Add NixOS modules for desktop, greetd and services

modules/services.nix

@@ -0,0 +1,104 @@
+# ABOUTME: systemd user and system services for the Moonarch session.
+# ABOUTME: Rebuilt from defaults/etc/systemd/ because the units use FHS paths.
+
+{ pkgs, lib, ... }:
+
+{
+  # --- Audio ---
+  services.pipewire = {
+    enable = true;
+    alsa.enable = true;
+    alsa.support32Bit = true;
+    pulse.enable = true;
+    jack.enable = true;
+  };
+
+  # --- Hardware ---
+  hardware.bluetooth.enable = true;
+  services.blueman.enable = true;
+  services.udisks2.enable = true;
+  services.upower.enable = true;
+  services.gvfs.enable = true;
+  services.fwupd.enable = true;
+
+  # --- Firewall, replaces the ufw calls in post-install.sh ---
+  networking.firewall.enable = true;
+
+  # --- Session services ---
+  #
+  # Rebuilt rather than copied: the upstream units reference /usr/bin/,
+  # which does not exist under Nix.
+
+  systemd.user.services.kanshi = {
+    description = "Dynamic display configuration";
+    partOf = [ "graphical-session.target" ];
+    after = [ "graphical-session.target" ];
+    wantedBy = [ "graphical-session.target" ];
+    serviceConfig = {
+      Type = "simple";
+      ExecStart = lib.getExe pkgs.kanshi;
+      Restart = "on-failure";
+      RestartSec = 3;
+    };
+  };
+
+  systemd.user.services.cliphist-text = {
+    description = "Clipboard history manager (text)";
+    partOf = [ "graphical-session.target" ];
+    wantedBy = [ "graphical-session.target" ];
+    serviceConfig = {
+      Type = "simple";
+      ExecStartPre = "${pkgs.runtimeShell} -c 'mkdir -p $XDG_RUNTIME_DIR/cliphist && ${pkgs.cliphist}/bin/cliphist wipe'";
+      ExecStart = "${pkgs.wl-clipboard}/bin/wl-paste --watch ${pkgs.cliphist}/bin/cliphist -db-path %t/cliphist/db store";
+      Restart = "on-failure";
+      RestartSec = 3;
+    };
+  };
+
+  systemd.user.services.cliphist-image = {
+    description = "Clipboard history manager (image)";
+    partOf = [ "graphical-session.target" ];
+    after = [ "cliphist-text.service" ];
+    wantedBy = [ "graphical-session.target" ];
+    serviceConfig = {
+      Type = "simple";
+      ExecStart = "${pkgs.wl-clipboard}/bin/wl-paste --type image --watch ${pkgs.cliphist}/bin/cliphist -db-path %t/cliphist/db store";
+      Restart = "on-failure";
+      RestartSec = 3;
+    };
+  };
+
+  # Night light stays disabled by default: it is a user toggle. Enabling it
+  # here would create a system-scope symlink that overrides any
+  # `systemctl --user disable` — same reasoning as in moonarch-git/PKGBUILD.
+  systemd.user.services.wlsunset = {
+    description = "Wlsunset night light (blue light filter)";
+    partOf = [ "graphical-session.target" ];
+    after = [ "graphical-session.target" "kanshi.service" ];
+    wantedBy = [ ];
+    serviceConfig = {
+      Type = "simple";
+      ExecStartPre = "${pkgs.coreutils}/bin/sleep 2";
+      ExecStart = "${lib.getExe pkgs.wlsunset} -T 6500 -t 5000 -S 00:00 -s 00:01";
+      # Leading '-' keeps a missing waybar non-fatal, otherwise pkill's exit 1
+      # fails the unit and Restart=on-failure spins it in a flicker loop.
+      ExecStartPost = "-${pkgs.procps}/bin/pkill -RTMIN+11 waybar";
+      Restart = "on-failure";
+      RestartSec = 3;
+    };
+  };
+
+  # Polkit authentication agent for the graphical session.
+  systemd.user.services.polkit-gnome-authentication-agent-1 = {
+    description = "polkit-gnome authentication agent";
+    partOf = [ "graphical-session.target" ];
+    after = [ "graphical-session.target" ];
+    wantedBy = [ "graphical-session.target" ];
+    serviceConfig = {
+      Type = "simple";
+      ExecStart = "${pkgs.polkit_gnome}/libexec/polkit-gnome-authentication-agent-1";
+      Restart = "on-failure";
+      RestartSec = 1;
+    };
+  };
+}