Extracts Obsidian into dedicated modules

home/modules/desktop/default.nix

@@ -14,8 +14,6 @@ in {
       dockutil
       vimr
       (callPackage ./vimr-wrapper.nix { inherit config; })
-    ] ++ lib.optionals isLinux [
-      obsidian
     ];
 
     file = {

home/modules/obsidian/default.nix

@@ -0,0 +1,45 @@
+{ pkgs, lib, config, ... }:
+
+let
+  isDarwin = pkgs.stdenv.isDarwin;
+  isLinux = pkgs.stdenv.isLinux;
+  homeDirectory = config.home.homeDirectory;
+  vaultsDir = "${homeDirectory}/workspace/vaults";
+in {
+  home.packages = with pkgs; [
+    obsidian-headless
+  ] ++ lib.optionals isLinux [
+    unstable.obsidian
+  ];
+
+  home.activation = {
+    createVaultsDirectory = lib.hm.dag.entryAfter ["writeBoundary"] ''
+      mkdir -p "${vaultsDir}"
+    '';
+
+    setVaultsPermissions = lib.hm.dag.entryAfter ["createVaultsDirectory"] (
+      if isLinux then ''
+        chgrp obsidian "${vaultsDir}"
+        chmod g+rwxs "${vaultsDir}"
+        ${pkgs.acl}/bin/setfacl -m g:obsidian:rwX "${vaultsDir}"
+        ${pkgs.acl}/bin/setfacl -d -m g:obsidian:rwX "${vaultsDir}"
+        ${pkgs.acl}/bin/setfacl -m g:obsidian-readonly:rX "${vaultsDir}"
+        ${pkgs.acl}/bin/setfacl -d -m g:obsidian-readonly:rX "${vaultsDir}"
+      '' else if isDarwin then ''
+        chgrp obsidian "${vaultsDir}"
+        chmod g+rwx "${vaultsDir}"
+        /bin/chmod +a "group:obsidian allow list,add_file,search,add_subdirectory,delete_child,readattr,writeattr,readextattr,writeextattr,readsecurity,file_inherit,directory_inherit" "${vaultsDir}"
+        /bin/chmod +a "group:obsidian-readonly allow list,search,readattr,readextattr,readsecurity,file_inherit,directory_inherit" "${vaultsDir}"
+      '' else ""
+    );
+
+    syncObsidianVault = lib.hm.dag.entryAfter ["setVaultsPermissions"] ''
+      if [ -f "${homeDirectory}/.config/obsidian-headless/config.json" ]; then
+        echo "Syncing Obsidian vault..."
+        ${pkgs.obsidian-headless}/bin/ob sync --vault-path "${vaultsDir}/Notes" || echo "Obsidian sync failed — have you run 'ob login' and 'ob sync-setup --vault Notes'?"
+      else
+        echo "Obsidian headless not configured — run 'ob login' and 'ob sync-setup --vault Notes' first"
+      fi
+    '';
+  };
+}

home/profiles/full.nix

@@ -24,5 +24,6 @@
     ../modules/infrastructure
     ../modules/home-network
     ../modules/homelab
+    ../modules/obsidian
   ];
 }

home/users/crdant/darwin.nix

@@ -41,7 +41,6 @@ in
       "lens"
       "loom"
       "obs"
-      "obsidian"
       "postman"
       "raspberry-pi-imager"
       "repobar"
@@ -55,7 +54,6 @@ in
     masApps = {
       "Flighty" = 1358823008;
       "Kindle" = 302584613;
-      "Obsidian Web Clipper" = 6720708363;
     };
   };
 

pkgs/default.nix

@@ -23,6 +23,7 @@ rec {
   icalpal = pkgs.callPackage ./icalpal { };
 
   zapier-platform-cli = pkgs.callPackage ./zapier-platform-cli { };
+  obsidian-headless = pkgs.callPackage ./obsidian-headless { };
 
   # simonw tools
   claude-code-transcripts = pkgs.callPackage ./claude-code-transcripts { };

pkgs/obsidian-headless/default.nix

@@ -0,0 +1,26 @@
+{
+  lib,
+  buildNpmPackage,
+}:
+
+buildNpmPackage rec {
+  pname = "obsidian-headless";
+  version = "0.0.8";
+
+  src = ./.;
+
+  npmDepsHash = "sha256-6PtdFej18oE7/vH07eBJTDMew4wrQkhPYozhNxgDG4s=";
+  dontNpmBuild = true;
+
+  postInstall = ''
+    mkdir -p $out/bin
+    ln -s $out/lib/node_modules/obsidian-headless-wrapper/node_modules/.bin/ob $out/bin/ob
+  '';
+
+  meta = with lib; {
+    description = "Headless CLI client for Obsidian Sync and Publish";
+    homepage = "https://obsidian.md/help/headless";
+    license = licenses.unfree;
+    mainProgram = "ob";
+  };
+}