From c8b7dc1ec77be40ea0f6fba04c3ac8ff31f3c86b Mon Sep 17 00:00:00 2001
From: muon <admin@muon.host>
Date: Sat, 14 Feb 2026 08:34:58 +0000
Subject: [PATCH 1/4] Add mumble

---
 hosts/muon/configuration.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/hosts/muon/configuration.nix b/hosts/muon/configuration.nix
index e8912b3..67eb642 100644
--- a/hosts/muon/configuration.nix
+++ b/hosts/muon/configuration.nix
@@ -24,6 +24,7 @@ in {
     gnumeric
     opensnitch
     opensnitch-ui
+    mumble
   ];
 
   nixpkgs.config.permittedInsecurePackages = [

From 7af65a0c9b32504ce2e466500c5ae9717cc0ee2b Mon Sep 17 00:00:00 2001
From: muon <admin@muon.host>
Date: Thu, 26 Feb 2026 09:53:50 +0000
Subject: [PATCH 2/4] Add opencode

---
 hosts/muon/home.nix                        |  1 +
 modules/home/terminal/default.nix          |  1 +
 modules/home/terminal/opencode/dcg.nix     | 38 ++++++++++++++++++++++
 modules/home/terminal/opencode/default.nix | 38 ++++++++++++++++++++++
 4 files changed, 78 insertions(+)
 create mode 100644 modules/home/terminal/opencode/dcg.nix
 create mode 100644 modules/home/terminal/opencode/default.nix

diff --git a/hosts/muon/home.nix b/hosts/muon/home.nix
index 063bfdd..1bedb5e 100644
--- a/hosts/muon/home.nix
+++ b/hosts/muon/home.nix
@@ -19,6 +19,7 @@ in {
   mods.desktop.media.enable = true;
   mods.zen.enable = true;
   mods.obsidian.enable = true;
+  mods.opencode.enable = true;
 
   # Hardware preferences
 
diff --git a/modules/home/terminal/default.nix b/modules/home/terminal/default.nix
index fc43170..83935f1 100644
--- a/modules/home/terminal/default.nix
+++ b/modules/home/terminal/default.nix
@@ -13,6 +13,7 @@
     ./helix
     ./nvim
     ./zellij
+    ./opencode
   ];
 
   config = lib.mkIf osConfig.mods.desktop.enable {
diff --git a/modules/home/terminal/opencode/dcg.nix b/modules/home/terminal/opencode/dcg.nix
new file mode 100644
index 0000000..d3df397
--- /dev/null
+++ b/modules/home/terminal/opencode/dcg.nix
@@ -0,0 +1,38 @@
+{
+  lib,
+  fetchFromGitHub,
+  rustPlatform,
+  openssl,
+  pkg-config,
+  git,
+}:
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "dcg";
+  version = "v0.4.0";
+
+  src = fetchFromGitHub {
+    owner = "Dicklesworthstone";
+    repo = "destructive_command_guard";
+    tag = finalAttrs.version;
+    hash = "sha256-tkjHhSMoLRV56AwUa0DkoDMoEj6gUZx/ih0VTC9C+4o=";
+  };
+
+  cargoHash = "sha256-G6cOjl5tLdjBg7A+Itnk/t6tLzoU7gKYOTYlZm3HSlA=";
+
+  doCheck = false;
+
+  nativeBuildInputs = [
+    pkg-config
+    openssl
+    openssl.dev
+    git
+  ];
+  PKG_CONFIG_PATH = "${openssl.dev}/lib/pkgconfig";
+
+  meta = {
+    description = "A high-performance hook for AI coding agents that blocks destructive commands before they execute, protecting your work from accidental deletion";
+    homepage = "https://github.com/Dicklesworthstone/destructive_command_guard";
+    license = lib.licenses.mit;
+    maintainers = [];
+  };
+})
diff --git a/modules/home/terminal/opencode/default.nix b/modules/home/terminal/opencode/default.nix
new file mode 100644
index 0000000..4448cfc
--- /dev/null
+++ b/modules/home/terminal/opencode/default.nix
@@ -0,0 +1,38 @@
+{
+  lib,
+  config,
+  pkgs,
+  ...
+}: {
+  options.mods.opencode.enable = lib.mkEnableOption "enables opencode";
+
+  # imports = [
+  #   ./package.nix
+  #   ./dcg.nix
+  # ];
+
+  config = lib.mkIf config.mods.opencode.enable {
+    home.packages = with pkgs; [
+      (callPackage ./dcg.nix {})
+    ];
+
+    programs.opencode = {
+      enable = true;
+      settings = {
+        "plugin" = ["opencode-gemini-auth"];
+
+        "permission" = {
+          "bash" = {
+            "*" = "ask";
+            "rm *" = "deny";
+            "rmdir *" = "deny";
+            "unlink *" = "deny";
+            "*rm *" = "ask";
+            "*rmdir *" = "ask";
+            "*unlink *" = "ask";
+          };
+        };
+      };
+    };
+  };
+}

From a643ef4460b7d5852d77102e981ef1655b128cc6 Mon Sep 17 00:00:00 2001
From: muon <admin@muon.host>
Date: Thu, 26 Feb 2026 10:07:24 +0000
Subject: [PATCH 3/4] Add hr to muon

---
 hosts/muon/home.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/hosts/muon/home.nix b/hosts/muon/home.nix
index 1bedb5e..9aac268 100644
--- a/hosts/muon/home.nix
+++ b/hosts/muon/home.nix
@@ -20,6 +20,7 @@ in {
   mods.zen.enable = true;
   mods.obsidian.enable = true;
   mods.opencode.enable = true;
+  mods.hr.enable = true;
 
   # Hardware preferences
 

From 60d60bcaa2ac51537553ac112a1d96b13a3a8359 Mon Sep 17 00:00:00 2001
From: muon <admin@muon.host>
Date: Thu, 26 Feb 2026 10:59:56 +0000
Subject: [PATCH 4/4] Add docker to muon

---
 hosts/muon/configuration.nix | 3 +++
 hosts/muon/home.nix          | 2 +-
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/hosts/muon/configuration.nix b/hosts/muon/configuration.nix
index 67eb642..b999d85 100644
--- a/hosts/muon/configuration.nix
+++ b/hosts/muon/configuration.nix
@@ -31,6 +31,9 @@ in {
     "libsoup-2.74.3"
   ];
 
+  users.users.muon.extraGroups = ["docker"];
+  virtualisation.docker.enable = true;
+
   # System
   mods.user.name = "muon";
   networking.hostName = cfg.user.name;
diff --git a/hosts/muon/home.nix b/hosts/muon/home.nix
index 9aac268..51c58c8 100644
--- a/hosts/muon/home.nix
+++ b/hosts/muon/home.nix
@@ -14,13 +14,13 @@ in {
   mods.terminal.emulator.enable = true;
   mods.terminal.development.enable = true;
   mods.terminal.tools.enable = true;
+  mods.terminal.hr.enable = true;
   mods.desktop.development.enable = true;
   mods.desktop.productivity.enable = true;
   mods.desktop.media.enable = true;
   mods.zen.enable = true;
   mods.obsidian.enable = true;
   mods.opencode.enable = true;
-  mods.hr.enable = true;
 
   # Hardware preferences