configuration.nix

{ pkgs, wayland, ... }:

{
  imports =
    [
      ./hardware-configuration.nix
    ];

  containers.tor = import ./containers/tor.nix;
  containers.i2p = import ./containers/i2p.nix;

  environment.sessionVariables = if wayland then {
    NIXOS_OZONE_WL = "1";
  } else {};

  nix.settings.experimental-features = [
    "nix-command"
    "flakes"
  ];

  # Bootloader
  boot.loader = {
    systemd-boot.enable = false;
    efi = {
      canTouchEfiVariables = true;
      efiSysMountPoint = "/boot"; # ← use the same mount point here.
    };
    grub = {
      enable = true;
      efiSupport = true;
      # efiInstallAsRemovable = true; # in case canTouchEfiVariables doesn't work for your system
      devices = [ "nodev" ];
      useOSProber = true;
    };
  };

  # Enable networking
  networking.hostName = "nixos"; # Define your hostname.
  networking.networkmanager.enable = true;

  # Set your time zone.
  time.timeZone = "Europe/Paris";

  # Select internationalisation properties.
  i18n.defaultLocale = "fr_FR.UTF-8";

  i18n.extraLocaleSettings = {
    LC_ADDRESS = "fr_FR.UTF-8";
    LC_IDENTIFICATION = "fr_FR.UTF-8";
    LC_MEASUREMENT = "fr_FR.UTF-8";
    LC_MONETARY = "fr_FR.UTF-8";
    LC_NAME = "fr_FR.UTF-8";
    LC_NUMERIC = "fr_FR.UTF-8";
    LC_PAPER = "fr_FR.UTF-8";
    LC_TELEPHONE = "fr_FR.UTF-8";
    LC_TIME = "fr_FR.UTF-8";
  };

  # Hyprland
  programs.hyprland = {
    enable = false;
    xwayland.enable = true;
  };

  # Enable sound
  security.rtkit.enable = true;
  services.pipewire = {
    enable = true;
    alsa.enable = true;
    alsa.support32Bit = true;
    pulse.enable = true;
    wireplumber.enable = true;
    configPackages = [
    	(pkgs.writeTextDir "share/wireplumber/bluetooth.lua.d/51-bluez-config.lua" ''
		bluez_monitor.properties = {
          ["bluez5.enable-sbc-xq"] = true,
          ["bluez5.enable-msbc"] = true,
          ["bluez5.enable-hw-volume"] = true,
          ["bluez5.headset-roles"] = "[ hsp_hs hsp_ag hfp_hf hfp_ag ]"
		    }
	    '')
    ];
  };

  # OpenSSH
  programs.ssh.startAgent = true;
  services.gnome.gnome-keyring.enable = true;

  # X11
  services.xserver = {
    enable = true;

    desktopManager = {
      xterm.enable = false;
    };

    windowManager.dwm = {
      enable = true;
      package = pkgs.dwm.override {
        conf = ./dwm.h;
        patches = [
          ./patches/dwm/remove-dmenu.diff
        ];
      };
    };

    # displayManager.gdm.enable = true;
    displayManager.lightdm = {
      enable = true;
      extraConfig = ''
        logind-check-graphical=true
      '';
    };
    displayManager.sessionCommands = ''
      ${(pkgs.dwmblocks.override {
        conf = ./dwmblocks.h;
      })}/bin/dwmblocks &
    '';

    xkb = {
      layout = "fr";
      variant = "";
    };
  };

  services.libinput = if wayland then {} else {
    enable = true;
    touchpad.naturalScrolling = true;
  };

  xdg.portal = {
    enable = true;
    config.common.default = "gtk";
    extraPortals = with pkgs; [ xdg-desktop-portal-gtk ];
  };

  hardware.bluetooth.enable = true;
  hardware.bluetooth.powerOnBoot = true;

  # Fonts
  fonts = let nerd = ((import ./fonts.nix) pkgs) pkgs.victor-mono; in {
    packages = with pkgs; [
      noto-fonts
      noto-fonts-cjk
      noto-fonts-emoji
      roboto
      nerd
    ];
    fontconfig = {
      defaultFonts = {
        sansSerif = [ "Roboto" ];
        monospace = [ "Victor Mono" ];
      };
    };
  };

  # Configure console keymap
  console.keyMap = "fr";

  nixpkgs.config.allowUnfree = true;

  virtualisation.docker.enable = true;

  programs.dconf.enable = true;

  # Define a user account
  programs.zsh.enable = true;
  users.users.josephd = {
    isNormalUser = true;
    description = "Joseph DALY";
    extraGroups = [ "networkmanager" "wheel" "docker" "audio" ];
    shell = pkgs.zsh;
  };

  # List packages installed in system profile
  environment.systemPackages = with pkgs; [
    zip unzip # archives
    feh mpv # multimedia
    bash gcc wget glib ripgrep sops # other
  ];

  environment.pathsToLink = [ "/share/zsh" ];

  services.resolved.enable = true;
  services.mullvad-vpn = {
    enable = true;
    enableExcludeWrapper = false;
  };

  # This value determines the NixOS release from which the default
  # settings for stateful data, like file locations and database versions
  # on your system were taken. It‘s perfectly fine and recommended to leave
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
  system.stateVersion = "23.05"; # Did you read the comment?
}