+if [ -z "$IS_GUIX_SYSTEM" ]; then
+ # if guix is installed
+ if [ -x "$(command -v guix)" ]; then
+ SSL_CERT_DIR="$HOME/.guix-profile/etc/ssl/certs"
+ if [ -d "$SSL_CERT_DIR" -o -h "$SSL_CERT_DIR" ]; then
+ export SSL_CERT_DIR
+ export SSL_CERT_FILE="$HOME/.guix-profile/etc/ssl/certs/ca-certificates.crt"
+ else
+ printf "it seems you forgot to \`guix install nss-certs\'\n"
+ fi
+ GUIX_PROFILE="$HOME/.guix-profile"
+ . "$GUIX_PROFILE/etc/profile"
+ fi
+fi
+
+# start an ssh-agent (with guix's openssh)
+if [ -z "$IS_GUIX_SYSTEM" ]; then
+ if ! pgrep -u "$USER" ssh-agent > /dev/null; then
+ ssh-agent > ~/.ssh-agent-thing
+ fi
+ if [[ ! "$SSH_AUTH_SOCK" ]]; then
+ eval "$(<~/.ssh-agent-thing)"
+ fi
+fi
+
+setxkbmap \
+ -layout us,ir \
+ -option ctrl:nocaps \
+ -option grp:shifts_toggle
+
+xmodmap -e "keysym Menu = Super_R"
+
+xsetroot -cursor_name left_ptr
+xset r rate 200 45
+xset b off
+
+xrdb -merge "$HOME/.Xresources"
+
+# footenote: when on a foreign distro and using Xfce, don't forget to
+# disable its auto-start of gpg- and ssh-agent, by issuing
+# xfconf-query -c xfce4-session -p /startup/ssh-agent/enabled -n -t bool -s false
+# xfconf-query -c xfce4-session -p /startup/gpg-agent/enabled -n -t bool -s false
+# see https://docs.xfce.org/xfce/xfce4-session/advanced#ssh_and_gpg_agents
+# also, MATE does something similar with gnome-keyring-daemon:
+# http://william.shallum.net/random-notes/disabling-gnome-keyring-daemon-ssh-agent-on-mate-desktop