nix/hosts/fighter/configuration.nix

{
  config,
  inputs,
  pkgs,
  ...
}: {
  imports = [
    inputs.dot013-environment.nixosModules.default
    ../../modules/nixos
    ./hardware-configuration.nix
    ./secrets.nix
  ];

  dot013.environment.enable = true;
  dot013.environment.interception-tools.devices = [
    "/dev/input/by-path/platform-i8042-serio-0-event-kbd"
    "/dev/input/by-id/usb-BY_Tech_Gaming_Keyboard-event-kbd"
    "/dev/input/by-id/usb-Compx_2.4G_Wireless_Receiver-event-kbd"
  ];

  programs.nh.enable = true;
  programs.nh.flake = "/home/guz/nix";

  profiles.locale.enable = true;

  virtualisation.docker.enable = true;

  programs.dconf.enable = true;

  programs.hyprland.enable = true;
  programs.hyprland.package = inputs.hyprland.packages.${pkgs.system}.hyprland.override {
    legacyRenderer = true;
  };

  programs.gnupg.agent = {
    enable = true;
    pinentryPackage = pkgs.pinentry-gnome3;
    settings = {
      default-cache-ttl = 3600 * 24;
    };
  };

  services.xserver = {
    enable = true;
    desktopManager.xfce.enable = true;
  };
  services.displayManager = {
    sddm.enable = true;
    sddm.wayland.enable = true;
  };
  hardware.opengl = {
    enable = true;
    extraPackages = with pkgs; [
      # vpl-gpu-rt
      onevpl-intel-gpu
    ];
  };

  services.flatpak.enable = true;
  xdg.portal.enable = true;
  xdg.portal.extraPortals = with pkgs; [
    xdg-desktop-portal-gtk
  ];

  services.tailscale = {
    enable = true;
    tailnetName = "kiko-liberty";
  };

  fonts.fontconfig.enable = true;
  fonts.packages = with pkgs; [
    fira-code
    (nerdfonts.override {fonts = ["FiraCode"];})
  ];

  home-manager-helper.enable = true;
  home-manager-helper.users."guz" = {
    name = "guz";
    shell = pkgs.zsh;
    hashedPasswordFile = builtins.toString config.sops.secrets."guz/password".path;
    home = import ./home.nix;
    isNormalUser = true;
    extraGroups = ["wheel" "networkmanager" "plugdev"];
    openssh.authorizedKeys.keyFiles = [
      ../../.ssh/guz-figther.pub
    ];
  };

  environment.systemPackages = with pkgs; [
    git
    libinput
    polkit_gnome
  ];

  hardware.bluetooth.enable = true;
  hardware.bluetooth.powerOnBoot = true;
  services.blueman.enable = true;
  # hardware.pulseaudio.enable = true;

  nix.settings = {
    experimental-features = ["nix-command" "flakes"];
    # substituters = ["https://hyprland.cachix.org"];
    # trusted-public-keys = ["hyprland.cachix.org-1:a7pgxzMz7+chwVL3/pzj6jIBMioiJM7ypFP8PwtkuGc="];
  };
  nix.package = pkgs.nixVersions.nix_2_21;
  nix.gc = {
    automatic = true;
    dates = "weekly";
    options = "--delete-older-than 10d";
  };

  services.logind = {
    lidSwitch = "suspend";
    lidSwitchExternalPower = "lock";
  };

  networking = {
    networkmanager.enable = true;
    hostName = "fighter";
    wireless.enable = false;
    dhcpcd.enable = true;
    defaultGateway = "${config.battleship-secrets.lesser.devices.defaultGateway}";
    interfaces."wlp2s0".ipv4.addresses = [
      {
        address = "${config.battleship-secrets.lesser.devices.figther}";
        prefixLength = 24;
      }
    ];
    nameservers = ["9.9.9.9"];
  };

  # Enable sound with pipewire.
  sound.enable = true;
  hardware.pulseaudio.enable = false;
  security.rtkit.enable = true;
  services.pipewire = {
    enable = true;
    alsa.enable = true;
    alsa.support32Bit = true;
    pulse.enable = true;
    # If you want to use JACK applications, uncomment this
    #jack.enable = true;

    # use the example session manager (no others are packaged yet so this is enabled by default,
    # no need to redefine it in your config for now)
    #media-session.enable = true;
  };

  # Bootloader.
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;

  # Allow unfree packages
  nixpkgs.config.allowUnfree = true;
  nixpkgs.config.allowUnfreePredicate = _: true;

  # Enable the OpenSSH daemon.
  services.openssh.enable = true;
  services.openssh.settings = {
    PasswordAuthentication = false;
    PermitRootLogin = "forced-commands-only";
  };

  # Open ports in the firewall.
  networking.firewall.allowedTCPPorts = [80 433];
  # networking.firewall.allowedUDPPorts = [ ... ];
  # Or disable the firewall altogether.
  networking.firewall.enable = true;

  # This value determines the NixOS release from which the default
  # settings for stateful data, like file locations and database versions
  # on your system were taken. It‘s perfectly fine and recommended to leave
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
  system.stateVersion = "23.11"; # Did you read the comment?
}