configuration.nix

{pkgs, ...}: {
  imports = [
    # Include the results of the hardware scan.
    ./hardware-configuration.nix
    # ./timers.nix
    # ./vimgolf.nix
    ./packages.nix
    ./qmk.nix
    ./ydootool.nix
    ./tailscale.nix
  ];
  nix.extraOptions = ''
    trusted-users = root dan
  '';
  nix = {
    settings = {
      experimental-features = ["nix-command" "flakes"];
      bash-prompt-prefix = "(nix:$name)\\040";
      substituters = [
        "https://cache.thalheim.io"
        "https://nix-community.cachix.org"
        "https://neovim-nightly.cachix.org"
      ];
      trusted-public-keys = [
        "cache.thalheim.io-1:R7msbosLEZKrxk/lKxf9BTjOOH7Ax3H0Qj0/6wiHOgc="
        "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
        "neovim-nightly.cachix.org-1:feIoInHRevVEplgdZvQDjhp11kYASYCE2NGY9hNrwxY="
      ];
    };
    optimise.automatic = true;
    gc.automatic = true;
    gc.dates = "weekly";

    # channel.enable = false; # Remove channels entirely at some point, but this errors currently
  };

  documentation.doc.enable = true;
  documentation.info.enable = true;
  documentation.dev.enable = true;

  # Bootloader
  boot.loader.systemd-boot = {
    enable = true;
    editor = false;
    configurationLimit = 18;
    # consoleMode = "max";
  };
  system.nixos.label = "";
  boot.loader.efi.canTouchEfiVariables = true;

  networking.hostName = "nixos"; # Define your hostname.
  # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.

  # Enable networking
  networking.networkmanager.enable = true;

  systemd.services.NetworkManager-wait-online.enable = false;

  # Set your time zone.
  time.timeZone = "America/Chicago";

  # Select internationalisation properties.
  i18n.defaultLocale = "en_US.UTF-8";

  i18n.extraLocaleSettings = {
    LC_ADDRESS = "en_US.UTF-8";
    LC_IDENTIFICATION = "en_US.UTF-8";
    LC_MEASUREMENT = "en_US.UTF-8";
    LC_MONETARY = "en_US.UTF-8";
    LC_NAME = "en_US.UTF-8";
    LC_NUMERIC = "en_US.UTF-8";
    LC_PAPER = "en_US.UTF-8";
    LC_TELEPHONE = "en_US.UTF-8";
    LC_TIME = "en_US.UTF-8";
  };

  virtualisation.docker.enable = true;
  virtualisation.podman.enable = true;
  virtualisation.waydroid.enable = true;
  virtualisation.libvirtd = {
    enable = true;
    qemu.runAsRoot = true;
  };

  # Enable the X11 windowing system.
  services.xserver.enable = true;
  services.resolved.enable = true;

  # Video Card Drivers
  services.xserver.videoDrivers = ["amdgpu"];
  hardware.graphics = {
    enable = true;
    enable32Bit = true;
    extraPackages = with pkgs; [
      libGL
      amdvlk
      driversi686Linux.amdvlk # For 32 bit applications
    ];
  };

  # Enable the GNOME Desktop Environment.
  # services.displayManager.displayManager.gdm.enable = true;
  # services.displayManager.desktopManager.gnome.enable = true;
  # services.gnome.gnome-remote-desktop.enable = true;

  # Enable the Plasma 6 Desktop Environment
  services.displayManager.sddm.enable = true;
  services.desktopManager.plasma6.enable = true;
  services.displayManager.defaultSession = "plasma";
  services.displayManager.sddm.wayland.enable = true;

  environment.plasma6.excludePackages = with pkgs.kdePackages; [
    plasma-browser-integration
    konsole
  ];

  # Configure keymap in X11
  services.xserver.xkb = {
    layout = "us";
    variant = "";
  };

  # Enable CUPS to print documents.
  services.avahi = {
    enable = true;
    nssmdns4 = true;
    openFirewall = true;
    publish = {
      enable = true;
      userServices = true;
    };
  };
  services.printing = {
    enable = true;
    drivers = [pkgs.brlaser];
    listenAddresses = ["*:631"];
    allowFrom = ["all"];
    browsing = true;
    defaultShared = true;
    openFirewall = true;
  };
  # services.samba = {
  #   enable = true;
  #   package = pkgs.sambaFull;
  #   openFirewall = true;
  #   settings = {
  #     "global" = {
  #       "load printers" = "yes";
  #       "printing" = "cups";
  #       "printcap name" = "cups";
  #     };
  #     "printers" = {
  #       "comment" = "All Printers";
  #       "path" = "/var/spool/samba";
  #       "public" = "yes";
  #       "browsable" = "yes";
  #       # to allow user 'guest account' to print.
  #       "guest ok" = "yes";
  #       "writable" = "no";
  #       "printable" = "yes";
  #       "create mode" = 0700;
  #     };
  #   };
  # };
  # systemd.tmpfiles.rules = [
  #   "d /var/spool/samba 1777 root root -"
  # ];

  hardware = {
    bluetooth = {
      enable = true;
      settings.General.Experimental = true;
    };
    logitech.wireless = {
      enable = true;
      enableGraphical = true;
    };
    enableAllFirmware = true;
  };

  # Enable sound with pipewire.
  # sound.enable = true;
  hardware.pulseaudio.enable = false;
  security.rtkit.enable = true;
  services.pipewire = {
    enable = true;
    alsa.enable = true;
    alsa.support32Bit = true;
    pulse.enable = true;
    # If you want to use JACK applications, uncomment this
    #jack.enable = true;

    # use the example session manager (no others are packaged yet so this is enabled by default,
    # no need to redefine it in your config for now)
    #media-session.enable = true;
  };

  users.users.dan = {
    isNormalUser = true;
    description = "dan";
    extraGroups = ["networkmanager" "wheel" "adbusers" "wireshark" "docker" "libvirtd" "kvm" "qemu-libvirtd" "ydotool"];
    openssh.authorizedKeys.keys = [
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHvItECWiUFIPuGd7uQJcVp/sQJ0RnYh39y8sOQYNMUJ JuiceSSH"
      "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDN1n0+tmadg/GJ/igJf31nsluyHMcn2J6zaycloqipAeU+fa5b4V9rXUWntkGrJNP8CWloMx788ssGI1CYAmr/wbB95xJVrHckwx1O1/YE6D/bqLfdI02t9EqNVQS/3Dm1b63YxtupPR9yHFVCBIBoSz7C2lnCdPqYnXnB+75P1vVUvvBPvKcVSofETEbMByjMVLhPBa2Wry7zLb67JKZitH5MQidxqnQqU2w9g3/C28jW/hG3rRTXdJ+D7M2Iv/hZCuqQhZRhaAiU8t4Vk3iYNUn8de5oNCAI9KgWnNRQZ5xh+ypdph3yWteXLu7p4UZFtgUUvV0ExvEPAGtljlhF surfaceputty"
      "ssh-rsa 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 SurfaceWindowsTerminal"
      "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0LJdWfOIGs7qDDdUbVX46Gr6qWhan2FsR07PGOHNj04TrwENT+MMKkJmkG2ol51RoHnCbXAdW3+e5yHwgzoMDyKW4hqp34dDpvS+u+rAX4YwMrSWPkBRO1UvL88TNi9al47K8mtQI9/yhR96N76K9GbEC8T1oxVlKYaZyb/9nKwmthyA2x3wpI3DggseFQ7TwPGxHPDuI8oO7KvL2y1USFHUP4oETMbEHm+BKLjotV9nh6ibrSFjhosE09BVyA/0t5tx5K8qrrTWNmZJYdULMwtjeJtzOhFb4Yc2W3/aaxZmEwMFdPGGnTf5Yf7qDVMZ48VhyycsdzjFXN8CASCpf SamsungRDP"
      "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAyBFhfJ59CyjEDU0INkew8VTCmoD3RNGTNGITtI8QqMbsFVX2RITaivyiX2uR0PgQgesV+EkjFs0u4IBrEjN8ZXmL4DdbCTG7Y7ESZcaYlytxTqKXqpaCz5m2f28MHBCrTTH8H+sfJOv2XAjszaUJ15KWiaPNpcM4tvCosFk1J2c+ccSoTDS45SMa+N7h8UyKw4uJk34hmEvhNlmu3+fUQfDM9bUcPlnvsD8/1Iak7UClB/HRpTinAs+T1sO5F+/pN3qs48zlocCRUiTp2Fr1zbbQw66FdPPL2J6l2OG+01wwNsGBRmi14hhdx+MgyolpEy/dx1KwBRPaVh8pAo4R Samsungconnectbot"
    ];
  };

  # Allow unfree packages
  nixpkgs.config.allowUnfree = true;

  fonts.packages = with pkgs; [
    nerd-fonts.jetbrains-mono
  ];

  # Some programs need SUID wrappers, can be configured further or are
  # started in user sessions.
  # programs.mtr.enable = true;
  # programs.gnupg.agent = {
  #   enable = true;
  #   enableSSHSupport = true;
  # };
  # programs.ssh.forwardX11 = true;
  # programs.ssh.setXAuthLocation = true;

  # Disable the GNOME3/GDM auto-suspend feature that cannot be disabled in GUI!
  # If no user is logged in, the machine will power down after 20 minutes.
  systemd.targets.sleep.enable = false;
  systemd.targets.suspend.enable = false;
  systemd.targets.hibernate.enable = false;
  systemd.targets.hybrid-sleep.enable = false;

  # List services that you want to enable:

  # Enable the OpenSSH daemon.
  services.openssh = {
    enable = true;
    ports = [
      631 # Printer
      33221 # SSH
    ];
    settings = {
      PasswordAuthentication = false;
      KbdInteractiveAuthentication = false;
      PermitRootLogin = "no";
    };
  };

  security.sudo.extraConfig = ''
    Defaults timestamp_timeout=30, pwfeedback
  '';
  security.polkit.enable = true;

  # Open RDP ports in the firewall.
  networking.firewall.allowedTCPPorts = [3389];
  networking.firewall.allowedUDPPorts = [3389];
  # Or disable the firewall altogether.
  # networking.firewall.enable = false;

  # This value determines the NixOS release from which the default
  # settings for stateful data, like file locations and database versions
  # on your system were taken. It‘s perfectly fine and recommended to leave
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
  system.stateVersion = "23.05"; # Did you read the comment?
}