# Edit this configuration file to define what should be installed on
# your system.  Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).

{ config, pkgs, inputs, ... }:
{
    imports =
	    [
            inputs.sops.nixosModules.sops
            #inputs.spicetify-nix.nixosModules.default
	    ];

    teh-nix.nix.enable = true;
    
    # Use the systemd-boot EFI boot loader.
    boot = {
        loader.grub.enable = true;
        loader.grub.device = "nodev";
        loader.grub.efiSupport = true;
	    loader.grub.enableCryptodisk = true;
        # loader.grub.useOSProber = true;
        loader.efi.canTouchEfiVariables = true;
        kernel.sysctl."kernel.sysrq" = 502;
        plymouth.enable = true;
    };


    networking.hostName = "nixy"; # Define your hostname.
    # Pick only one of the below networking options.
    # networking.wireless.enable = true;	# Enables wireless support via wpa_supplicant.
    networking.networkmanager.enable = true;	# Easiest to use and most distros use this by default.

    sops.defaultSopsFile = ../secrets/general.yaml;
    sops.defaultSopsFormat = "yaml";
    
    sops.age.keyFile = "/home/boss/.config/sops/age/keys.txt";

    sops.secrets = {
        #"wg/nixnode/pub" = { };
        "wg/nixy/priv" = {
            restartUnits = [ "nm-file-secret-agent.service" ];
            group = "networkmanager";
            mode = "440";
        };
    };

    networking.firewall = {
        allowedUDPPorts = [ 51820 ];
    };
    networking.networkmanager.ensureProfiles = {
        profiles = {
            wg-nixnode = {
                connection = {
                    id = "wg-nixnode";
                    autoconnect = "false";
                    interface-name = "wg0";
                    type = "wireguard";
                };
                ipv4 = {
                    address1 = "10.100.0.2/32";
                    may-fail = "false";
                    method = "manual";
                };
                ipv6 = {
                    method = "disabled";
                };
                wireguard = {
                    listen-port = "51820";
                    private-key-flags = 1;
                    #private-key = "dummy";
                };
                proxy = { };
                "wireguard-peer./6bWy02DhOSjaeXk+ol5ATgEYDDJvL+mTO9SCNvfIUQ=" = {
                    allowed-ips = "0.0.0.0/0;";
                    endpoint = "172.105.172.191:51820";
                    persistent-keepalive = "25";
                };
            };
        };
        secrets.entries = [
            {
                matchId = "wg-nixnode";
                matchType = "wireguard";
                matchSetting = "wireguard";
                key = "private-key";
                file = config.sops.secrets."wg/nixy/priv".path;
            }
        ];
    };

    systemd.services."nm-file-secret-agent" = {
        serviceConfig.User = "boss";
    };
    

    # Set your time zone.
    time.timeZone = "NZ";

    # Configure network proxy if necessary
    # networking.proxy.default = "http://user:password@proxy:port/";
    # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";

    # Select internationalisation properties.
    i18n.defaultLocale = "en_US.UTF-8";
    console = {
	    font = "Lat2-Terminus16";
	    #keyMap = "us";
	    #useXkbConfig = true; # use xkbOptions in tty.
    };

    teh-nix.xorg = {
        enable = true;
    };
    
    programs.hyprland = {
        enable = true;
        #package = inputs.hyprland.packages.${pkgs.system}.hyprland;
        #portalPackage = inputs.hyprland.packages.${pkgs.system}.xdg-desktop-portal-hyprland;
    };

    security.pam.services.swaylock = {};

	# Enable CUPS to print documents.
	services.printing.enable = true;
    services.printing.drivers = with pkgs;[
        hplip
    ];
    services.avahi = {
        enable = true;
        nssmdns4 = true;
        openFirewall = true;
    };

	# Enable sound.
	#sound.enable = true;
	services.pipewire =
	    {
		    enable = true;
		    alsa.enable = false;
		    alsa.support32Bit = false;
		    pulse.enable = true;
	    };

    services.upower.enable = true;

	# Enable touchpad support (enabled default in most desktopManager).
    security.rtkit.enable = true;
    services.libinput = {
        enable = true;
		mouse = {
			accelProfile = "flat";
		};
	};

	# Define a user account. Don't forget to set a password with ‘passwd’.
	users.users.boss = {
	    isNormalUser = true;
	    extraGroups = [ "wheel" "networkmanager" "input" "uinput" ];
	};

	fonts.packages = with pkgs; [
	    #(nerdfonts.override { fonts = [ "Cousine" ]; })
        nerd-fonts.cousine
	];

	# List packages installed in system profile. To search, run:
	# $ nix search wget
	environment.systemPackages = with pkgs;
	    [
		    vim
		    firefox
		    pfetch
		    neofetch
            pinentry-gtk2
            git
            nm-file-secret-agent
	    ];
    documentation.dev.enable = true;
    
    hardware.graphics.enable32Bit = true;
    programs.steam = {
        enable = true;
        extraCompatPackages = with pkgs; [
            proton-ge-bin
        ];
    };

	# Some programs need SUID wrappers, can be configured further or are
	# started in user sessions.
	# programs.mtr.enable = true;
	programs.gnupg = {
        agent = {
	        enable = true;
            pinentryPackage = pkgs.pinentry-gtk2;
        };
	    #	 enableSSHSupport = true;
	};

    hardware.bluetooth.enable = true; # enables support for Bluetooth
    hardware.bluetooth.powerOnBoot = true; # powers up the default Bluetooth controller on boot
    services.blueman.enable = true;

    systemd.tmpfiles.rules = [
        "f /var/lib/systemd/linger/boss" # enables lingering
    ];

    
    services.ratbagd.enable = true;

    stylix = {
        enable = true;
        
        base16Scheme = "${pkgs.base16-schemes}/share/themes/material-palenight.yaml";

        image = ../wallpaper.png;
        targets.grub.useImage = true;

        opacity = {
            terminal = 0.8;
        };

        polarity = "dark";

        fonts = {
            monospace = {
                package = pkgs.nerd-fonts.cousine;
                name = "Cousine Nerd Font Mono";
            };

            serif = {
                package = pkgs.dejavu_fonts;
                name = "DejaVu Serif";
            };

            sansSerif = {
                package = pkgs.dejavu_fonts;
                name = "DejaVu Sans";
            };

            emoji = {
                package = pkgs.noto-fonts-emoji;
                name = "Noto Color Emoji";
            };
            
            sizes = {
                terminal = 10;
                applications = 10;
                desktop = 10;
                popups = 10;
            };
        };

        cursor = {
            package = pkgs.nordzy-cursor-theme;
            name = "Nordzy-cursors";
            size = 20;
        };
    };

	# Copy the NixOS configuration file and link it from the resulting system
	# (/run/current-system/configuration.nix). This is useful in case you
	# accidentally delete configuration.nix.
	# system.copySystemConfiguration = true;

	# This value determines the NixOS release from which the default
	# settings for stateful data, like file locations and database versions
	# on your system were taken. It‘s perfectly fine and recommended to leave
	# this value at the release version of the first install of this system.
	# Before changing this value read the documentation for this option
	# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
	system.stateVersion = "24.05"; # Did you read the comment?

}