concatenation fixes

hosts/workstation/configuration.nix

@@ -3,6 +3,17 @@
   inputs,
   ...
 }:
+let
+  krita-thumbnailer = pkgs.writeTextFile {
+    name = "krita-thumbnailer";
+    destination = "/share/thumbnailers/kra.thumbnailer";
+    text = ''
+      [Thumbnailer Entry]
+      Exec=sh -c "${pkgs.unzip}/bin/unzip -p %i preview.png > %o"
+      MimeType=application/x-krita;
+    '';
+  };
+in
 {
   imports = [
     ./hardware-configuration.nix
@@ -19,54 +30,18 @@
       installBatSyntax = true;
       installVimSyntax = true;
     };
-    xdg.configFile."jellyfin-rpc/main.json".text = builtins.toJSON {
-      jellyfin = {
-        url = "https://flix.servidos.lat";
-        api_key = "abe7cdf35e5c453a9bceb004f4792b4a";
-        username = "jawz";
-        music = {
-          display = [
-            "year"
-            "album"
-          ];
-          separator = "-";
-        };
-      };
-      discord = {
-        application_id = "1311453366978875392";
-        buttons = [
-          {
-            name = "dynamic";
-            url = "dynamic";
-          }
-          {
-            name = "dynamic";
-            url = "dynamic";
-          }
-        ];
-      };
-      imgur = {
-        client_id = "1ca05dbfc674d39";
-      };
-      images = {
-        enable_images = true;
-        imgur_images = true;
-      };
-    };
   };
   networking = {
     hostName = "workstation";
     firewall =
       let
-        openPorts = [
-          6674 # ns-usbloader
-        ];
-        openPortRanges = [
-          {
-            from = 1714; # kdeconnect
-            to = 1764; # kdeconnect
-          }
-        ];
+        kdeconnectPortRange = {
+          from = 1714;
+          to = 1764;
+        };
+        ns-usbloaderPort = 6674;
+        openPorts = [ ns-usbloaderPort ];
+        openPortRanges = [ kdeconnectPortRange ];
       in
       {
         allowedTCPPorts = openPorts;
@@ -79,7 +54,6 @@
     cores = 8;
     max-jobs = 8;
   };
-  nixpkgs.config.permittedInsecurePackages = [ ];
   users = {
     groups.nixremote.gid = 555;
     users = {
@@ -104,28 +78,17 @@
   };
   environment = {
     pathsToLink = [ "share/thumbnailers" ];
-    systemPackages =
-      builtins.attrValues {
-        # thumbnail for heif files & videos
-        inherit (pkgs)
-          libheif
-          ffmpegthumbnailer
-          bign-handheld-thumbnailer
-          gnome-epub-thumbnailer
-          ;
-        inherit (pkgs.libheif) out;
-      }
-      ++ [
-        (pkgs.writeTextFile {
-          name = "krita-thumbnailer";
-          destination = "/share/thumbnailers/kra.thumbnailer";
-          text = ''
-            [Thumbnailer Entry]
-            Exec=sh -c "${pkgs.unzip}/bin/unzip -p %i preview.png > %o"
-            MimeType=application/x-krita;
-          '';
-        })
-      ];
+    systemPackages = builtins.attrValues {
+      # thumbnail for heif files & videos
+      inherit krita-thumbnailer;
+      inherit (pkgs)
+        libheif
+        ffmpegthumbnailer
+        bign-handheld-thumbnailer
+        gnome-epub-thumbnailer
+        ;
+      inherit (pkgs.libheif) out;
+    };
     etc."wireplumber/bluetooth.lua.d/51-bluez-config.lua".text = ''
       bluez_monitor.properties = {
           ["bluez5.enable-sbc-xq"] = true,
@@ -149,7 +112,6 @@
           obs-vkcapture
           obs-vaapi
           obs-tuna
-          # looking-glass-obs
           input-overlay
           ;
       };