# Edit this configuration file to define what should be installed on
# your system.  Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).

{
  config,
  pkgs,
  pkgs-unstable,
  inputs,
  configPath,
  hostname,
  lib,
  ...
}:

{
  nix.settings.experimental-features = ["nix-command" "flakes"];

  # Nix optimizations
  nix.optimise.automatic = true;
  # nix.settings.auto-optimise-store = true;
  nix.gc = {
    automatic = true;
    interval = [{
      Hour = 2;
      Minute = 30;
      Weekday = 7; 
    }];
    # persistent = true;
    options = "--delete-older-than 30d";
  };

  networking.hostName = "eva-02"; # Define your hostname.
  # Configure network proxy if necessary
  # networking.proxy.default = "http://user:password@proxy:port/";
  # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";

  # Set your time zone.
  time.timeZone = "America/Los_Angeles";

  # Enable the X11 windowing system.
  # You can disable this if you're only using the Wayland session.
  # services.xserver.enable = true; # Enable for Darwin compatibility

  # Enable sound with pipewire.
  # hardware.pulseaudio.enable = false;
  #hardware.pulseaudio = {
  #  enable = true;
  #  package = pkgs.pulseaudioFull;
  #};
  
  # Enable Touch ID
  security.pam.services.sudo_local.touchIdAuth = true;


  # Define a user account. Don't forget to set a password with ‘passwd’.
  system.primaryUser = "rogueking";
  programs.zsh.enable = true;   
  users.users.rogueking = {
    # isNormalUser = true;
    description = "rogueking";
    # extraGroups = [ "admin" "staff" "wheel" "docker" ];
    home = "/Users/rogueking";
    shell = pkgs.zsh;
    packages = with pkgs; [
      #apps
      vscode
      #cli
    ];
  };

  homebrew = {
    enable = true;
    onActivation.autoUpdate = true;
    casks = [
      "1password"
      "1password-cli"
      "docker"
    ];
  };

  # Install firefox.
  # programs.firefox.enable = true;

  # Allow unfree packages
  nixpkgs.config.allowUnfree = true;

  # Enable OpenSSH daemon
  # services.openssh = {
  #   enable = true;
  #   # ports = [ 22 ];
  #   settings = {
  #     PasswordAuthentication = true;
  #     AllowUsers = [ "rogueking" ]; 
  #     UseDns = true;
  #     X11Forwarding = false;
  #     PermitRootLogin = "no";
  #     MaxAuthTries = 8;  
  #   };
  # };

  users.users."rogueking".openssh.authorizedKeys.keys = [
        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINXqriPZVIuduc/J7GS1mD171LL0gIbgEjlImsxedWVX"
  ];

  # List packages installed in system profile. To search, run:
  # $ nix search wget
  environment.systemPackages = with pkgs; [
    #apps
    
    #cli tools
    btop
    curl
    docker
    dust
    file
    findutils
    git
    kopia
    lazydocker
    nettools
    nix-prefetch-github
    nmap
    openssh
    openssl
    ptunnel
    tailscale
    unzip
    vim

    nerd-fonts.hack
    nerd-fonts.fira-code
  ];

  home-manager = {
    extraSpecialArgs = {
      inherit
        configPath
        inputs
        pkgs-unstable
        hostname
        ;
    };
    users = {
      "rogueking" = import ./../../home-manager/home.nix;
    };
    backupFileExtension = "backup";
  };

  # Some programs need SUID wrappers, can be configured further or are
  # started in user sessions.
  # programs.mtr.enable = true;
  # programs.gnupg.agent = {
  #   enable = true;
  #   enableSSHSupport = true;
  # };

  # List services that you want to enable:

  # Enable the OpenSSH daemon.
  # services.openssh.enable = true;

  # Open ports in the firewall.
  # networking.firewall.allowedTCPPorts = [ ... ];
  # networking.firewall.allowedUDPPorts = [ ... ];
  # Or disable the firewall altogether.
  # networking.firewall.enable = false;

  system.stateVersion = 6; 
}