Adopt Home Manager; manage starship, nix.conf, and opencode config

tinfoil-proxy/flake.lock

@@ -0,0 +1,27 @@
+{
+  "nodes": {
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1791366222,
+        "narHash": "sha256-o0N4g6uSOIppU7CGToNvGlMf5vC+B6O6ukFHKY/TKOY=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "39ad350a0602fa0a58a544344e3e9187526ea45c",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixpkgs-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "root": {
+      "inputs": {
+        "nixpkgs": "nixpkgs"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}

tinfoil-proxy/flake.nix

@@ -0,0 +1,13 @@
+{
+  description = "tinfoil-proxy";
+
+  inputs.nixpkgs.url = "github:NixOS/nixpkgs/nixpkgs-unstable";
+
+  outputs = { self, nixpkgs }:
+    let
+      system = "x86_64-linux";
+      pkgs = import nixpkgs { inherit system; };
+    in {
+      packages.${system}.default = pkgs.callPackage ./package.nix { };
+    };
+}

tinfoil-proxy/package.nix

@@ -0,0 +1,28 @@
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+  go_1_27,
+}:
+
+buildGoModule.override { go = go_1_27; } (finalAttrs: {
+  pname = "tinfoil-proxy";
+  version = "0.2.3";
+
+  src = fetchFromGitHub {
+    owner = "tinfoilsh";
+    repo = "tinfoil-proxy";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-+HBPiWYmQjqWiquoMnwbNJGqZahgt7bGODQksHOR+pU=";
+  };
+
+  vendorHash = "sha256-+NxbJXXNFa8KEcvJF3fvRAjnPwS4vI/cB5zTrQW7+Bk=";
+
+  meta = {
+    description = "Verified local HTTP proxy to a Tinfoil secure enclave";
+    homepage = "https://github.com/tinfoilsh/tinfoil-proxy";
+    changelog = "https://github.com/tinfoilsh/tinfoil-proxy/releases/tag/v${finalAttrs.version}";
+    license = lib.licenses.asl20;
+    mainProgram = "tinfoil-proxy";
+  };
+})