machine-config/oscar/configuration.nix

# Edit this configuration file to define what should be installed on
# your system.  Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).

{ config, pkgs, lib, ... }:

{
  imports =
    [
      <nixos-hardware/framework/13-inch/7040-amd>
      ./hardware-configuration.nix
      <home-manager/nixos>
    ];

  nixpkgs.config.allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [
    "steam"
    "steam-original"
    "steam-run"
    "steam-unwrapped"
  ];

  # https://discourse.nixos.org/t/github-strategies-for-configuration-nix/1983/14
  nix.nixPath = [
    "nixpkgs=/nix/var/nix/profiles/per-user/root/channels/nixos"
    "nixos-config=/home/chandler/projects/machine-config/${config.networking.hostName}/configuration.nix"
    "/nix/var/nix/profiles/per-user/root/channels"
  ];

  # Bootloader.
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;

  boot.plymouth.enable = true;
  boot.plymouth.theme = "breeze";

  boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
  boot.binfmt.registrations.aarch64-linux = {
    interpreter = "${pkgs.pkgsStatic.qemu-user.override { hostCpuTargets = ["aarch64-linux-user"]; }}/bin/qemu-aarch64";
    wrapInterpreterInShell = false;
    fixBinary = true;
  };

  boot.initrd.luks.devices."luks-ca2fdf0b-d385-498c-9f7d-f58368a65fd4".device = "/dev/disk/by-uuid/ca2fdf0b-d385-498c-9f7d-f58368a65fd4";
  networking.hostName = "oscar"; # Define your hostname.
  # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.

  # Configure network proxy if necessary
  # networking.proxy.default = "http://user:password@proxy:port/";
  # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";

  # Enable networking
  networking.networkmanager.enable = true;

  # Set your time zone.
  time.timeZone = "America/Chicago";

  # Select internationalisation properties.
  i18n.defaultLocale = "en_US.UTF-8";

  i18n.extraLocaleSettings = {
    LC_ADDRESS = "en_US.UTF-8";
    LC_IDENTIFICATION = "en_US.UTF-8";
    LC_MEASUREMENT = "en_US.UTF-8";
    LC_MONETARY = "en_US.UTF-8";
    LC_NAME = "en_US.UTF-8";
    LC_NUMERIC = "en_US.UTF-8";
    LC_PAPER = "en_US.UTF-8";
    LC_TELEPHONE = "en_US.UTF-8";
    LC_TIME = "en_US.UTF-8";
  };

  # Enable the KDE Plasma Desktop Environment.
  services.displayManager.sddm.enable = true;
  services.displayManager.sddm.wayland.enable = true;
  services.desktopManager.plasma6.enable = true;

  # Configure keymap in X11
  services.xserver.xkb = {
    layout = "us";
    variant = "";
  };

  services.fwupd.enable = true;

  # Enable CUPS to print documents.
  services.printing.enable = true;

  services.atd.enable = true;

  services.hardware.bolt.enable = true;

  virtualisation.docker.enable = true;

  hardware.bluetooth.enable = true;

  hardware.keyboard.qmk.enable = true;

  # Enable sound with pipewire.
  hardware.pulseaudio.enable = false;
  security.rtkit.enable = true;
  services.pipewire = {
    enable = true;
    alsa.enable = true;
    alsa.support32Bit = true;
    pulse.enable = true;
    # If you want to use JACK applications, uncomment this
    jack.enable = true;

    # use the example session manager (no others are packaged yet so this is enabled by default,
    # no need to redefine it in your config for now)
    #media-session.enable = true;
  };

  # Enable touchpad support (enabled default in most desktopManager).
  # services.xserver.libinput.enable = true;

  environment.sessionVariables.NIXOS_OZONE_WL = "1";

  # Define a user account. Don't forget to set a password with ‘passwd’.
  users.users.chandler.isNormalUser = true;
  users.users.chandler.description = "Chandler Swift";
  users.users.chandler.extraGroups = [ "networkmanager" "wheel" "dialout" "cdrom" "plugdev" ];
  home-manager.backupFileExtension = "backup";
  home-manager.users.chandler = { pkgs, ... }: {

    nixpkgs.config.allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [
      "factorio-alpha"
      "discord"
    ];

    home.packages = with pkgs; [
      # applications
      blender
      freecad
      frescobaldi
      gimp
      gnome-sound-recorder
      josm
      kate
      # kicad # https://github.com/NixOS/nixpkgs/issues/335003
      (import (fetchTarball "https://github.com/NixOS/nixpkgs/archive/13456ccaf2874c921891b04fe0c39fc79aa7357f.tar.gz") {}).kicad
      libreoffice-qt
      prismlauncher
      prusa-slicer
      qgis

      # command line applications
      beets
      iperf
      units

      # command line utilities
      alsa-utils
      dig
      file
      git-absorb
      killall
      pv
      wl-clipboard

      # a few basic compilers
      clang
      go
      rustc

      # Unfree:
      discord
      factorio
    ];

    programs.thunderbird.enable = true;

    programs.bash.enable = true;

    programs.direnv = {
      enable = true;
      enableBashIntegration = true;
      nix-direnv.enable = true;
    };

    programs.emacs = {
      enable = true;
      package = pkgs.emacs-gtk;
      extraPackages = epkgs: [
        epkgs.nix-mode
        epkgs.magit
        epkgs.rust-mode
      ];
    };

    programs.git = {
      enable = true;
      userEmail = "chandler@chandlerswift.com";
      userName = "Chandler Swift";
      lfs.enable = true;
      # TODO: delta or diff-so-fancy or difftastic
      extraConfig = {
        init.defaultBranch = "main";
        pull.ff = "only";
        #init.templatedir = "~/.git-template"; # unsure what this was intended to do -- default hooks, maybe?
        #TODO: smtp gives some error. Why? Also, do I need a password?
        # smtpserver = "smtp.migadu.com";
        # smtpuser = "chandler@chandlerswift.com";
        # smtpencryption = "tls";
        # smtpserverport = 587;
        url."https://aur.archlinux.org/".insteadOf = "aur:";
        url."ssh://aur@aur.archlinux.org/".pushInsteadOf = "aur:";
        url."ssh://git@github.com/ChandlerSwift/".insteadOf = "gh:";
        url."ssh://forgejo@bert/chandlerswift/".insteadOf = "forgejo:";
        push.autoSetupRemote = true;
        rebase.autosquash = true;
        rebase.autostash = true;
        fetch.parallel = 0; # "some reasonable default"
      };
      ignores = [
        "*.kate-swp"
        "*.swp"
        "*~"
        "\\#*\\#"
        "venv"
      ];
      hooks = {
        pre-commit = ./git-pre-commit-hook;
      };
      signing.signByDefault = true;
      signing.key = null; # "let GnuPG decide what signing key to use depending on commit's author"
    };

    programs.ssh = {
      enable = true;
      addKeysToAgent = "yes";
      matchBlocks = {
        bigbird = {
          user = "root";
        };
      };
      includes = [
        "config.d/*"
      ];
    };

    programs.firefox = {
      enable = true;
#       profiles = {
#         default = {
#           id = 0;
#           name = "default";
#           isDefault = true;
#           search.default = "DuckDuckGo";
#         };
#       };
    };

    programs.chromium = {
      enable = true;
      extensions = [
        { id = "cjpalhdlnbpafiamejdnhcphjbkeiagm"; } # ublock origin
      ];
    };

    programs.atuin = {
      enable = true;
      flags = [
        "--disable-up-arrow"
      ];
    };

    services.kdeconnect.enable = true;

    home.stateVersion = "23.11";
  };

  # List packages installed in system profile. To search, run:
  # $ nix search wget
  environment.systemPackages = with pkgs; [
    power-profiles-daemon
  ];

  # Some programs need SUID wrappers, can be configured further or are
  # started in user sessions.
  # programs.mtr.enable = true;
  programs.gnupg.agent = {
    enable = true;
#     enableSSHSupport = true;
  };

  programs.ssh.startAgent = true;

  programs.steam.enable = true;

  # List services that you want to enable:

  services.fprintd.enable = true;

  # Enable the OpenSSH daemon.
  # services.openssh.enable = true;

  # Open ports in the firewall.
  # networking.firewall.allowedTCPPorts = [ ... ];
  # networking.firewall.allowedUDPPorts = [ ... ];
  # Or disable the firewall altogether.
  networking.firewall.enable = false;

  # This value determines the NixOS release from which the default
  # settings for stateful data, like file locations and database versions
  # on your system were taken. It‘s perfectly fine and recommended to leave
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
  system.stateVersion = "23.11"; # Did you read the comment?

}