dotnix-archive/machines/chai/default.nix

{ pkgs, ... }:
let username = "jolheiser";
in {
  imports = [ ./hardware.nix ../common ];

  boot = {
    kernelPackages = pkgs.linuxPackages_latest;
    kernelParams = [ "quiet" "splash" ];
    loader.efi.canTouchEfiVariables = true;
    loader.systemd-boot.enable = true;
    initrd.systemd.enable = true;
  };

  hardware = { bluetooth.enable = true; };

  networking = {
    hostName = "chai";
    networkmanager.enable = true;
    firewall.enable = true;
  };

  boot.initrd.luks.devices = {
    "luks-83586073-35f8-438d-9203-99f1e966c2ca" = {
      device = "/dev/disk/by-uuid/83586073-35f8-438d-9203-99f1e966c2ca";
      keyFile = "/crypto_keyfile.bin";
    };
  };

  services = {
    blueman.enable = true;
    pcscd.enable = true;
    openssh = {
      enable = true;
      settings = { X11Forwarding = true; };
    };
  };

  virtualisation.docker.enable = true;

  users.users."${username}" = {
    extraGroups = [ "wheel" "docker" ];
    isNormalUser = true;
    shell = pkgs.nushell;
  };

  environment.systemPackages = with pkgs; [
    globalprotect-openconnect
    jetbrains.pycharm-professional
    jetbrains.idea-ultimate
    jetbrains.datagrip
    subversion
    teams
    xorg.xauth
  ];

  system.stateVersion = "22.11";
}