# Edit this configuration file to define what should be installed on
# your system.  Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).

{ config, pkgs, ... }:

{
  imports =
    [
      # Include the results of the hardware scan.
      ./hardware-configuration.nix
      # Support Brother scanner
      <nixpkgs/nixos/modules/services/hardware/sane_extra_backends/brscan4.nix>
      # Include Framework-specific tweaks supported by the NixOS community
      <nixos-hardware/framework/16-inch/common>
      # This amazing script seems to cause the computer to not have a properly functioning screen
      # if it is put to sleep by closing the lid.  So, uh, not good.
      # ./framework-lid-workaround.nix
      # Presumably need to re-add the Nix home-manager channel before adding this back.
      # <home-manager/nixos>
    ];

  # List packages installed in system profile. To search, run:
  # $ nix search example
  environment.systemPackages = with pkgs; [
  #  vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
    # amarok # music player - that is so far from intuitive i *could not start a track playing at all*
    annotator # image annotation, KDE's Spectacle does too but only for screenshots it just took, maybe ksnip or shutter would be more flexible screenshot tools, hmm kdePackages.kquickimageedit and kdePackages.kimageannotator basically use the same tools as Spectacle, i'll try them too.
    ansible
    authenticator # 2-factor auth, it's for Gnome but it's the only good one (can scan in from the phone etc)
    backintime
    beets
    # birdtray
    bitwarden-cli
    bitwarden-desktop
    bitwarden-menu
    brave
    btop
    calibre
    cobalt # Static site generator written in Rust
    # unstable.comaps
    colordiff # https://www.colordiff.org/
    contrast
    converseen
    cruft
    cups-brother-hll2375dw
    curl
    ddev
    dbeaver-bin
    delta # https://github.com/dandavison/delta syntax highlighting for git, diff, etc
    diff-so-fancy # https://github.com/so-fancy/diff-so-fancy git etc diff highlighting
    diffr
    dig
    direnv
    dmidecode
    docker
    docker-buildx
    # dog # breaks build
    duckdb
    # espanso-wayland # breaks build??? # no longer breaks build but is constant errors in journalctl
    et # 'egg timer' command-line-ish timer app; mpris-timer is a Gnome graphical alternative in the surprisingly sparse set of timer options (cannot find one built into KDE?)
    exif
    fish
    fishPlugins.done
    fira-mono # coding font WITHOUT ligatures, thank god
    firefox
    firefoxpwa
    flameshot # screenshots with annotations
    floorp-bin
    fsearch
    getxbook
    # gimp-with-plugins # Currently breaks build, but works if in nix shell solo
    ghostty
    gImageReader # OCR image to text
    git
    git-open
    gitui # https://github.com/gitui-org/gitui
    gtk3 # for Pomodoro Prompt
    gnucash
    gnumake
    gobject-introspection # for Pomodoro Prompt
    # handbrake # converting video, https://handbrake.fr/
    helix # modal text editor
    htop
    hunspell
    hunspellDicts.en_US-large
    hunspellDicts.es_MX
    i2p # invisible internet, privacy http://geti2p.net/
    inetutils # telnet among other things
    # jitsi # - this is unusuable with a regular Jitsi Meet server like May First?
    jitsi-meet-electron # currently breaks build
    jq
    just
    kdePackages.audex
    kdePackages.filelight
    kdePackages.isoimagewriter
    kdePackages.kasts
    kdePackages.kcalc
    kdePackages.kcolorchooser
    # kdePackages.kdenetwork-filesharing
    # kdePackages.keysmith
    kdePackages.kimageannotator
    kdePackages.konqueror
    kdePackages.kontrast # Accessibility color contrast comparison, but it cannot undarken the non-active windows, which are all of them when it is in use.
    kdePackages.kquickimageedit
    kdePackages.krecorder
    kdePackages.kruler
    kdePackages.kweather
    # kdePackages.neochat # For matrix but relying on insecure olm-3.2.16
    kdePackages.partitionmanager
    kdePackages.print-manager
    kdePackages.skanlite # Simple document scanner interface
    kdePackages.xdg-desktop-portal-kde
    kdiff3
    keepassxc
    kirc
    # kiwix
    # kiwix-tools
    krename
    krusader # Split-window file manager in teh style of Midnight Commander
    # kupfer # a nice launcher, installed because my main desktop screen is broken and i needed a way to see what apps i was picking - not used it much since though, so uninstalling
    libinput
    libreoffice-qt6-still # this is basically unusable, graphics all mis-aligned
    # light
    losslesscut-bin # simple audio/video editor GUI via https://chaos.social/@nblr/113911420594814380
    lshw
    magic-wormhole
    md2pdf
    mdbook
    meld
    mise # Mise-en-place, development environment setup tool
    mkcert
    mmv
    ncdu
    # nemo-with-extensions  # was not a huge fan
    neovim # aka nvim
    nerd-fonts.zed-mono # Default font for Zed code editor
    nextcloud-client
    # nheko # For matrix but relying on insecure olm-3.2.16
    # nfs-utils
    niri # scrollable-tiling Wayland compositor, whatever exactly that is
    nirius
    niriswitcher
    nix-search-cli
    novelwriter
    onlyoffice-desktopeditors
    # openshot-qt # Video editing, http://www.openshot.org/ # SUPER frustrating dependency to track down, it relied on insecure qtwebengine-5.15.19
    pandoc # convert between markup formats https://hackage.haskell.org/package/pandoc-cli 
    # peruse # Read comic books, zines, graphic novels a bit more easily # 'peruse' has been removed as it depends on KDE Gear 5, which has reached EOL
    paperwork # Digital document manager with OCR
    photini # digital photograph metadata editing
    php # does PHP 8.2 currently and there's php81, php83, and php84 alternatives
    php82Packages.composer
    # php84Packages.composer ansible_2_16
    pinta # simple image editing
    (python3.withPackages(ps: with ps; [
      numpy
      pandas
      playsound
      pycairo
      pygobject3
      python-dotenv
      pytz
      tzlocal
    ])) # https://github.com/NixOS/nixpkgs/blob/master/doc/languages-frameworks/python.section.md#environment-defined-in-etcnixosconfigurationnix-environment-defined-in-etcnixosconfigurationnix (note this is literally the last thing they wanted me to do, would rather it not be global) but i want Pomodoro Prompt and Parse Timelogs to be able to run directly.
    # python313Packages.pip
    poppins
    postgresql
    # qrscan - has been removed, as it does not build with supported LLVM versions
    # quick-lookup
    # radiotray-ng # Prefer shortwave for real radio  # breaking build
    recoll
    repren
    reveal-md
    rink # calculator and unit converter
    rofi
    # rustdesk - not using error-ish
    # samba - not using…?
    sassc # Convenient to use directly, though it is deprecated in favor of dart-sass i think
    sc-im # terminal spreadsheets https://github.com/andmarti1424/sc-im
    shortwave
    shotwell # Even though i'm not on Gnome anymore, really don't see the need to switch to KPhotoAlbum (NixOS has to download more for that anyway).  The other option is digikam and if getting into RAW and editing more, darktable
    signal-desktop
    sioyek # Science-document-focused PDF viewer
    slack
    slides # markdown presentation viewer
    sly # simple image editing
    spideroak # backups
    starship # fancy command line prompt
    # strawberry-qt6 # oh no, breaks build with a libgpod fail.
    system-config-printer
    tdf # Terminal PDF viewer
    textpieces
    tldr
    thunderbird
    # toot
    tor-browser
    tuner # UI for radio stations that have online streams.
    transmission_4-qt
    trashy
    tuba
    ungoogled-chromium
    vimPlugins.vim-fetch
    vimPlugins.vim-wayland-clipboard
    wget
    whois
    vimplugin-wezterm.nvim # WeztermSpawn to start a task in new tab https://github.com/willothy/wezterm.nvim/
    vivaldi # proprietary but privacy-focused web browser
    vlc
    vscodium
    # wcalc - command-line calculator but rink does that plus unit conversion!
    wezterm # Terminal: https://wezterm.org/
    wl-clipboard-rs
    # wrapGAppsHook # for Pomodoro Prompt ; would need to use wrapGAppsHook4 or 3
    xorg.xkill
    # xpdf # Simple PDF viewer - currently marked insecure
    yt-dlp
    zed-editor
    zoxide
    zulip
    # zulip-term
  ];
  environment.pathsToLink = [ "/share/fish" ];

  # Add ~/.local/bin/ to $PATH
  environment.localBinInPath = true;
  environment.homeBinInPath = true;  
  # Only this works, from https://github.com/NixOS/nixpkgs/issues/157383#issuecomment-1186081648
  environment.shellInit = ''
    export PATH="$PATH:$HOME/.local/bin"
  '';

  # Needed for Slack but probably helps other stuff too.
  # See https://wiki.nixos.org/wiki/Slack
  environment.sessionVariables.NIXOS_OZONE_WL = "1";

  # Make it possible for ddev to modify the /etc/hosts file.
  # Otherwise you'll have to manually change the
  # hosts configuration after creating a new ddev project.
  environment.etc.hosts.mode = "0644";

  # Bootloader.
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;

  # Garbage collection - via https://discourse.nixos.org/t/no-space-left-on-boot/24019/8
  nix.gc = {
    automatic = true;
    randomizedDelaySec = "14m";
    options = "--delete-older-than 60d";
  };

  # Hardware
  # hardware.sane.enable = true; # enables support for SANE scanners per https://wiki.nixos.org/wiki/Scanners
  hardware = {
    sane = {
      enable = true;
      brscan4 = {
        enable = true;
        netDevices = {
          home = { model = "HL-L2380DW"; ip = "192.168.178.23"; };
        };
      };
    };
  };

  networking.hostName = "nixos"; # Define your hostname.
  # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.

  # Configure network proxy if necessary
  # networking.proxy.default = "http://user:password@proxy:port/";
  # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";

  # Enable networking
  networking.networkmanager.enable = true;

  # Set your time zone.
  time.timeZone = "America/New_York";

  # Select internationalisation properties.
  i18n.defaultLocale = "en_US.UTF-8";

  i18n.extraLocaleSettings = {
    LC_ALL = "en_US.UTF-8";
    LC_ADDRESS = "en_US.UTF-8";
    LC_IDENTIFICATION = "en_US.UTF-8";
    LC_MEASUREMENT = "en_US.UTF-8";
    LC_MONETARY = "en_US.UTF-8";
    LC_NAME = "en_US.UTF-8";
    LC_NUMERIC = "en_US.UTF-8";
    LC_PAPER = "en_US.UTF-8";
    LC_TELEPHONE = "en_US.UTF-8";
    LC_TIME = "en_US.UTF-8";
  };

  # Temporarily remove Orca which cannot be turned off and unfortunately also is not able to work well on KDE etc.  Here in NVIM, for example, it tells me when i write a 'space' and claims any line i go to is blank— worse than useless. 
  services.orca.enable = false;

  # Just make bin/bash work, see https://github.com/Mic92/envfs
  # via the long, sad https://discourse.nixos.org/t/add-bin-bash-to-avoid-unnecessary-pain/5673/37
  services.envfs.enable = true;

  # Via https://github.com/NixOS/nixos-hardware/tree/master/framework
  services.fwupd.enable = true;
  services.fwupd.extraRemotes = [ "lvfs-testing" ];
  # Might be necessary once to make the update succeed
  services.fwupd.uefiCapsuleSettings.DisableCapsuleUpdateOnDisk = true;

  # Enable the X11 windowing system.
  # You can disable this if you're only using the Wayland session.
  services.xserver.enable = true;

  # Enable the KDE Plasma Desktop Environment.
  services.displayManager.sddm.enable = true;
  services.desktopManager.plasma6.enable = true;

  # Enable DNSmasq and hope it fixes DDEV.
  # UPDATE disabled it all some months after enabling since my computer on 2025-12-27
  # spontanously shut off once and froze once; both times the last logged message was 
  # "dnsmasq dies and gets respawned too quickly. Back off. Something is very wrong"
  # services.dnsmasq.enable = true;
  # services.dnsmasq = {
  #  enable = true;
  #  settings = {
  #    address = "/.dev/127.0.0.1";
  #    domain = "dev";
  #    local = "/dev/";
  #    bind-interfaces = true;
  #    listen-address = "127.0.0.1";
  #    server = [
  #      "8.8.8.8"
  #      "8.8.4.4"
  #      "1.1.1.1"
  #    ];
  #  };
  # };
  # networking.networkmanager.dns = "dnsmasq";

  # Configure keymap in X11
  services.xserver.xkb = {
    layout = "us";
    variant = "dvorak-alt-intl";
  };

  # Configure console keymap
  console.keyMap = "dvorak";

  # Enable CUPS to print documents.
  services.printing.enable = true;

  # Add Brother printer drivers, per https://nixos.wiki/wiki/Hardware/Brother
  services.printing.drivers = [
    pkgs.brlaser
    pkgs.brgenml1lpr
    pkgs.brgenml1cupswrapper
  ];

  # Enable sound with pipewire.
  services.pulseaudio.enable = false;
  security.rtkit.enable = true;

  # Enable samba network filesharing in Dolphin
  # security.wrappers = {
  #  mount.source = "${pkgs.utillinux}/bin/mount";
  #  umount.source = "${pkgs.utillinux}/bin/umount";
  #};
  #security.wrappers."mount.nfs".source = "${pkgs.nfs-utils.out}/bin/mount.nfs";

  services.pipewire = {
    enable = true;
    alsa.enable = true;
    alsa.support32Bit = true;
    pulse.enable = true;
    # If you want to use JACK applications, uncomment this
    #jack.enable = true;

    # use the example session manager (no others are packaged yet so this is enabled by default,
    # no need to redefine it in your config for now)
    #media-session.enable = true;
  };

  # Install & enable docker.
  virtualisation.docker.enable = true;

  # Enable touchpad support (enabled default in most desktopManager).
  # services.xserver.libinput.enable = true;

  # Define a user account. Don't forget to set a password with ‘passwd’.
  users.users.mlncn = {
    isNormalUser = true;
    description = "mlncn";
    extraGroups = [ "networkmanager" "wheel" "docker" "scanner" "lp" ];
    packages = with pkgs; [
      discord # trash as is predictable, but damn it is hard to get Nix to say what the damn problem is, --show-trace on the rebuild is the only way because i can only get nix why-depends
      kdePackages.kate
      logseq
    ];
    # Per Chris for SSHing from the old machine to here
    openssh.authorizedKeys.keys = [ "ssh-ed25519 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIc/pc2oL80XjIeeazzT5YOCrEaPW7uohA/qlmGr5cM6 mlncn@d64" ];
  };
  # home-manager.users.mlncn = { pkgs, ... }: {
  #  home.packages = [
  #    pkgs.atool
  #    pkgs.httpie
  #  ];
  #  programs.bash.enable = true;
  #  programs.fish.enable = true;

    # The state version is required and should stay at the version you
    # originally installed.
  #  home.stateVersion = "24.05";
  # };
  # home-manager.useUserPackages = true;
  # home-manager.useGlobalPkgs = true;


  # Install firefox.
  # Going with the main packages version instead
  # programs.firefox.enable = true; # Going with the main packages version instead because this version cannot screenshare and seems to tend to be a minor point version behind anyway https://discourse.nixos.org/t/screen-sharing-with-wayland-gnome/12449/8
  programs.firefox.nativeMessagingHosts.packages = [ pkgs.firefoxpwa ];
  programs.fish.enable = true;
  programs.bash = {
    interactiveShellInit = ''
      if [[ $(${pkgs.procps}/bin/ps --no-header --pid=$PPID --format=comm) != "fish" && -z ''${BASH_EXECUTION_STRING} ]]
      then
        shopt -q login_shell && LOGIN_OPTION='--login' || LOGIN_OPTION=""
        exec ${pkgs.fish}/bin/fish $LOGIN_OPTION
      fi
    '';
  };
  # Support AppImages
  # programs.appimage.enable = true;
  # programs.appimage.binfmt = true;

  nixpkgs.config = {
    # Allow unfree packages
    allowUnfree = true;
    # Allow getting packages from unstable by prefixing unstable in package list.
    packageOverrides = pkgs: {
      unstable = import <nixpkgs> {
        config = config.nixpkgs.config;
      };
    };
  };

  # TODO remove this when Logseq gets its act together
  # nixpkgs.config.permittedInsecurePackages = [
  #  "olm-3.2.16"
  # ];

  # Some programs need SUID wrappers, can be configured further or are
  # started in user sessions.
  # programs.mtr.enable = true;
  # programs.gnupg.agent = {
  #   enable = true;
  #   enableSSHSupport = true;
  # };

  # List services that you want to enable:

  # Enable the OpenSSH daemon.
  services.openssh.enable = true;

  # Open ports in the firewall.
  # networking.firewall.allowedTCPPorts = [ ... ];
  # networking.firewall.allowedUDPPorts = [ ... ];
  # Or disable the firewall altogether.
  # networking.firewall.enable = false;
  networking.firewall.allowedTCPPorts = [ 9003 ];

  # This value determines the NixOS release from which the default
  # settings for stateful data, like file locations and database versions
  # on your system were taken. It‘s perfectly fine and recommended to leave
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
  system.stateVersion = "24.05"; # Did you read the comment?

}