nixos/hosts/snowhawk/configuration.nix

# Edit this configuration file to define what should be installed on
# your system.  Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running `nixos-help`).

{ pkgs, inputs, lib, config, ... }:

{
  imports = [
    inputs.home-manager.nixosModules.default
    ../../modules
  ];

  fonts.packages = with pkgs; [
    (nerdfonts.override { fonts = [ "JetBrainsMono" ]; })
  ];

  # Set your time zone.
  time.timeZone = "America/Los_Angeles";

  snowhawk = {
    nix-ld.enable = true;
    dwm.enable = true;
    syncthing.enable = true;
    plymouth.enable = true;
  };

  # Configure keymap in X11
  services.xserver = {
    xkb = {
      layout = "us";
      variant = "";
    };
  };

  # Enable CUPS to print documents.
  services.printing.enable = true;

  services.envfs.enable = true;

  # users sops setup
  sops.secrets."passwords/ravenshade".neededForUsers = true;
  users.mutableUsers = false;

  # Define a user account. Don't forget to set a password with `passwd`.
  users.users.ravenshade = {
    isNormalUser = true;
    description = "Zynh Ludwig";
    hashedPasswordFile = config.sops.secrets."passwords/ravenshade".path;
    extraGroups = [ "networkmanager" "wheel" "audio" ];
    packages = with pkgs; [
      ripgrep
      unzip
      fzf
      tree

      gparted
      arandr

      brave
      firefox

      # steam
      spotify
      discord
      steam-run
    ];
  };

  hardware.keyboard.uhk.enable = true;

  services.gnome.gnome-keyring.enable = true;

  programs.dconf.enable = true;

  # I think I need a gtk theme? gnome-keyring
  qt.platformTheme = "gtk2";

  # Enable automatic login for the user.
  services.displayManager.autoLogin = {
    enable = true;
    user = "ravenshade";
  };

  security.sudo.extraRules = lib.mkIf false [
    {
      users = [ "ravenshade" ];
      commands = [{
        command = "${pkgs.nixos-rebuild}/bin/nixos-rebuild";
        options = [ "SETENV" "NOPASSWD" ];
      }];
    }
  ];

  security.polkit.enable = true;

  home-manager.users = { "ravenshade" = import ./home.nix; };
  # home-manager.backupFileExtension = "backup";

  # programs.hyprland.enable = true;
  # environment.sessionVariables.NIXOS_OZONE_WL = "1";

  environment.systemPackages = with pkgs; [
    neovim
    curl
    git
    killall
  ];

  # Enable trash:/// support
  services.gvfs.enable = true;

  # Enable the OpenSSH daemon.
  services.openssh.enable = true;
  services.openssh.openFirewall = true;

  services.avahi.enable = true;

  systemd.services.wakeonlan = {
    description = "reenable wakeonlan every boot";
    after = [ "network.target" ];
    serviceConfig = {
      Type = "simple";
      RemainAfterExit = "true";
      ExecStart = "${lib.getExe pkgs.ethtool} -s enp7s0 wol g";
    };
    wantedBy = [ "default.target" ];
  };

  # Open ports in the firewall.
  # networking.firewall.allowedTCPPorts = [ ... ];
  # networking.firewall.allowedUDPPorts = [ ... ];
  # Or disable the firewall altogether.
  # networking.firewall.enable = false;

  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
  system.stateVersion = "23.11"; # Did you read the comment?
}