feat: add stroma host (#430)

* init Stroma host

* add Things

* fix system.stateVersion

Addresses this error when switching to the flake:

```
error: Build user group has mismatching GID, aborting activation
The default Nix build user group ID was changed from 30000 to 350.
You are currently managing Nix build users with nix-darwin, but your
nixbld group has GID 350, whereas we expected 30000.

Possible causes include setting up a new Nix installation with an
existing nix-darwin configuration, setting up a new nix-darwin
installation with an existing Nix installation, or manually increasing
your `system.stateVersion` setting.

You can set the configured group ID to match the actual value:

    ids.gids.nixbld = 350;

We do not recommend trying to change the group ID with macOS user
management tools without a complete uninstallation and reinstallation
of Nix.
```

* disable deprecated homebrew option

See also: Homebrew/brew#20755

* restore other apps

* restore dock settings

* use Stroma public key

Author: stackptr

flake.nix

@@ -121,6 +121,11 @@
             hostname = "Rhizome";
             username = "corey";
           };
+
+          Stroma = mkDarwinHost {
+            hostname = "Stroma";
+            username = "corey";
+          };
         };
 
         deploy = {

hosts/Stroma/default.nix

@@ -0,0 +1,18 @@
+{
+  config,
+  pkgs,
+  ...
+}: {
+  imports = [
+    ./dock.nix
+    ./hardware.nix
+    ./programs.nix
+  ];
+
+  rc.darwin.defaults = {
+    fonts = true;
+    homebrew = true;
+    security = true;
+    system = true;
+  };
+}

hosts/Stroma/dock.nix

@@ -0,0 +1,25 @@
+{
+  config,
+  pkgs,
+  ...
+}: {
+  system.defaults.dock = {
+    tilesize = 42;
+    largesize = 86;
+    persistent-apps = [
+      "/System/Volumes/Preboot/Cryptexes/App/System/Applications/Safari.app"
+      "/System/Applications/Mail.app"
+      "/Applications/Zed.app"
+      "/Applications/rootshell.app"
+      "/Applications/Reeder.app"
+      "/Applications/Roon.app"
+      "/System/Applications/Calendar.app"
+      "/System/Applications/Reminders.app"
+      "/System/Applications/Notes.app"
+      "/Applications/Things3.app"
+      "/Applications/Craft.app"
+      "/System/Applications/Messages.app"
+      "/Applications/Slack.app"
+    ];
+  };
+}

hosts/Stroma/hardware.nix

@@ -0,0 +1,13 @@
+{
+  config,
+  pkgs,
+  ...
+}: {
+  users.users.corey = {
+    home = "/Users/corey";
+  };
+  system.primaryUser = "corey";
+
+  system.stateVersion = 5;
+  nixpkgs.hostPlatform = "aarch64-darwin";
+}

hosts/Stroma/key.pub

@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDvLok8cBNJHzqbb4s9OtKloGv+f731ZirQVp+U7EHPK

hosts/Stroma/programs.nix

@@ -0,0 +1,77 @@
+{
+  config,
+  pkgs,
+  ...
+}: {
+  environment.systemPackages = with pkgs; [
+    m-cli
+    mas
+    the-unarchiver
+  ];
+
+  homebrew = {
+    enable = true;
+    # N.B.: Removed entries in `masApps` require manual uninstallation
+    masApps = {
+      "Folder Quick Look" = 6753110395;
+      "GoodLinks" = 1474335294;
+      "Hand Mirror" = 1502839586;
+      "Infuse" = 1136220934;
+      "Mapper" = 1589391989;
+      "Mela" = 1568924476;
+      "Noir" = 1592917505;
+      "Paku" = 1534130193;
+      "Parcel" = 375589283;
+      "Pixea" = 1507782672;
+      "Play" = 1596506190;
+      "Reeder" = 1529448980;
+      "Timery" = 1425368544;
+      "Things" = 904280696;
+    };
+  };
+
+  programs.craft = {
+    enable = true;
+  };
+
+  programs.daisydisk = {
+    enable = true;
+  };
+
+  programs.fastscripts = {
+    enable = true;
+    startOnActivation = true;
+  };
+  rc.darwin.defaults.fastscripts = true;
+
+  programs.iina = {
+    enable = true;
+  };
+
+  programs.little-snitch = {
+    enable = true;
+  };
+
+  programs.popclip = {
+    enable = true;
+    startOnActivation = true;
+  };
+
+  programs.postico = {
+    enable = true;
+  };
+
+  programs.roon = {
+    enable = true;
+  };
+
+  programs.scroll-reverser = {
+    enable = true;
+    startOnActivation = true;
+  };
+
+  programs.soundsource = {
+    enable = true;
+    startOnActivation = true;
+  };
+}

lib/keys.nix

@@ -10,6 +10,7 @@ let
       "glyph"
       "Rhizome"
       "spore"
+      "Stroma"
       "zeta"
     ];
 in

modules/darwin/rc.nix

@@ -25,7 +25,6 @@ in {
     ];
 
     homebrew = mkIf cfg.homebrew {
-      caskArgs.no_quarantine = true;
       onActivation = {
         cleanup = "zap";
         upgrade = true;

modules/nixos/ssh.nix

@@ -15,6 +15,7 @@
   users.users.mu.openssh.authorizedKeys.keys = [
     keys.Rhizome
     keys.glyph
+    keys.Stroma
   ];
 
   security.pam.sshAgentAuth.authorizedKeysFiles = lib.mkForce ["/etc/ssh/authorized_keys.d/%u"];