nix/nixos/t14/configuration.nix

{
pkgs,
attrs,
...
}: let
  # Horrid workaround for https://github.com/nix-community/home-manager/issues/1011
  homeManagerSessionVars = "/etc/profiles/per-user/${attrs.username}/etc/profile.d/hm-session-vars.sh";
in {
  imports = [
    ./hardware-configuration.nix
    ./backups.nix
  ];
  environment = {
    systemPackages = with pkgs; [
      cryptsetup
      nfs-utils
      nerdctl
    ];
    extraInit = "[[ -f ${homeManagerSessionVars} ]] && source ${homeManagerSessionVars} && echo 'x' > /tmp/test";
  };

  boot = {
    loader.systemd-boot.enable = true;
    loader.efi.canTouchEfiVariables = true;
    kernelPackages = pkgs.linuxPackages_latest;
  };
  # Networking
  networking = {
    hostId = "1185c58e";
    nameservers = ["9.9.9.9" "1.1.1.1"];
    networkmanager = {
      enable = true;
      dns = "systemd-resolved";
    };
    firewall = {
      enable = true;
      allowedTCPPorts = [11111];
      allowedUDPPorts = [];
      trustedInterfaces = ["tailscale0"];
      logRefusedConnections = true;
    };
  };

  # Services
  virtualisation = {
    containerd = {
      enable = true;
    };
  };

  security.pam.services.swaylock = {};
  xdg.portal = {
    enable = true;
    xdgOpenUsePortal = false;
    extraPortals = [pkgs.xdg-desktop-portal-gtk];
  };
  programs = {
    light.enable = true;
    hyprland.enable = true;
    ssh = {
      startAgent = true;
    };
    steam.enable = true;
    adb.enable = true;
    fish.enable = true; #enable vendor completions
  };

  # workaround for wait-online killing nixos build
  systemd.services.NetworkManager-wait-online = {
    serviceConfig = {
      ExecStart = ["" "${pkgs.networkmanager}/bin/nm-online -q"];
    };
  };

  hardware = {
    graphics = {
      enable = true;
      enable32Bit = true;
      extraPackages = [
        pkgs.mesa
        pkgs.amdvlk
        pkgs.libGL
      ];
    };
    ledger.enable = true;
  };
  services = {
    resolved = {
      enable = true;
      fallbackDns = [
        "1.1.1.1"
      ];
    };
    tailscale.enable = true;
    pipewire = {
      enable = true;
      alsa.enable = true;
      pulse.enable = true;
    };
    dbus.enable = true;

    tlp = {
      enable = true;
      settings = {
        START_CHARGE_THRESH_BAT0 = 40;
        STOP_CHARGE_THRESH_BAT0 = 80;
        CPU_BOOST_ON_AC = 1;
        CPU_BOOST_ON_BAT = 0;
        CPU_SCALING_GOVERNOR_ON_AC = "performance";
        CPU_SCALING_GOVERNOR_ON_BAT = "powersave";
        CPU_ENERGY_PERF_POLICY_ON_BAT = "power";
        CPU_ENERGY_PERF_POLICY_ON_AC = "performance";
        PLATFORM_PROFILE_ON_BAT = "low-power";
        PLATFORM_PROFILE_ON_AC = "performance";

        CPU_MIN_PERF_ON_AC = 0;
        CPU_MAX_PERF_ON_AC = 100;
        CPU_MIN_PERF_ON_BAT = 0;
        CPU_MAX_PERF_ON_BAT = 20;
      };
    };
    ratbagd.enable = true; # Logitech
    keyd = {
      enable = true;
      keyboards = {
        default = {
          ids = ["*"];
          settings = {
            main = {
              pause = "timeout(esc, 150, space)";
              scrolllock = "layer(shift)";
            };
          };
        };
      };
    };
    udev.packages = [
      pkgs.ledger-udev-rules
      pkgs.trezor-udev-rules
    ];

    trezord.enable = true;
    udisks2.enable = true; # kindle
  };
  fonts = {
    # Set a sane system-wide default font
    packages = with pkgs; [
      nerd-fonts.ubuntu-mono
      spleen
    ];
    fontconfig.defaultFonts.monospace = ["UbuntuMono"];
  };
  system.stateVersion = "22.11";
}