# Edit this configuration file to define what should be installed on
# your system.  Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).

{ config, pkgs, ... }:
#let
#  sops-nix = builtins.fetchTarball {
#    # Pin this to a real commit rather than master.
#    url = "https://github.com/Mic92/sops-nix/archive/<COMMIT>.tar.gz";
#    sha256 = "<HASH>";
#  };
#in
{
  imports =
    [ # Include the results of the hardware scan.
      ./hardware-configuration.nix
      <home-manager/nixos>
      #"${sops-nix}/modules/sops"
    ];

  # Bootloader.
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;

  # Use latest kernel.
  boot.kernelPackages = pkgs.linuxPackages_latest;

  networking.hostName = "nixos"; # Define your hostname.
  networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.

  # Configure network proxy if necessary
  # networking.proxy.default = "http://user:password@proxy:port/";
  # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";

  # Enable networking
  networking.networkmanager.enable = true;

  # Set your time zone.
  time.timeZone = "America/New_York";

  # Select internationalisation properties.
  i18n.defaultLocale = "en_US.UTF-8";

  i18n.extraLocaleSettings = {
    LC_ADDRESS = "en_US.UTF-8";
    LC_IDENTIFICATION = "en_US.UTF-8";
    LC_MEASUREMENT = "en_US.UTF-8";
    LC_MONETARY = "en_US.UTF-8";
    LC_NAME = "en_US.UTF-8";
    LC_NUMERIC = "en_US.UTF-8";
    LC_PAPER = "en_US.UTF-8";
    LC_TELEPHONE = "en_US.UTF-8";
    LC_TIME = "en_US.UTF-8";
  };

  # Configure keymap in X11
  services.xserver.xkb = {
    layout = "us";
    variant = "";
  };
  
  # Define a user account. Don't forget to set a password with ‘passwd’.
  users.users."aselimov" = {
    isNormalUser = true;
    description = "Alex Selimov";
    extraGroups = [ "networkmanager" "wheel" "input" "uinput" ];
    packages = with pkgs; [];
    openssh.authorizedKeys.keys = [
	"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKhECKhmRPyFn63AXALvKEaRtvPQn6lWbA8p7jaymwSj alex@alexselimov.xyz"
    ];
  };

  # Allow unfree packages
  nixpkgs.config.allowUnfree = true;

  # List packages installed in system profile. To search, run:
  # $ nix search wget
  environment.systemPackages = with pkgs; [
	htop
	killall
	pinentry-gnome3
  ];

  # Some programs need SUID wrappers, can be configured further or are
  # started in user sessions.
  # programs.mtr.enable = true;
  # programs.gnupg.agent = {
  #   enable = true;
  #   enableSSHSupport = true;
 # };
  programs.niri.enable=true;

  services.displayManager.regreet = {
  	enable = true;
	cageArgs = [
		"-s"
		"-d"
		"-m"
		"last"
	];

	settings = {
		appearance = {
			greeting_msg = "Welcome back!";
		};

		widget.clock = {
			format = "%a %H:%M";
		};
	};
  };
  programs.git.enable=true;

  services.keyd = {
	enable = true;
	keyboards = {
		laptop = {
			ids = [ "0001:0001"];

			settings = {
				main = {
					leftalt = "leftmeta";
					leftmeta = "leftalt";
				};
			};
		};
	};
  };

  programs.zsh.enable = true;
  users.users = {
  	aselimov.shell = pkgs.zsh;
	root.shell = pkgs.zsh;
  };

  # Changes needed to get unfied super+c copy
  hardware.uinput.enable = true;
  boot.kernelModules = [
  	"uinput"
  ];

  services.udev.extraRules = ''
  	  KERNEL=="uinput", GROUP="input", MODE:="0660", TAG+="uaccess", OPTIONS+="static_node=uinput"
  '';

  virtualisation.podman = {
	enable = true;
	dockerSocket.enable=true;
	dockerCompat = true;
	defaultNetwork.settings.dns_enabled = true;
  };

  # Set up doas

  security.sudo.enable = false;
  security.doas = {
	enable = true;
	extraRules = [
	  {
	    users = [ "aselimov" ];
	    keepEnv = true;
	    persist = true;
	  }
	];
  };

  security.sudo-rs.execWheelOnly = false;

  # List services that you want to enable:

  # Enable the OpenSSH daemon.
  services.openssh.enable = true;

  # Open ports in the firewall.
  # networking.firewall.allowedTCPPorts = [ ... ];
  # networking.firewall.allowedUDPPorts = [ ... ];
  # Or disable the firewall altogether.
  # networking.firewall.enable = false;

  # This value determines the NixOS release from which the default
  # settings for stateful data, like file locations and database versions
  # on your system were taken. It‘s perfectly fine and recommended to leave
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
  system.stateVersion = "26.05"; # Did you read the comment?

  home-manager.useGlobalPkgs = true;
  home-manager.useUserPackages = true;
  
  home-manager.users.aselimov = import ./home/aselimov/home.nix;
  home-manager.users.root = import ./home/root/home.nix;

  # Getting gsettings working properly for systemd service 
  environment.sessionVariables.XDG_DATA_DIRS = [
    "${pkgs.gsettings-desktop-schemas}/share/gsettings-schemas/${pkgs.gsettings-desktop-schemas.name}"
    "${pkgs.gtk3}/share/gsettings-schemas/${pkgs.gtk3.name}"
    "${pkgs.gtk4}/share/gsettings-schemas/${pkgs.gtk4.name}"
  ];
}