dotnix/machines/chai/default.nix

{pkgs, ...}: let
  username = "jolheiser";
in {
  imports = [./hardware.nix ../common];

  boot = {
    kernelPackages = pkgs.linuxPackages_latest;
    kernelParams = ["quiet" "splash"];
    loader.efi.canTouchEfiVariables = true;
    loader.systemd-boot.enable = true;
    initrd.systemd.enable = true;
  };

  hardware = {bluetooth.enable = true;};

  networking = {
    hostName = "chai";
    networkmanager.enable = true;
    firewall.enable = true;
  };

  boot.initrd.luks.devices = {
    "luks-83586073-35f8-438d-9203-99f1e966c2ca" = {
      device = "/dev/disk/by-uuid/83586073-35f8-438d-9203-99f1e966c2ca";
      keyFile = "/crypto_keyfile.bin";
    };
  };

  services = {
    blueman.enable = true;
    pcscd.enable = true;
    openssh = {
      enable = true;
      settings = {X11Forwarding = true;};
    };
  };

  virtualisation.docker.enable = true;

  users.users."${username}" = {
    extraGroups = ["wheel" "docker"];
    isNormalUser = true;
    shell = pkgs.nushell;
  };

  nixpkgs.config.permittedInsecurePackages = [
    "nodejs-16.20.1"
  ];
  environment.systemPackages = with pkgs; [
    globalprotect-openconnect
    jetbrains.pycharm-professional
    jetbrains.idea-ultimate
    jetbrains.datagrip
    teams-for-linux
    xorg.xauth

    # Custom packages
    (callPackage ../../pkgs/prospect-mail {})
  ];

  system.stateVersion = "22.11";
}