nixos/hosts/kim/default.nix

# kim
# System configuration for a vm on my desktop

{ inputs, globals, ... }:

with inputs;

inputs.nixpkgs.lib.nixosSystem {
  system = "x86_64-linux";
  modules = [
    globals
    lix-module.nixosModules.default
    home-manager.nixosModules.home-manager
    sops-nix.nixosModules.sops
    ./hardware-configuration.nix
    ./audio.nix
    ./netbird.nix
    ../../modules/common
    ../../modules/nixos
    {
      home-manager.useGlobalPkgs = true;
      # something with overlays, I don't get those yet.

      nixpkgs.config.permittedInsecurePackages = [
        "jitsi-meet-1.0.8043"
      ];

      # Hardware
      physical = true;
      networking.hostName = "kim";

      networking.useDHCP = nixpkgs.lib.mkDefault true;
      networking.networkmanager.unmanaged = [ "tailscale0" ];

      # TODO: identityFile = "/home/${globals.user}/.ssh/id_ed2519";
      # TODO: passwordHash = nixpkgs.lib.fileContents ../../password.sha512;

      # Theming?

      sops = {
        defaultSopsFile = ../../secrets/secrets.yaml;
        defaultSopsFormat = "yaml";
        age.keyFile = "/home/annika/.config/sops/age/keys.txt";
        age.sshKeyPaths = [
          "/home/annika/.ssh/id_ed25519"
        ];
      };

      # TODO: Temporary, remove eventually!
      # networking.networkmanager.enable = true;
      time.timeZone = "America/New_York";
      nix.settings.experimental-features = [ "nix-command" "flakes" ];

      nixpkgs.config.allowUnfree = true;
      system.stateVersion = "23.11";
      home-manager.backupFileExtension = "backup";
      hardware.bluetooth.enable = true;
      hardware.bluetooth.powerOnBoot = true;

      # Enable hardware features
      audio.enable = true;
      gui.enable = true;

      services.openssh.enable = true;
      services.flatpak.enable = true;
      # Apps
      discord.enable = true;
      element.enable = true;
      firefox.enable = true;
      kcalc.enable = true;
      kitty.enable = true;
      # netbird.enable = true; See netbird.nix (I can't access the sops stuff from here?)
      openrgb.enable = true;
      prusa-slicer.enable = true;
      spotifyd.enable = true;
      thunderbird.enable = true;
      # Gaming
      steam.enable = true;
      # Programming Stuff
      nixpkgs-fmt.enable = true;
      platformio.enable = true;
      python3.enable = true;
      vscode.enable = true;
      virt-manager.enable = true;
      # Utilities
      # git is not optional
      docker.enable = true;
      yubikey.enable = true;
      kdeconnect.enable = true;
      tailscale.enable = true;

      # TODO: Move this out

      nix.gc = {
        automatic = true;
        randomizedDelaySec = "14m";
        options = "--delete-older-than 10d";
      };
    }
  ];
}