Match extension versions for work.

nix/configuration/hosts/odowork/default.nix

@@ -73,6 +73,8 @@
     # Enable TRIM
     # services.fstrim.enable = lib.mkDefault true;
 
+    fonts.enableDefaultPackages = lib.mkForce true;
+
     me.alacritty.enable = true;
     me.amd_s2idle.enable = true;
     me.ansible.enable = true;
@@ -123,7 +125,7 @@
     me.thunderbolt.enable = true;
     me.user.enable = true;
     me.vscode.enable = true;
-    me.vscode.enable_remote_tunnels = true;
+    me.vscode.enable_work_profile = true;
     me.waybar.enable = true;
     me.wireguard.activated = [
       "wgh"

nix/configuration/roles/firefox/default.nix

@@ -67,7 +67,7 @@
         # Allow sending dark mode preference to websites.
         # Allow sending timezone to websites.
         "privacy.fingerprintingProtection.overrides" =
-          "+AllTargets,-CSSPrefersColorScheme,-JSDateTimeUTC,-CanvasExtractionBeforeUserInputIsBlocked,-CanvasImageExtractionPrompt";
+          "+AllTargets,-CSSPrefersColorScheme,-JSDateTimeUTC,-CanvasExtractionBeforeUserInputIsBlocked,-CanvasImageExtractionPrompt,-CanvasExtractionFromThirdPartiesIsBlocked";
         # Disable weather on new tab page
         "browser.newtabpage.activity-stream.showWeather" = false;
         # Disable AI stuff that wastes battery life

nix/configuration/roles/gnome_keyring/default.nix

@@ -19,5 +19,24 @@
 
   config = lib.mkIf (config.me.gnome_keyring.enable && config.me.graphical) {
     services.gnome.gnome-keyring.enable = true;
+
+    environment.systemPackages = with pkgs; [
+      seahorse # UI for managing secrets.
+      libsecret
+    ];
+
+    environment.persistence."/persist" = lib.mkIf (config.me.mountPersistence) {
+      hideMounts = true;
+      users.talexander = {
+        directories = [
+          {
+            directory = ".local/share/keyrings";
+            user = "talexander";
+            group = "talexander";
+            mode = "0755";
+          }
+        ];
+      };
+    };
   };
 }

nix/configuration/roles/sway/default.nix

@@ -369,7 +369,7 @@ in
               exec_before = "${start_screen_share}";
               exec_after = "${stop_screen_share}";
               chooser_type = "simple";
-              chooser_cmd = "${pkgs.slurp}/bin/slurp -f %o -or";
+              chooser_cmd = "${pkgs.slurp}/bin/slurp -f 'Monitor: %o' -or";
             };
           };
         };

nix/configuration/roles/vscode/default.nix

@@ -16,7 +16,7 @@
       description = "Whether we want to install vscode.";
     };
 
-    vscode.enable_remote_tunnels = lib.mkOption {
+    vscode.enable_work_profile = lib.mkOption {
       type = lib.types.bool;
       default = false;
       example = true;
@@ -30,6 +30,7 @@
       "vscode-x86_64-unknown-linux-gnu-with-extensions"
       "vscode-with-extensions"
       "vscode-extension-ms-vscode-remote-remote-ssh"
+      "vscode-extension-MS-python-vscode-pylance"
     ];
 
     environment.systemPackages = with pkgs; [
@@ -39,18 +40,57 @@
           (
             [
               bbenoist.nix
-              ms-python.python
               ms-azuretools.vscode-docker
               ms-vscode-remote.remote-ssh
               esbenp.prettier-vscode
             ]
+            ++ (
+              if config.me.vscode.enable_work_profile then
+                [
+                  # ms-python.vscode-pylance
+                ]
+              else
+                [
+                  ms-python.python
+                  ms-python.debugpy
+                ]
+            )
             ++ (pkgs.vscode-utils.extensionsFromVscodeMarketplace (
-              lib.lists.optional config.me.vscode.enable_remote_tunnels {
-                name = "remote-server";
-                publisher = "ms-vscode";
-                version = "1.5.3";
-                sha256 = "MSayIBwvSgIHg6gTrtUotHznvo5kTiveN8iSrehllW0=";
-              }
+              if config.me.vscode.enable_work_profile then
+                [
+                  {
+                    name = "remote-server";
+                    publisher = "ms-vscode";
+                    version = "1.5.3";
+                    sha256 = "MSayIBwvSgIHg6gTrtUotHznvo5kTiveN8iSrehllW0=";
+                  }
+                  {
+                    name = "vscode-python-envs";
+                    publisher = "ms-python";
+                    version = "1.12.0";
+                    sha256 = "8dCnGBuxv+8QwP0FrUZIKFxllVOR2z+wIhyyJgxsRns=";
+                  }
+                  {
+                    name = "vscode-pylance";
+                    publisher = "ms-python";
+                    version = "2025.10.1";
+                    sha256 = "7NLq5huykRAhhEIHjtXLKDBFwQ5yiJKFLG64Tjh0yaM=";
+                  }
+                  {
+                    name = "debugpy";
+                    publisher = "ms-python";
+                    version = "2025.16.0";
+                    sha256 = "QPIDUzzwIfzyicsCwqU2u6hVSjCJMInHhHMBqvL8tYs=";
+                  }
+                  {
+                    name = "python";
+                    publisher = "ms-python";
+                    version = "2025.18.0";
+                    sha256 = "6auzfS1DmOuaqV2rDHSCC9BlrcON4xUrdJZ0N0wYCs4=";
+                  }
+                ]
+              else
+                [ ]
             ))
           );
       })

nix/configuration/roles/vscode/files/settings.json

@@ -53,5 +53,7 @@
   "editor.autoClosingBrackets": "never",
   "editor.autoSurround": "never",
   "workbench.editor.navigationScope": "editorGroup",
-  "python.analysis.typeCheckingMode": "standard"
+  "python.analysis.typeCheckingMode": "standard",
+  "python.trace.server": "verbose",
+  "python.analysis.logLevel": "Trace"
 }