nixos-config/nixos/configuration.nix

# This is your system's configuration file.
# Use this to configure your system environment (it replaces /etc/nixos/configuration.nix)
{ inputs, lib, config, pkgs, ... }: {
  imports = [
    ../common/variables.nix
    ./greetd.nix
    ./bootloader.nix
    ./nvidia.nix
    ./fonts.nix
    ./services/laptop.preset.nix
    ./virtualisation.nix
    #./dwm
    #./spec.nix
    ./hardware-configuration.nix
    #./custom-hosts.nix
  ];
  # Virtual cam settings: see https://wiki.nixos.org/wiki/OBS_Studio#Using_the_Virtual_Camera
  environment.sessionVariables = {
    GDK_SCALE = config.displayScale;
    FLAKE = config.myConfigLocation;
    MANPAGER = "nvim +Man!";
    NVD_BACKEND = "direct";
    NIXOS_OZONE_WL = "1";
    # GTK_IM_MODULE = lib.mkForce "";
  };
  /* services.jellyfin = {
       enable = true;
       openFirewall = true;
     };
  */
  services.displayManager.sddm.enable = true;
  services.displayManager.sddm.wayland.enable = true;
  services.desktopManager.plasma6.enable = true;
  services.keyd = {
    enable = true;
    keyboards = {
      default = {
        ids = [ "*" ];
        settings = {
          main = {
            capslock = "esc";
            esc = "capslock";
          };
        };
        extraConfig = "";
      };
    };
  };
  programs.gnupg.agent = {
    enable = true;
    pinentryPackage = pkgs.pinentry-gnome3;
    enableSSHSupport = true;
  };
  programs.gamescope = {
    enable = true;
    capSysNice = true;
  };
  security.pam.services.hyprlock = { };
  i18n.inputMethod = {
    type = "fcitx5";
    enable = true;
    fcitx5.addons = with pkgs; [
      fcitx5-mozc
      fcitx5-gtk
      fcitx5-rime
      fcitx5-chinese-addons
    ];
    #enabled = "ibus";
    #ibus.engines = with pkgs.ibus-engines; [rime];
  };
  #programs.hyprland = { enable = true; };
  hardware.bluetooth = {
    enable = true;
    powerOnBoot = true;
    settings = { General = { Disable = "Handsfree,Headset"; }; };
  };
  #specialisation = {
  #  in-china.configuration = {
  #    networking.proxy = {
  #      default = "http://127.0.0.1:7897/";
  #      noProxy = "127.0.0.1,localhost,internal.domain";
  #    };
  #  };
  #};
  xdg.portal = {
    enable = true;
    extraPortals = with pkgs; [ xdg-desktop-portal-gtk ];
    config = { common.default = [ "gtk" ]; };
  };
  systemd.user.services.mpris-proxy = {
    description = "Mpris proxy";
    after = [ "network.target" "sound.target" ];
    wantedBy = [ "default.target" ];
    serviceConfig.ExecStart = "${pkgs.bluez}/bin/mpris-proxy";
  };
  programs = {
    steam = {
      enable = true;
      remotePlay.openFirewall =
        true; # Open ports in the firewall for Steam Remote Play
      dedicatedServer.openFirewall =
        true; # Open ports in the firewall for Source Dedicated Server
      localNetworkGameTransfers.openFirewall =
        true; # Open ports in the firewall for Steam Local Network Game Transfers
      extraCompatPackages = with pkgs; [ proton-ge-bin ];
    };
    gamemode.enable = true;
  };
  boot = {
    extraModulePackages = with config.boot.kernelPackages; [ v4l2loopback ];
    extraModprobeConfig = ''
      options v4l2loopback devices=1 video_nr=1 card_label="OBS Cam" exclusive_caps=1
    '';
    kernelPackages = pkgs.linuxPackages_zen;
    supportedFilesystems = [ "ntfs" ];
  };
  documentation = {
    enable = true;
    dev.enable = true;
    doc.enable = true;
    man.enable = true;
  };
  security.polkit.enable = true;
  environment.systemPackages = with pkgs; [
    man-pages-posix
    man-pages
    (pass-wayland.withExtensions (exts: [ exts.pass-otp exts.pass-import ]))
    gparted
    zed-editor
    libsForQt5.qt5.qtquickcontrols2
    libsForQt5.qt5.qtgraphicaleffects
    /* (blender.override {
       cudaSupport = true;
       })
    */
    trash-cli
    #inputs.hyprswitch.packages.x86_64-linux.default
  ];
  # turned off because timedatectl doesn't like it
  time.hardwareClockInLocalTime = false;
  time.timeZone = "Asia/Shanghai";
  services = {
    #displayManager.sddm = {
    #  enable = true;
    #  wayland.enable = true;
    #  theme = "${import ./sddm-theme.nix {inherit pkgs;}}";
    #};
    #automatic-timezoned.enable = true;
    pcscd.enable = true;

    openssh = {
      enable = true;
      settings = {
        PermitRootLogin = "no";
        PasswordAuthentication = false;
      };
    };

    gnome.gnome-keyring.enable = true;
  };
  #programs.sway = {
  #	enable = true;
  #	wrapperFeatures.gtk = true;
  #};
  nixpkgs = {
    overlays = [ ];
    config = {
      cudaSupport = true;
      allowUnfree = true;
      permittedInsecurePackages = [ "dotnet-core-combined" ];
    };
  };

  nix =
    let flakeInputs = lib.filterAttrs (_: lib.isType "flake") inputs;
    in {
      settings = {
        experimental-features = "nix-command flakes";
        # flake-registry = "";
        nix-path = config.nix.nixPath;
      };
      extraOptions = ''
        trusted-users = root stvnliu
      '';
      channel.enable = false;
      registry = lib.mapAttrs (_: flake: { inherit flake; }) flakeInputs;
      nixPath = lib.mapAttrsToList (n: _: "${n}=flake:${n}") flakeInputs;
    };

  systemd.network.wait-online.enable = false;
  networking = {
    hostName = "${config.myHostName}";
    networkmanager.enable = true;
    useNetworkd = lib.mkDefault true;
    useDHCP = lib.mkDefault true;
  };
  users.users = {
    "${config.myUserName}" = {
      initialPassword = "stevenpassword";
      isNormalUser = true;
      openssh.authorizedKeys.keys = [ ];
      packages = with pkgs; [ nh ];
      extraGroups = [ "wheel" "input" "networkmanager" ];
    };
    "xi_jinping" = {
      initialPassword = "bingchilling";
      isNormalUser = true;
      packages = with pkgs; [ git ];
      extraGroups = [ "input" ];
    };
  };
  # https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion
  system.stateVersion = "24.05";
}