com";
       dnsProvider = "cloudflare";
       # When the service CHECKS to see if certs are near expiry (< 30 days)
@@ -85,26 +85,22 @@ in
         CF_API_KEY_FILE = config.sops.secrets."cloudflare-api-key".path;
       };
     };
+    # only generate for static site
     certs = {
       "roypository.com" = {
-        domain = "*.roypository.com";
+        domain = "nimh.roypository.com";
         group = "nginx";
       };
     };
   };
 
   # Setup vhosts via nginx
+  # all more complicated should route
+  # through k3s traefic
   services.nginx = {
     enable = true;
     logError = "stderr";
 
-    virtualHosts."roypository.com" = {
-      forceSSL = true;
-      useACMEHost = "roypository.com";
-
-      locations = { };
-    };
-
     virtualHosts."nimh.roypository.com" = {
       forceSSL = true;
       useACMEHost = "roypository.com";
diff --git a/nixos/roy-config/hypr/hyprland.conf b/nixos/roy-config/hypr/hyprland.conf
old mode 100644
new mode 100755
diff --git a/nixos/roy-config/hypr/scripts/move-workspace-to-unfocused-monitor.sh b/nixos/roy-config/hypr/scripts/move-workspace-to-unfocused-monitor.sh
new file mode 100755
index 0000000..4a22173
--- /dev/null
+++ b/nixos/roy-config/hypr/scripts/move-workspace-to-unfocused-monitor.sh
@@ -0,0 +1,3 @@
+#!/bin/sh
+monitor=$(hyprctl monitors -j | jq -r 'first(.[] | select(.focused == false) | .name)')
+hyprctl dispatch movecurrentworkspacetomonitor $monitor
diff --git a/nixos/roy-config/hypr/scripts/switch-to-unfocused-monitor.sh b/nixos/roy-config/hypr/scripts/switch-to-unfocused-monitor.sh
new file mode 100755
index 0000000..85c7bdb
--- /dev/null
+++ b/nixos/roy-config/hypr/scripts/switch-to-unfocused-monitor.sh
@@ -0,0 +1,4 @@
+#!/bin/sh
+monitor=$(hyprctl monitors -j | jq -r 'first(.[] | select(.focused == false) | .name)')
+
+hyprctl dispatch focusmonitor $monitor
diff --git a/nixos/roy-config/waybar/config b/nixos/roy-config/waybar/config
old mode 100644
new mode 100755
diff --git a/nixos/roy-config/waybar/style.css b/nixos/roy-config/waybar/style.css
old mode 100644
new mode 100755