Merge branch 'main' into storage-refactor

configurations/home-manager/leyla/packages/default.nix

@@ -41,6 +41,7 @@ in {
           openrgb.enable = hardware.openRGB.enable;
           via.enable = hardware.viaKeyboard.enable;
           claude-code.enable = osConfig.host.ai.enable;
+          opencode.enable = osConfig.host.ai.enable;
           davinci-resolve.enable = hardware.graphicsAcceleration.enable;
           mfoc.enable = true;
         })

configurations/home-manager/leyla/packages/vscode/default.nix

@@ -58,6 +58,9 @@ in {
 
             nearley.enable = true;
 
+            # graphql
+            graphql.enable = true;
+
             # astro development
             vscodeMdx.enable = true;
             astroVscode.enable = true;
@@ -73,11 +76,11 @@ in {
             rustAnalyzer.enable = true;
 
             # arduino development
-            platformIO.enable = true;
+            platformIO.enable = false;
 
             # claude development
             claudeDev = lib.mkIf ai-tooling-enabled {
-              enable = true;
+              enable = false;
               mcp = {
                 nixos = {
                   enable = true;

configurations/nixos/defiant/configuration.nix

@@ -144,6 +144,7 @@
             Endpoint = "185.230.126.146:51820";
             # Allow all traffic but use policy routing to prevent system-wide VPN
             AllowedIPs = ["0.0.0.0/0"];
+            PersistentKeepalive = 25;
           }
         ];
       };
@@ -339,7 +340,7 @@
     };
 
     actual = {
-      enable = true;
+      enable = false;
       domain = "budget.jan-leila.com";
       impermanence.enable = false;
     };