nixos-config/hosts/default/configuration.nix

# Edit this configuration file to define what should be installed on
# your system.  Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).

# New TODO: 
# - investigate tmux-session-wizard, and tpm
# - see if zoxide can import .z file (from z.sh)
# - so far, have added aliases and bashrc directly, along with bin folder and ssh setup.
# - aaaaaah! so much

{ config, pkgs, inputs, ... }:

{
  imports =
    [ # Include the results of the hardware scan.
      ./hardware-configuration.nix
      inputs.home-manager.nixosModules.default
      ./main-user.nix
    ];

  #fileSystems."/mnt/arch" =
  #  { device = "/dev/disk/by-uuid/72db20ba-4dbd-4fb7-891c-b457e2cf9648";
  #    fsType = "btrfs";
  #    options = [ "subvol=5" ];
  #  };
  #fileSystems."/mnt/arch/home" =
  #  { device = "/dev/disk/by-uuid/4eda05c2-d434-495d-97a0-8a81e8a533ec";
  #    fsType = "btrfs";
  #    options = [ "subvol=5" ];
  #  };
  #fileSystems."/mnt/bulk" =
  #  { device = "/dev/disk/by-uuid/xxxx";
  #    fsType = "ext4";
  #  };
  #fileSystems."/mnt/slow" =
  #  { device = "/dev/disk/by-uuid/xxxx";
  #    fsType = "etx4";
  #  };
  boot.initrd.luks.devices."nvme2n1p2_oldcrypt".device = "/dev/disk/by-uuid/44235dca-99e8-4ea8-9516-97d9f5a2d702";
  boot.kernelModules = [ "kvm-amd" "nct6775" ];
  
  services.fwupd.enable = true;
  services.hardware.openrgb.enable = true;
  # Add flakes
  nix.settings.experimental-features = [ "nix-command" "flakes" ];

  # Feel like I should be sure this is safe w/flakes first:
  #system.autoUpgrade.enable = true;
  # sets up things so envs can do shebang whatever
  # instead of #!/usr/bin/env whatever
  #services.envfs.enable = true;

  # Bootloader.
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;

  # System name
  networking.hostName = "supercell"; # Define your hostname.
  # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.

  # Configure network proxy if necessary
  # networking.proxy.default = "http://user:password@proxy:port/";
  # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";

  # Enable networking
  networking.networkmanager.enable = true;

  # Set your time zone.
  time.timeZone = "America/New_York";

  # Select internationalisation properties.
  i18n.defaultLocale = "en_US.UTF-8";

  i18n.extraLocaleSettings = {
    LC_ADDRESS = "en_US.UTF-8";
    LC_IDENTIFICATION = "en_US.UTF-8";
    LC_MEASUREMENT = "en_US.UTF-8";
    LC_MONETARY = "en_US.UTF-8";
    LC_NAME = "en_US.UTF-8";
    LC_NUMERIC = "en_US.UTF-8";
    LC_PAPER = "en_US.UTF-8";
    LC_TELEPHONE = "en_US.UTF-8";
    LC_TIME = "en_US.UTF-8";
  };

  # Enable the X11 windowing system.
  # You can disable this if you're only using the Wayland session.
  # services.xserver.enable = true;

  # Enable the KDE Plasma Desktop Environment.
  services.displayManager.sddm.enable = true;
  services.displayManager.sddm.wayland.enable = true;
  services.desktopManager.plasma6.enable = true;

  # Configure keymap in X11 (presumably, XWayland uses something different?)
  #services.xserver.xkb = {
  #  layout = "us";
  #  variant = "";
  #};

  # Enable CUPS to print documents.
  # ...no. Recent security issues, prefer disabled
  # apps like e.g. LibreOffice can still generate pdf's (e.g. to stand in [generally] for Print to pdf)
  # services.printing.enable = true;

  # Enable sound with pipewire.
  hardware.pulseaudio.enable = false;
  security.rtkit.enable = true;
  services.pipewire = {
    enable = true;
    alsa.enable = true;
    alsa.support32Bit = true;
    pulse.enable = true;
    # If you want to use JACK applications, uncomment this
    #jack.enable = true;

    # use the example session manager (no others are packaged yet so this is enabled by default,
    # no need to redefine it in your config for now)
    #media-session.enable = true;
  };

  # Enable touchpad support (enabled default in most desktopManager).
  # services.xserver.libinput.enable = true;
  # Define a user account. Don't forget to set a password with ‘passwd’.
  # Note that extraGroups overrides the module defaults entirely (they don't merge...probably a lib.* thing for that?)
  # Pull defaults from main-user:
  main-user.enable = true;
  main-user.userName = "wolcen";
  # And system-specific settings:
  users.users.wolcen = {
    description = "Chris Thompson";
    openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEdxdKYrlwOolJpYxvWu6gW/60pzT6aKN6JHhnTSBFqN wolcen@typhoon" ];
    extraGroups = [ "networkmanager" "wheel" "docker" "dialout" ];
  };

  home-manager = {
    extraSpecialArgs = { inherit inputs; };
    users = {
      "wolcen" = import ./home.nix;
    };
  };
  
  # Install firefox.
  programs.firefox.enable = true;
  # Add docker!
  virtualisation.docker.enable = true;
  virtualisation.docker.storageDriver = "btrfs"; # Only when using BTRFS! (wolcen approved!)

  # Required for DDEV to add hosts files, if your DNS will not resolve addresses to localhost.
  # Some firewall DNS resolvers will NOT allow an externally resolved domain name to resolve to a reserved IP (e.g. localhost).
  # This is a security protection method that can assist attackers with discovery of a LAN.
  # With fpSense, you can tell unbound (or dnsmasq) to resolve *.ddev.site to 127.0.0.1 and remove this mode statement
  # See https://docs.netgate.com/pfsense/en/latest/services/dns/wildcards.html
  # environment.etc.hosts.mode = "0644";

  # For xdebug...verify actual necessity
  # Have had to use this, but I think it can be disabled still - perhaps w/xdebug binding setting...don't know.
  networking.firewall.allowedTCPPorts = [ 9003 ];
  # Allow unfree packages
  nixpkgs.config.allowUnfree = true;

  # List packages installed in system profile. To search, run:
  # $ nix search wget
  environment.systemPackages = with pkgs; [
    neovim # next gen vim w/lua
    wget # url fetcher/spider
    curl # url fetcher
    tmux # terminal multiplexer
    whois # net ip/dns lookup
    meld # file diff'r
    wl-clipboard-rs # rust implementation of wayland clipboard cli
    dogdns # a better dig cmd
    bat # a better cat command
    nix-search-cli # search the nix repo
    lsof # show open file handles
    eza # a better ls
    lm_sensors # hardware monitoring (e.g. temps)
    btop # cli sys monitor
    amdgpu_top # top-like monitor for AMD GPUs
    direnv # autoload .envrc files
    zoxide # directory navigator (z)
    nextcloud-client # next cloud UI
    file # show file types
    tldr # cli command summary
    stress # system workload generator
    dmidecode # system settings provider (e.g. bios)
    jq # json query
    niv # dependency cli for nix-shell
    openrgb-with-all-plugins # colors hardware control
    just # command runner like make
    #ansible # configuration management system/automation tool
    kdePackages.kcachegrind # analyze xdebug output
    libreoffice-qt # libreoffice - qt is best for KDE
    hunspell # spell checking
    hunspellDicts.en_US # spell check dictionary
    #corectl # this doesn't exist????
    magic-wormhole # transfer files with ease
    screen # terminal multiplexer...from GNU
    gnumake # build automation tool
    #git-open # open the url of the project in web
    diffr # another diff hilighting tool
    brave # privacy oriented browser
    zig # the zig language
  ];
  programs.git = {
    enable = true;
    lfs.enable = true;
  };
  # Orchestrator for FOSS VR stack
  #programs.envision = {
  #  enable = true;
  #  openFirewall = true; # This is set true by default
  #};
  nixpkgs.config.permittedInsecurePackages = [
    "electron-27.3.11"
  ];

  #fonts = {
  #  fontconfig.enable = true;
  #  enableFontDir = true;
  #  enableGhostscriptFonts = true;
  #  fonts = with pkgs; [
  #    corefonts
  #    dejavu_fonts
  #    inconsolata
  #    source-han-sans-japanese
  #    source-han-sans-korean
  #    source-han-sans-simplified-chinese
  #    source-han-sans-traditional-chinese
  #    ubuntu_font_family
  #  ];
  #};
  # Some programs need SUID wrappers, can be configured further or are
  # started in user sessions.
  # programs.mtr.enable = true;
  # programs.gnupg.agent = {
  #   enable = true;
  #   enableSSHSupport = true;
  # };

  # List services that you want to enable:

  # Enable the OpenSSH daemon.
  services.openssh.enable = true;
  services.openssh.ports = [ 2112 ]; # must be a list...for some reason.
  # Enable mobile shell (for roaming, intermittent connectivity, etc)
  programs.mosh.enable = true;

  # RX 6700 XT setup
  hardware.graphics.extraPackages = [
    pkgs.rocmPackages.clr.icd
    pkgs.amdvlk
    pkgs.libva
  ];
  # To enable Vulkan support for 32-bit applications, also add:
  hardware.graphics.extraPackages32 = [
    pkgs.driversi686Linux.amdvlk
  ];
    
  # Force radv
  environment.variables.AMD_VULKAN_ICD = "RADV";
  # Or
  #environment.variables.VK_ICD_FILENAMES =
  #	"/run/opengl-driver/share/vulkan/icd.d/radeon_icd.x86_64.json";

  # Steam
  programs.steam = {
    enable = true;
    remotePlay.openFirewall = true; # Open ports in the firewall for Steam Remote Play
    dedicatedServer.openFirewall = true; # Open ports in the firewall for Source Dedicated Server
    localNetworkGameTransfers.openFirewall = true; # Open ports in the firewall for Steam Local Network Game Transfers
  };
  # VR
  #Commmand: `renice -20 -p $(pgrep monado)` may help w/issues
  services.monado = {
    enable = true;
    defaultRuntime = true; # Register as default OpenXR runtime
    #environment.WMR_HANDTRACKING = "1"; # Enable for hand tracking
    #environment.U_PACING_COMP_MIN_TIME_MS = "5"; # This is a tweak for something...I forgot
  };
  # allow clock adjustments/priority change, etc (gamemoderun ./game)
  # https://wiki.nixos.org/wiki/GameMode
  programs.gamemode.enable = true; # for performance mode
  #programs.java.enable = true;
  #programs.steam.package = pkgs.steam.override { withJava = true; };

  programs.steam.gamescopeSession.enable = true;

  # Open ports in the firewall.
  # networking.firewall.allowedTCPPorts = [ ... ];
  # networking.firewall.allowedUDPPorts = [ ... ];
  # Or disable the firewall altogether.
  # networking.firewall.enable = false;

  # This value determines the NixOS release from which the default
  # settings for stateful data, like file locations and database versions
  # on your system were taken. It‘s perfectly fine and recommended to leave
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
  system.stateVersion = "24.05"; # Did you read the comment?

}