heather: add paseo daemon (systemd + caddy vhost paseo.iscg.dev, dual auth)

home/cli.nix

@@ -49,7 +49,7 @@
     python313
     uv
 
-    # Personal CLIs (from own flake inputs)
+    # Personal CLIs (local flake input; avoids SSH fetch under sudo)
     inputs.lem.packages.${pkgs.system}.default
   ];
 
@@ -109,6 +109,43 @@
     git = true;
   };
 
-  # Fastfetch - system info (using package only, no home-manager module)
-  # Config is in ~/.config/fastfetch/config.jsonc manually for now
+  # Fastfetch - system info. Packages module disabled: scanning 8800 nix store
+  # entries takes ~1.5s on cold cache and delays terminal startup. Structure
+  # mirrors the fastfetch default minus Packages (and unsupported Icons/LocalIp/PowerAdapter).
+  xdg.configFile."fastfetch/config.jsonc".text = ''
+    {
+      "$schema": "https://github.com/fastfetch-cli/fastfetch/raw/dev/doc/json_schema.json",
+      "logo": {
+        "type": "auto"
+      },
+      "display": {
+        "separator": "  "
+      },
+      "modules": [
+        "break",
+        "os",
+        "host",
+        "kernel",
+        "uptime",
+        "shell",
+        "display",
+        "wm",
+        "wmtheme",
+        "theme",
+        "font",
+        "cursor",
+        "terminal",
+        "terminalfont",
+        "cpu",
+        "gpu",
+        "memory",
+        "swap",
+        "disk",
+        "battery",
+        "locale",
+        "break",
+        "colors"
+      ]
+    }
+  '';
 }