Add docker to muon

hosts/muon/configuration.nix

@@ -24,12 +24,16 @@ in {
     gnumeric
     opensnitch
     opensnitch-ui
+    mumble
   ];
 
   nixpkgs.config.permittedInsecurePackages = [
     "libsoup-2.74.3"
   ];
 
+  users.users.muon.extraGroups = ["docker"];
+  virtualisation.docker.enable = true;
+
   # System
   mods.user.name = "muon";
   networking.hostName = cfg.user.name;

hosts/muon/home.nix

@@ -14,11 +14,13 @@ in {
   mods.terminal.emulator.enable = true;
   mods.terminal.development.enable = true;
   mods.terminal.tools.enable = true;
+  mods.terminal.hr.enable = true;
   mods.desktop.development.enable = true;
   mods.desktop.productivity.enable = true;
   mods.desktop.media.enable = true;
   mods.zen.enable = true;
   mods.obsidian.enable = true;
+  mods.opencode.enable = true;
 
   # Hardware preferences
 

modules/home/terminal/default.nix

@@ -13,6 +13,7 @@
     ./helix
     ./nvim
     ./zellij
+    ./opencode
   ];
 
   config = lib.mkIf osConfig.mods.desktop.enable {

modules/home/terminal/opencode/dcg.nix

@@ -0,0 +1,38 @@
+{
+  lib,
+  fetchFromGitHub,
+  rustPlatform,
+  openssl,
+  pkg-config,
+  git,
+}:
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "dcg";
+  version = "v0.4.0";
+
+  src = fetchFromGitHub {
+    owner = "Dicklesworthstone";
+    repo = "destructive_command_guard";
+    tag = finalAttrs.version;
+    hash = "sha256-tkjHhSMoLRV56AwUa0DkoDMoEj6gUZx/ih0VTC9C+4o=";
+  };
+
+  cargoHash = "sha256-G6cOjl5tLdjBg7A+Itnk/t6tLzoU7gKYOTYlZm3HSlA=";
+
+  doCheck = false;
+
+  nativeBuildInputs = [
+    pkg-config
+    openssl
+    openssl.dev
+    git
+  ];
+  PKG_CONFIG_PATH = "${openssl.dev}/lib/pkgconfig";
+
+  meta = {
+    description = "A high-performance hook for AI coding agents that blocks destructive commands before they execute, protecting your work from accidental deletion";
+    homepage = "https://github.com/Dicklesworthstone/destructive_command_guard";
+    license = lib.licenses.mit;
+    maintainers = [];
+  };
+})

modules/home/terminal/opencode/default.nix

@@ -0,0 +1,38 @@
+{
+  lib,
+  config,
+  pkgs,
+  ...
+}: {
+  options.mods.opencode.enable = lib.mkEnableOption "enables opencode";
+
+  # imports = [
+  #   ./package.nix
+  #   ./dcg.nix
+  # ];
+
+  config = lib.mkIf config.mods.opencode.enable {
+    home.packages = with pkgs; [
+      (callPackage ./dcg.nix {})
+    ];
+
+    programs.opencode = {
+      enable = true;
+      settings = {
+        "plugin" = ["opencode-gemini-auth"];
+
+        "permission" = {
+          "bash" = {
+            "*" = "ask";
+            "rm *" = "deny";
+            "rmdir *" = "deny";
+            "unlink *" = "deny";
+            "*rm *" = "ask";
+            "*rmdir *" = "ask";
+            "*unlink *" = "ask";
+          };
+        };
+      };
+    };
+  };
+}