some updates on the laptop. so much left to clean up...

hosts/muhhStar.nix

@@ -18,15 +18,22 @@
   #boot.loader.efi.efiSysMountPoint = "/boot/efi";
 
   networking.hostName = "muhhStar"; # Define your hostname.
-#  networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
+  networking.networkmanager.enable = true;
+  #  networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
 
   # Configure network proxy if necessary
   # networking.proxy.default = "http://user:password@proxy:port/";
   # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
 
-  security.sudo.wheelNeedsPassword = false;
+  security = {
+    pam.services.swaylock = {};
+    polkit.enable = true;
+    rtkit.enable = true;
+    sudo = {
+      wheelNeedsPassword = false;
+    };
+  };
   # Enable networking
-  networking.networkmanager.enable = true;
   # nm has some issue with the tailscale0 interface? https://github.com/NixOS/nixpkgs/issues/180175#issuecomment-1658731959
   systemd.services.NetworkManager-wait-online = {
     serviceConfig = {
@@ -54,7 +61,6 @@
 
   services.flatpak.enable = true;
   services.fwupd.enable = true;
-  security.rtkit.enable = true;
   services.pipewire = {
     enable = true;
     alsa.enable = true;
@@ -107,12 +113,20 @@
   # started in user sessions.
   # programs.mtr.enable = true;
   programs = {
+    _1password.enable = true;
+    _1password-gui = {
+      enable = true;
+      polkitPolicyOwners = ["muhh"];
+    };
     fish.enable = true;
     gnupg.agent = {
       enable = true;
       enableSSHSupport = true;
     };
-    light.enable = true;
+    light = {
+      enable = true;
+      brightnessKeys.enable = true;
+    };
     sway.enable = true;
   };
   virtualisation.podman = {
@@ -120,7 +134,15 @@
     dockerCompat = true;
   };
 
-  xdg.portal.wlr.enable = true;
+  xdg = {
+    portal = {
+      enable = true;
+      extraPortals = with pkgs; [
+        xdg-desktop-portal-wlr
+        xdg-desktop-portal-gtk
+      ];
+    };
+  };
 
   # Enable the OpenSSH daemon.
   # services.openssh.enable = true;